This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/okA67YNjezSzOo_8gn-eIneCcxo.asa
File:                     okA67YNjezSzOo_8gn-eIneCcxo.asa (raw, json)
Hash identifier:          FQmpiQldGJRr0eGTeXQeQJQNu9pYJqL2NiCY/LJ/720=
Subject key identifier:   A2:40:3A:ED:83:63:7B:34:B3:3A:8F:FC:82:7F:9E:22:77:82:73:1A
Certificate issuer:       /CN=738fd9467821d05286f4b33be86176651b6aff3e
Certificate serial:       019ADB0549B2F62005461239FBDED6A7D5EE
Authority key identifier: 73:8F:D9:46:78:21:D0:52:86:F4:B3:3B:E8:61:76:65:1B:6A:FF:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c4_ZRngh0FKG9LM76GF2ZRtq_z4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/okA67YNjezSzOo_8gn-eIneCcxo.asa
Signing time:             Mon 01 Dec 2025 17:45:48 +0000
ASPA not before:          Mon 01 Dec 2025 17:45:48 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            43633
Providers:                AS: 6939
                          AS: 9002
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/c4_ZRngh0FKG9LM76GF2ZRtq_z4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/c4_ZRngh0FKG9LM76GF2ZRtq_z4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c4_ZRngh0FKG9LM76GF2ZRtq_z4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:db:05:49:b2:f6:20:05:46:12:39:fb:de:d6:a7:d5:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=738fd9467821d05286f4b33be86176651b6aff3e
        Validity
            Not Before: Dec  1 17:45:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a2403aed83637b34b33a8ffc827f9e227782731a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:49:1d:de:8c:76:df:a7:83:c4:e7:7b:e5:d7:
                    88:40:f5:83:29:81:39:6f:c8:90:c4:f1:a8:a1:ff:
                    01:47:92:9d:19:91:51:17:fd:bb:f0:c7:1d:a0:7d:
                    ce:27:d9:28:26:52:4b:da:6f:d4:63:a0:13:3b:a2:
                    2f:89:77:e3:3b:6b:e9:fd:64:82:e3:e3:9b:87:f1:
                    e0:ad:e0:36:af:ca:a4:a1:87:ec:48:06:4b:1e:32:
                    d6:44:15:98:c9:da:56:5c:83:8f:36:98:84:0c:07:
                    48:a8:56:ad:66:17:45:4e:6e:92:87:bb:8f:fc:a7:
                    c7:15:68:57:43:50:cc:cf:97:c4:5e:be:34:d0:99:
                    d7:a6:7e:4a:03:3f:5d:81:fa:ae:88:cc:d5:e0:c1:
                    d1:24:9d:57:80:bc:eb:bf:72:e4:17:5d:23:8d:92:
                    75:99:17:cf:57:34:77:5b:80:61:4f:2b:2b:34:53:
                    7e:6a:23:4d:58:77:ae:2b:e5:76:61:a7:2a:10:22:
                    3c:44:73:97:65:f4:3a:a1:0b:26:c6:46:aa:e0:ba:
                    d2:a6:30:49:73:e3:78:b5:a8:91:22:ac:a7:66:af:
                    e2:1d:5e:a4:f6:8f:cc:ee:c4:5d:3b:c1:da:86:57:
                    d8:fe:4c:be:d4:1e:1c:61:af:ac:33:3f:f9:93:e1:
                    fa:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:40:3A:ED:83:63:7B:34:B3:3A:8F:FC:82:7F:9E:22:77:82:73:1A
            X509v3 Authority Key Identifier:
                keyid:73:8F:D9:46:78:21:D0:52:86:F4:B3:3B:E8:61:76:65:1B:6A:FF:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4_ZRngh0FKG9LM76GF2ZRtq_z4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/okA67YNjezSzOo_8gn-eIneCcxo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/c4_ZRngh0FKG9LM76GF2ZRtq_z4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  43633

    Signature Algorithm: sha256WithRSAEncryption
         00:c7:e0:e4:bf:a1:33:76:62:64:99:97:f0:56:45:af:46:43:
         c6:c8:41:04:94:b4:66:5d:e2:cb:41:ab:4e:9a:91:8a:02:d6:
         08:c4:40:5b:f4:fb:2f:22:27:32:f3:6f:1f:fd:28:8a:05:e8:
         b6:2b:ee:da:c3:eb:4f:8b:b1:6c:ec:86:08:f8:10:a0:17:06:
         95:87:a8:f0:88:95:51:ec:71:0f:1c:28:57:a6:29:82:8c:71:
         e1:a4:5d:82:cc:32:84:28:fe:a8:5b:87:c8:17:45:d9:05:9a:
         a7:a6:ab:8c:25:8c:a1:cf:15:b8:64:09:e9:75:69:b4:09:1f:
         d8:d6:78:4c:be:d1:37:9d:ce:05:6f:c2:05:3f:3e:c7:dd:b5:
         8d:a8:a0:68:e9:64:d6:e0:60:88:c4:0f:1d:0e:96:f2:9a:a8:
         41:71:b2:cf:b4:2a:b6:d1:ca:52:04:1e:3c:81:4b:1a:0d:8b:
         7d:aa:23:ee:f8:bf:8e:3d:5e:30:c7:57:9b:e6:48:a5:12:64:
         1c:dc:ed:8a:f5:2c:15:bf:6e:df:e2:b0:4d:7c:64:01:8f:ca:
         25:a6:39:d6:00:10:9f:c9:ad:73:ae:d3:6f:18:ba:a4:40:78:
         a0:df:dd:06:ae:70:df:4e:06:1c:03:95:63:b9:9c:58:09:64:
         1e:b7:48:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:12:21 2025 by rpki-client