This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/dXjAuEZ8xG_k8lwu6Hj_xZmUk9A.asa
File:                     dXjAuEZ8xG_k8lwu6Hj_xZmUk9A.asa (raw, json)
Hash identifier:          znE+Vn5w5mJLLUAxXFcPNeMUExg32SuqaPEhMXXfl3w=
Subject key identifier:   75:78:C0:B8:46:7C:C4:6F:E4:F2:5C:2E:E8:78:FF:C5:99:94:93:D0
Certificate issuer:       /CN=cf6843ce15229a8023d97fa27a37e59278b2bfd7
Certificate serial:       019B2C26A84EFAF1FA5466F1AEEFABA2BE0F
Authority key identifier: CF:68:43:CE:15:22:9A:80:23:D9:7F:A2:7A:37:E5:92:78:B2:BF:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z2hDzhUimoAj2X-iejflkniyv9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/dXjAuEZ8xG_k8lwu6Hj_xZmUk9A.asa
Signing time:             Wed 17 Dec 2025 11:51:29 +0000
ASPA not before:          Wed 17 Dec 2025 11:51:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            197944
Providers:                AS: 12778
                          AS: 198524
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z2hDzhUimoAj2X-iejflkniyv9c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 10:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2c:26:a8:4e:fa:f1:fa:54:66:f1:ae:ef:ab:a2:be:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf6843ce15229a8023d97fa27a37e59278b2bfd7
        Validity
            Not Before: Dec 17 11:51:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7578c0b8467cc46fe4f25c2ee878ffc5999493d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8e:89:2b:68:62:9c:34:f7:de:be:25:fd:3c:
                    58:f6:9e:ad:bb:e2:0c:a0:a6:df:c2:55:e1:60:1d:
                    e2:47:78:16:fb:d3:2c:87:95:74:0b:cc:65:38:ed:
                    04:82:bd:ad:dc:14:10:9f:68:e5:cd:ad:d1:4e:34:
                    d4:81:83:b8:a6:12:8f:c9:4f:05:31:03:9f:ba:a7:
                    7f:17:90:61:96:41:ea:1a:47:d1:9e:51:e3:62:a1:
                    37:ea:0e:c3:1d:db:df:f6:4a:0f:ed:60:3a:c7:ed:
                    3e:c3:a0:97:24:8e:ad:da:2a:53:01:55:62:19:8b:
                    79:ee:07:fb:1b:9c:5b:f3:07:cc:b1:26:36:ef:54:
                    7f:36:e9:83:02:03:bf:30:ff:e9:0f:1d:cc:4d:63:
                    34:2c:2a:ef:2e:4d:22:7f:e1:d4:d7:ef:84:02:aa:
                    4e:ee:e4:99:79:1a:8e:f4:3b:fd:6b:04:06:8b:46:
                    ec:0f:e1:39:f9:82:ef:2b:e7:4f:f1:c8:56:d6:3f:
                    2a:25:86:fb:dd:9f:3b:a2:45:8b:62:e3:01:be:0f:
                    99:ee:2d:3d:26:02:ff:26:a6:89:47:5d:5e:fc:9b:
                    82:4e:55:36:af:c4:eb:c2:de:5b:83:52:38:83:59:
                    88:89:05:ed:d9:37:0a:70:e4:01:a7:12:3c:48:84:
                    20:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:78:C0:B8:46:7C:C4:6F:E4:F2:5C:2E:E8:78:FF:C5:99:94:93:D0
            X509v3 Authority Key Identifier:
                keyid:CF:68:43:CE:15:22:9A:80:23:D9:7F:A2:7A:37:E5:92:78:B2:BF:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2hDzhUimoAj2X-iejflkniyv9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/dXjAuEZ8xG_k8lwu6Hj_xZmUk9A.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197944

    Signature Algorithm: sha256WithRSAEncryption
         8a:c0:86:eb:21:6a:2c:91:45:9c:60:58:95:55:d7:ee:75:07:
         cb:61:d3:a1:58:ed:5d:fc:e6:86:70:8d:8e:28:26:58:e1:15:
         b2:ba:6b:ed:71:09:3a:65:fc:12:b2:89:22:f9:2d:7a:7f:8b:
         e9:bd:6e:63:5a:b9:e5:b5:22:7e:ae:64:d0:e4:fb:fa:e0:2c:
         31:64:6a:f5:a0:b1:36:05:f3:d8:63:2a:a8:a8:15:c8:ee:77:
         8a:b5:f9:dc:b3:40:f1:da:05:b2:e8:fe:07:9c:18:9e:ae:b6:
         29:b7:06:cf:f2:22:bc:08:40:0c:16:dc:97:af:0c:a7:52:7b:
         1e:0b:32:7b:a8:03:99:cf:58:11:1f:21:ec:63:96:f1:92:2e:
         21:4a:50:96:48:cf:7b:a9:4b:61:ca:ba:d4:6e:c1:b3:cd:32:
         de:98:7f:30:2f:0b:3f:a5:ee:67:c4:44:d2:ca:9b:cf:90:69:
         82:3a:35:82:e9:5f:60:61:8c:11:3d:3f:61:20:a0:0f:ae:e8:
         82:9f:37:94:a6:3d:ef:bb:48:fd:08:39:fa:75:5f:27:0d:85:
         a5:8c:02:09:7f:5b:56:be:0e:d8:3c:6f:ae:5a:56:12:aa:7b:
         46:44:31:a9:b9:29:bd:22:fd:d9:25:73:e3:f5:41:80:fd:d9:
         32:e2:22:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 18:24:18 2025 by rpki-client