This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/ZATmFCtd8TVNPFHFtlKcgu_1kXI.asa
File:                     ZATmFCtd8TVNPFHFtlKcgu_1kXI.asa (raw, json)
Hash identifier:          ffc+j89Ft70Ls1O6VR8vGw8bdjW94XVRvBxoyjZyeVs=
Subject key identifier:   64:04:E6:14:2B:5D:F1:35:4D:3C:51:C5:B6:52:9C:82:EF:F5:91:72
Certificate issuer:       /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Certificate serial:       019B6B42CB90C957CEE440041BBC641EF971
Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/ZATmFCtd8TVNPFHFtlKcgu_1kXI.asa
Signing time:             Mon 29 Dec 2025 17:58:18 +0000
ASPA not before:          Mon 29 Dec 2025 17:58:18 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            203729
Providers:                AS: 6939
                          AS: 55207
                          AS: 200365
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:6b:42:cb:90:c9:57:ce:e4:40:04:1b:bc:64:1e:f9:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
        Validity
            Not Before: Dec 29 17:58:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6404e6142b5df1354d3c51c5b6529c82eff59172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9c:39:38:dc:d0:8a:1d:d2:79:8d:15:a9:8f:
                    da:fc:20:26:1e:2e:ca:20:c8:df:06:0d:bc:74:ca:
                    5a:22:f3:17:a8:06:f6:86:d8:3f:62:2d:dc:fd:08:
                    3f:f5:3e:fd:ec:ef:8e:f9:f7:d7:96:82:f7:ce:87:
                    84:97:ec:d6:78:14:5f:a9:b3:07:47:99:cc:a9:0c:
                    4b:84:0e:91:21:57:b3:ed:ca:13:cf:76:99:24:9e:
                    16:71:eb:a5:03:40:e6:5d:d2:a4:95:15:bf:b8:d2:
                    2b:7f:4e:92:e8:cd:e2:97:ee:3d:27:d9:1d:64:6c:
                    d1:90:fd:d3:3b:c4:61:06:34:bd:4a:66:af:92:f1:
                    15:f3:42:9c:8a:c9:e5:1a:ea:0b:a1:8b:79:7d:65:
                    cd:5a:b8:0d:59:86:46:0b:c3:f7:f5:2c:c6:20:46:
                    21:9d:5d:32:a4:cf:4c:0a:4f:6b:f1:8d:68:09:78:
                    2b:d4:ed:48:af:bf:2e:c7:4e:fd:1b:c5:e7:7c:cf:
                    df:f8:59:b3:f3:07:9e:4c:35:ad:2c:7b:f4:87:da:
                    0b:da:26:e3:94:b4:38:58:70:d4:74:b5:1c:48:ed:
                    72:e9:e6:c4:36:f0:66:77:8f:2f:30:92:17:e1:83:
                    e3:3e:01:bc:99:a1:79:1d:42:a2:33:83:65:1b:19:
                    42:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:04:E6:14:2B:5D:F1:35:4D:3C:51:C5:B6:52:9C:82:EF:F5:91:72
            X509v3 Authority Key Identifier:
                keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/ZATmFCtd8TVNPFHFtlKcgu_1kXI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203729

    Signature Algorithm: sha256WithRSAEncryption
         2d:b4:d0:b4:f6:61:d1:97:b5:4e:24:06:6e:23:56:8d:ab:79:
         55:d5:a2:1e:65:52:c4:52:2b:d3:e9:ff:d7:56:cd:af:b1:df:
         2b:92:53:4c:29:17:a0:cb:11:2d:02:19:d1:ae:a3:8b:b8:c4:
         a7:82:e5:e1:52:39:71:dc:cd:bf:2e:25:45:5a:59:53:e5:76:
         27:ce:60:4d:7c:0c:9c:2a:1b:d6:21:af:aa:4d:d6:08:05:d2:
         c0:f2:67:db:3e:20:35:7b:53:db:3f:ac:8e:c2:83:31:1f:12:
         6e:63:9e:5e:6b:50:22:6d:f6:e6:cd:bf:1b:a3:05:8a:c7:4e:
         2c:0a:e7:ae:fb:88:d2:27:9f:ea:a2:56:1b:f0:20:4b:91:1e:
         06:da:59:35:28:e8:03:ff:70:30:77:0a:41:7e:cd:eb:f9:2f:
         a9:37:24:65:55:30:9a:89:fc:43:9a:42:a7:9e:ac:d3:38:80:
         ac:98:3b:6a:ed:1d:43:50:81:e0:a7:ee:d9:d4:99:c3:40:16:
         36:2d:3c:02:15:e6:20:27:d3:65:61:7c:34:26:21:3f:bc:21:
         5c:4c:de:88:6c:af:52:38:66:78:e5:1f:28:59:de:a3:81:c6:
         5f:07:89:c3:55:c6:9f:96:c0:2b:00:35:fd:09:c4:69:56:10:
         b7:78:1d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:50:06 2026 by rpki-client