This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/piQLCnB2P_Ziu_cu-vigeTnpkCU.asa
File:                     piQLCnB2P_Ziu_cu-vigeTnpkCU.asa (raw, json)
Hash identifier:          cn2oaHr5CFE2Bng3VhPMgV26fdtMuwLaMTiwxHB9DSg=
Subject key identifier:   A6:24:0B:0A:70:76:3F:F6:62:BB:F7:2E:FA:F8:A0:79:39:E9:90:25
Certificate issuer:       /CN=3e5b347967cea67bb62b69d259acde4b8f9e9417
Certificate serial:       019AC474BB6287E1A1A5CB817C8E9AD4DFD9
Authority key identifier: 3E:5B:34:79:67:CE:A6:7B:B6:2B:69:D2:59:AC:DE:4B:8F:9E:94:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pls0eWfOpnu2K2nSWazeS4-elBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/piQLCnB2P_Ziu_cu-vigeTnpkCU.asa
Signing time:             Thu 27 Nov 2025 08:36:15 +0000
ASPA not before:          Thu 27 Nov 2025 08:36:15 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            202585
Providers:                AS: 37739
                          AS: 41051
                          AS: 42093
                          AS: 57866
                          AS: 200132
                          AS: 212895
                          AS: 215085
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pls0eWfOpnu2K2nSWazeS4-elBc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:c4:74:bb:62:87:e1:a1:a5:cb:81:7c:8e:9a:d4:df:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e5b347967cea67bb62b69d259acde4b8f9e9417
        Validity
            Not Before: Nov 27 08:36:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a6240b0a70763ff662bbf72efaf8a07939e99025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f0:72:05:6f:07:d5:a5:03:4b:23:97:32:e6:
                    2b:b6:62:a9:23:d6:8e:14:3d:38:2d:6d:54:d7:c1:
                    40:26:71:90:e0:c6:24:d4:1d:e1:0a:b0:5f:9a:b6:
                    48:28:3c:40:d3:50:93:32:a4:99:25:53:b9:38:78:
                    d8:35:80:a7:26:46:10:5f:71:7f:e8:34:b5:07:70:
                    fe:ef:ed:6e:c0:0c:62:b2:9c:5d:43:fe:d6:ef:49:
                    fc:37:d3:7a:0d:22:c5:2e:6a:ee:13:0f:e0:d2:52:
                    e7:03:69:44:65:95:ed:b7:76:0e:66:2a:32:ae:43:
                    4a:65:c0:72:73:51:83:4e:7d:f6:b7:9a:26:aa:6a:
                    27:73:75:09:06:ca:e6:7c:45:87:3d:df:41:db:0a:
                    7a:18:33:98:d5:0f:05:c0:52:7e:6e:56:88:7f:5d:
                    aa:57:8c:7b:7c:7e:cd:7d:16:2a:7d:b4:e3:2f:0e:
                    1f:cb:ed:2e:e7:ac:8f:a8:6e:4b:30:2a:39:68:c6:
                    bf:32:3f:89:4f:eb:a8:cd:7b:6a:92:1c:d9:0d:7a:
                    3e:84:1a:90:09:26:5b:60:78:c7:49:99:8a:cf:22:
                    5c:ba:15:c4:96:62:0c:44:57:38:56:2c:6d:3d:a5:
                    24:8c:6c:44:32:c0:29:06:64:2a:9c:81:55:a4:8e:
                    19:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:24:0B:0A:70:76:3F:F6:62:BB:F7:2E:FA:F8:A0:79:39:E9:90:25
            X509v3 Authority Key Identifier:
                keyid:3E:5B:34:79:67:CE:A6:7B:B6:2B:69:D2:59:AC:DE:4B:8F:9E:94:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pls0eWfOpnu2K2nSWazeS4-elBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/piQLCnB2P_Ziu_cu-vigeTnpkCU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202585

    Signature Algorithm: sha256WithRSAEncryption
         54:cd:87:17:02:fc:6f:2f:76:fd:e1:b3:99:dd:ea:dc:53:fe:
         c2:d4:dc:74:1c:70:82:c1:3d:78:c2:99:b0:eb:97:b2:c9:05:
         bc:88:02:91:ba:d2:9e:dc:b2:0d:18:73:22:3f:16:84:c2:66:
         25:ed:c8:03:a9:7e:fc:ee:03:65:8b:dd:fc:1f:16:48:be:29:
         98:52:72:bc:c8:da:6f:17:c9:0a:a7:a3:45:4b:fe:da:29:4a:
         18:97:6f:c4:e7:05:42:af:b8:45:0f:51:73:fb:e4:aa:65:22:
         38:c4:06:f2:dd:7b:19:57:44:c4:e6:f2:bb:18:65:4b:91:c6:
         23:a2:fc:75:ff:4a:b0:d3:89:cb:62:ad:a6:c1:b8:e9:b8:e7:
         3b:68:84:1b:80:04:ba:2e:2a:8d:52:c7:00:a1:e3:0b:73:d4:
         29:33:8e:a1:47:fc:8d:97:20:17:4a:81:e8:12:1e:2f:86:00:
         4b:98:df:e7:cf:90:5a:f6:51:94:6c:7b:d6:68:a0:f8:db:15:
         37:7b:d8:c8:6d:b0:4b:f3:89:d5:04:88:3f:81:08:1b:08:05:
         b5:86:b3:7e:00:a9:c4:09:f2:8d:28:40:24:63:29:55:b9:d5:
         df:4c:5c:80:69:d3:6b:3a:5f:51:ec:56:9c:2f:47:d1:5c:43:
         ab:3d:cc:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:11:30 2025 by rpki-client