This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/gWX3kYBTpsdGWz-XFKG4-fHskpY.asa
File:                     gWX3kYBTpsdGWz-XFKG4-fHskpY.asa (raw, json)
Hash identifier:          k91qnHDqELpFpBx+6uGfren0E/KV+LeyFe1m8lLl+qs=
Subject key identifier:   81:65:F7:91:80:53:A6:C7:46:5B:3F:97:14:A1:B8:F9:F1:EC:92:96
Certificate issuer:       /CN=b732762a5e861e976de53d14786f39e3a669681b
Certificate serial:       019B11F4033CCF5FE64F79FEEC2F70B3496C
Authority key identifier: B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/gWX3kYBTpsdGWz-XFKG4-fHskpY.asa
Signing time:             Fri 12 Dec 2025 09:46:02 +0000
ASPA not before:          Fri 12 Dec 2025 09:46:02 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            41327
Providers:                AS: 1299
                          AS: 3356
                          AS: 3491
                          AS: 6453
                          AS: 6762
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 09:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:11:f4:03:3c:cf:5f:e6:4f:79:fe:ec:2f:70:b3:49:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b732762a5e861e976de53d14786f39e3a669681b
        Validity
            Not Before: Dec 12 09:46:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8165f7918053a6c7465b3f9714a1b8f9f1ec9296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f6:5b:1b:09:d1:c3:da:c1:30:aa:11:a0:80:
                    f8:50:b3:cb:2b:8f:3d:14:3b:3c:a0:b2:ad:30:34:
                    1d:e6:ee:6c:e8:0f:29:7f:82:34:67:bb:b6:a7:9f:
                    c7:7c:e9:3e:86:13:64:22:ca:77:55:2d:f9:7c:26:
                    fb:5e:d7:31:cf:79:7c:9e:af:73:b1:d7:66:7f:15:
                    a6:10:7a:a4:98:60:1d:7f:f6:97:c2:71:1f:42:fa:
                    3e:57:99:6f:9e:ed:68:db:72:5d:cd:6b:d2:9c:43:
                    41:91:70:cb:40:81:b9:f7:36:32:8e:da:e2:e8:d7:
                    a1:f7:b6:9f:dd:2d:c3:25:d8:b5:ef:6a:b5:26:0f:
                    e1:42:5d:64:15:3f:ff:80:d1:ea:d3:6d:ca:50:35:
                    af:6f:35:7e:bb:da:a5:ea:81:2c:76:be:b7:0b:e2:
                    45:65:68:8f:68:b1:05:ac:af:1e:7f:ce:4f:92:e8:
                    fe:b7:11:0a:e9:64:bd:79:dc:b5:1c:54:ee:30:b0:
                    b0:1d:ca:06:54:4e:b9:3a:04:b2:62:76:3d:75:f8:
                    80:86:7e:7d:f6:92:c1:22:3b:70:58:dc:fd:54:33:
                    b7:95:73:aa:5c:4e:98:d0:3f:34:6b:71:b1:1c:43:
                    e1:76:e5:db:28:a8:c5:8b:3b:0c:fb:96:df:5c:79:
                    5b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:65:F7:91:80:53:A6:C7:46:5B:3F:97:14:A1:B8:F9:F1:EC:92:96
            X509v3 Authority Key Identifier:
                keyid:B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/gWX3kYBTpsdGWz-XFKG4-fHskpY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  41327

    Signature Algorithm: sha256WithRSAEncryption
         3c:c4:9c:d9:a1:80:5b:75:c1:5f:b3:76:18:2a:3e:a8:5b:ba:
         75:36:c9:61:94:2e:b4:b9:60:69:d5:36:f5:74:d0:92:f2:46:
         d3:5e:22:32:0f:2a:6d:56:38:f5:5c:4d:79:ab:12:2f:f3:dd:
         62:d5:e9:1e:76:3b:fb:72:0e:be:8a:ac:88:c3:68:fd:29:d0:
         3d:4c:24:bd:59:b5:4b:18:b4:84:f9:00:ab:1e:ab:a0:f8:ef:
         9e:2b:fc:91:b4:61:d1:29:e8:ed:34:c7:c2:b4:f6:bc:c4:98:
         fc:36:2c:fe:16:c4:ed:6d:87:c2:bf:c1:2a:66:3e:f2:b0:4e:
         89:37:cb:72:30:ec:25:89:0f:d6:b3:da:72:5e:b8:c7:9b:5d:
         1f:ad:02:3b:01:0d:77:cf:87:54:76:17:f7:8e:75:02:65:35:
         18:3d:60:69:ca:42:8a:fe:4c:06:c8:38:ac:25:11:04:8c:78:
         fd:3b:89:f1:17:50:64:7e:99:8d:96:6c:b2:f0:44:58:fa:fd:
         cf:3a:d5:79:20:09:3b:ce:27:99:eb:b6:05:c6:d3:a2:48:e5:
         94:2e:2f:44:d6:b2:4d:62:50:f4:af:90:57:96:4f:da:ec:ba:
         cc:61:2b:25:01:ae:6b:ec:2d:ea:ae:55:40:d7:1a:d8:ba:d5:
         1d:09:0d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 17:02:50 2025 by rpki-client