This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/bc0mGww2GImeLw53tIRJtqt1goo.asa
File:                     bc0mGww2GImeLw53tIRJtqt1goo.asa (raw, json)
Hash identifier:          sLme9hQtgnCHpEldpCRLHVOEKrZFO2bAZpniqL80jV4=
Subject key identifier:   6D:CD:26:1B:0C:36:18:89:9E:2F:0E:77:B4:84:49:B6:AB:75:82:8A
Certificate issuer:       /CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Certificate serial:       019AE5C11A06C352A13B1C995957854F400C
Authority key identifier: A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/bc0mGww2GImeLw53tIRJtqt1goo.asa
Signing time:             Wed 03 Dec 2025 19:47:08 +0000
ASPA not before:          Wed 03 Dec 2025 19:47:08 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            210099
Providers:                AS: 42216
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:e5:c1:1a:06:c3:52:a1:3b:1c:99:59:57:85:4f:40:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
        Validity
            Not Before: Dec  3 19:47:08 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6dcd261b0c3618899e2f0e77b48449b6ab75828a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:80:52:4c:41:f2:46:aa:0c:96:07:c7:54:d5:
                    79:57:ed:be:97:9c:86:ad:9f:dc:ad:b1:f9:ee:33:
                    0d:a4:1e:71:71:69:7e:b1:13:79:b5:44:ee:9e:3f:
                    43:b8:d8:c1:4a:83:99:e5:ef:77:95:b6:9d:2c:99:
                    17:4a:f5:19:9d:93:a1:5d:3c:cf:19:c1:06:be:1d:
                    7a:86:cf:01:00:33:15:f2:0a:cf:d1:77:8e:ce:b0:
                    83:27:06:a1:63:24:03:70:42:0f:3f:be:9d:2c:14:
                    66:f4:95:49:25:83:1a:db:fa:4f:86:cd:60:a6:66:
                    c1:2d:a9:b7:4f:8b:28:d5:6c:0a:86:91:0e:ff:85:
                    71:f6:42:6b:cf:33:6a:e7:ad:e1:5e:59:a1:a7:7b:
                    a1:c1:9e:5b:5c:77:8f:16:01:80:0d:e9:0f:b8:cb:
                    fa:cd:f2:53:42:52:f0:6e:24:73:05:a8:17:e9:76:
                    24:e2:d7:c4:7a:55:9c:cd:be:f4:75:4a:ce:e1:1f:
                    30:7b:bf:8d:32:7c:4f:59:63:d2:30:5c:45:27:f5:
                    6b:90:8a:dc:a7:0d:9e:07:28:e5:fb:95:42:77:92:
                    d1:c4:3c:e7:92:11:f1:74:4d:1c:6d:c2:3e:af:b6:
                    75:74:31:2e:94:c6:3c:03:6d:14:57:ae:f5:5a:b5:
                    a3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:CD:26:1B:0C:36:18:89:9E:2F:0E:77:B4:84:49:B6:AB:75:82:8A
            X509v3 Authority Key Identifier:
                keyid:A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/bc0mGww2GImeLw53tIRJtqt1goo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210099

    Signature Algorithm: sha256WithRSAEncryption
         61:cd:d2:98:7e:fe:0a:81:c7:1f:9b:86:7d:bf:50:f3:68:ee:
         3c:6f:64:0f:ee:97:cd:8b:5f:81:c3:92:08:1d:44:43:35:fe:
         f2:bd:c2:1d:db:4d:92:04:86:96:a1:a1:4a:b2:c2:52:06:13:
         da:68:2e:5f:53:72:98:e0:b3:fd:33:13:b8:63:9f:94:fb:e7:
         79:69:80:73:eb:c2:93:4a:2e:30:49:a0:3b:3e:9e:26:96:23:
         1b:74:5f:b0:62:51:ab:a9:2a:da:a6:2c:70:c0:b0:f8:b2:58:
         84:66:0b:e0:11:46:27:27:5b:9f:d1:f2:db:60:89:ee:3c:b8:
         37:2c:f8:e6:b3:2e:43:fa:b7:61:70:45:9e:e5:68:ec:71:6b:
         1c:3a:a3:1b:c2:3c:ec:e2:ec:ac:91:4b:a6:ba:be:c7:f3:12:
         23:a8:a2:ab:06:af:39:c5:34:2b:8b:31:fa:d9:e1:05:31:6b:
         24:68:40:1b:dc:27:56:95:af:62:c1:c5:cf:ed:3c:d6:23:7a:
         7c:af:94:8f:de:bd:47:d7:55:b1:c6:24:07:fb:95:9d:12:3a:
         46:f5:12:67:58:b7:29:b5:e1:5c:f1:86:0c:8f:89:ff:5e:7c:
         7e:13:c2:3a:d3:21:23:4e:69:15:99:30:57:15:93:d5:c6:ab:
         be:c4:db:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:12:20 2025 by rpki-client