This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/hcPzerzEB3LsaQfITLA1JzcxA74.asa
File:                     hcPzerzEB3LsaQfITLA1JzcxA74.asa (raw, json)
Hash identifier:          43szG9ysU1U6k3cuN454WJEEAbDGEVxse9U+t9q9u6c=
Subject key identifier:   85:C3:F3:7A:BC:C4:07:72:EC:69:07:C8:4C:B0:35:27:37:31:03:BE
Certificate issuer:       /CN=06079c429a7146f1f9aa049bdb42ca95144b74da
Certificate serial:       019AEAF92CA352B10557756021166C4AE020
Authority key identifier: 06:07:9C:42:9A:71:46:F1:F9:AA:04:9B:DB:42:CA:95:14:4B:74:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BgecQppxRvH5qgSb20LKlRRLdNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/hcPzerzEB3LsaQfITLA1JzcxA74.asa
Signing time:             Thu 04 Dec 2025 20:06:29 +0000
ASPA not before:          Thu 04 Dec 2025 20:06:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            13020
Providers:                AS: 3320
                          AS: 15943
                          AS: 50472
                          AS: 50629
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BgecQppxRvH5qgSb20LKlRRLdNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:ea:f9:2c:a3:52:b1:05:57:75:60:21:16:6c:4a:e0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06079c429a7146f1f9aa049bdb42ca95144b74da
        Validity
            Not Before: Dec  4 20:06:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=85c3f37abcc40772ec6907c84cb03527373103be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:06:50:d4:93:1d:34:1c:cf:94:c0:44:ab:16:
                    85:9f:e6:5e:85:ad:3e:12:35:26:19:f9:b5:ec:8c:
                    ce:58:54:2c:bc:6c:c2:ce:24:a9:d4:68:31:0b:a9:
                    10:81:e7:47:38:21:9c:bc:b3:87:1c:9c:6c:ce:4c:
                    38:20:0a:90:a7:38:10:f1:f2:ee:56:58:68:ea:33:
                    5d:9c:8b:8a:42:06:62:5a:f7:62:7e:e2:46:64:0d:
                    b7:26:73:48:59:93:d1:b4:01:db:cf:08:12:fe:17:
                    87:a3:e3:7b:f6:ed:85:83:8c:12:3d:7d:79:4b:bd:
                    06:90:e8:62:c7:3c:31:cc:d9:58:4b:5b:09:57:b7:
                    81:46:b9:02:b7:8c:0a:f4:fb:af:a1:cb:06:72:b4:
                    ae:0c:c5:ec:df:b1:86:9a:e9:50:4f:85:9a:bb:40:
                    bc:42:94:e4:60:3a:cc:b3:5f:03:65:93:b4:b0:5d:
                    70:80:06:21:79:12:dd:ed:48:eb:e4:ea:fa:28:84:
                    a8:b6:69:21:07:a6:1d:c8:c9:52:87:05:7e:7d:ad:
                    f2:4f:0c:f6:9f:6a:18:b2:22:13:6a:d7:9f:43:5a:
                    bf:00:b2:c2:ad:95:8f:96:88:c7:b6:18:58:97:0c:
                    31:97:e7:10:84:11:49:cb:90:3c:8b:74:b0:cf:e1:
                    a6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C3:F3:7A:BC:C4:07:72:EC:69:07:C8:4C:B0:35:27:37:31:03:BE
            X509v3 Authority Key Identifier:
                keyid:06:07:9C:42:9A:71:46:F1:F9:AA:04:9B:DB:42:CA:95:14:4B:74:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgecQppxRvH5qgSb20LKlRRLdNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/hcPzerzEB3LsaQfITLA1JzcxA74.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13020

    Signature Algorithm: sha256WithRSAEncryption
         97:61:14:48:c9:62:84:c2:83:45:57:c9:8f:0f:e4:9a:12:75:
         57:a7:38:86:dc:c5:ea:02:6a:c1:a5:a1:14:9c:75:38:5d:be:
         6a:9a:59:5a:e4:08:b0:c8:91:0e:58:83:19:76:e1:b5:66:84:
         70:20:93:10:8c:e8:56:68:4d:80:96:2a:6c:64:87:6e:7a:52:
         05:cf:e7:55:7d:79:31:9f:c9:88:c4:79:ae:56:91:d3:b6:04:
         f0:69:5b:de:02:36:71:6e:a2:f7:dd:a9:44:b6:84:5b:b9:6b:
         72:ae:4a:0a:14:ab:c7:84:98:b5:81:30:22:6a:af:9d:07:d6:
         e2:60:f7:5d:3c:3d:8d:bd:e8:e2:0f:30:87:95:f2:ef:dd:7c:
         cd:bc:6b:43:6c:b9:80:ca:ce:f7:d2:48:30:00:66:6e:a5:5a:
         7a:02:82:0a:e2:e2:d4:3c:d6:e1:2b:51:70:33:21:dc:be:3c:
         e5:5b:35:61:73:15:0a:73:ac:58:9f:6b:20:4b:53:89:9e:96:
         d8:d2:44:77:82:fe:1f:31:b0:fc:a1:20:0c:36:17:5a:38:02:
         ed:ab:ec:e1:d3:f3:0e:e9:6a:ea:cf:00:61:cf:83:58:e8:cf:
         02:cd:52:67:66:c6:af:27:bf:17:b5:a9:21:88:81:11:97:fe:
         a0:20:5a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:12:30 2025 by rpki-client