This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/tC7UKeB8w3xTexAmTW3uJLnKirU.asa
File:                     tC7UKeB8w3xTexAmTW3uJLnKirU.asa (raw, json)
Hash identifier:          hTiLsx0u487b825D9HiMcTVOtYWcOz5Jbvfe4xvPGy0=
Subject key identifier:   B4:2E:D4:29:E0:7C:C3:7C:53:7B:10:26:4D:6D:EE:24:B9:CA:8A:B5
Certificate issuer:       /CN=06079c429a7146f1f9aa049bdb42ca95144b74da
Certificate serial:       019B70942C980F6B2F0FA6D1FADA6BDD42D3
Authority key identifier: 06:07:9C:42:9A:71:46:F1:F9:AA:04:9B:DB:42:CA:95:14:4B:74:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BgecQppxRvH5qgSb20LKlRRLdNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/tC7UKeB8w3xTexAmTW3uJLnKirU.asa
Signing time:             Tue 30 Dec 2025 18:45:17 +0000
ASPA not before:          Tue 30 Dec 2025 18:45:17 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            13020
Providers:                AS: 50472
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BgecQppxRvH5qgSb20LKlRRLdNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:70:94:2c:98:0f:6b:2f:0f:a6:d1:fa:da:6b:dd:42:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06079c429a7146f1f9aa049bdb42ca95144b74da
        Validity
            Not Before: Dec 30 18:45:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b42ed429e07cc37c537b10264d6dee24b9ca8ab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fc:57:6a:1e:bb:c7:fd:cd:81:7c:91:be:21:
                    8e:53:96:c3:ab:e1:11:d6:53:5c:52:6e:e5:c5:cf:
                    be:2a:7d:89:ec:de:8a:8b:a8:13:8d:65:31:46:02:
                    30:5d:5c:99:d6:4f:ee:08:e7:02:9f:80:1a:4f:a8:
                    84:67:46:af:34:29:25:40:c3:de:fb:ef:68:ab:46:
                    eb:71:8a:64:fa:53:3a:40:7e:56:a4:92:db:74:ea:
                    d5:fd:69:5b:dc:45:3b:5d:d4:3f:1b:11:88:a7:da:
                    81:eb:28:84:6e:17:bb:99:14:7f:0a:a3:62:e5:9d:
                    0a:df:cf:93:88:71:58:7c:59:9f:fc:03:ef:04:a7:
                    f1:79:8f:a3:e3:43:e2:75:5c:03:02:fb:ef:e7:1c:
                    f9:2c:36:43:e0:4f:56:c4:9a:96:09:45:e4:fe:a1:
                    bc:b2:6d:d9:ef:7b:d0:70:64:0d:42:80:dd:30:7b:
                    a0:a2:5a:44:9e:e7:fe:5e:8f:c6:56:73:f1:ea:f5:
                    ac:02:19:11:96:2d:13:8a:ae:f7:d4:b3:a5:eb:3b:
                    38:57:b0:50:e3:8b:01:19:fd:8c:45:6a:11:22:c9:
                    7b:a5:92:eb:8f:f2:a5:d5:3f:b8:4d:75:bf:cc:b7:
                    fc:39:e5:63:d6:05:20:e7:6e:59:ad:3f:6f:ef:2a:
                    d8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:2E:D4:29:E0:7C:C3:7C:53:7B:10:26:4D:6D:EE:24:B9:CA:8A:B5
            X509v3 Authority Key Identifier:
                keyid:06:07:9C:42:9A:71:46:F1:F9:AA:04:9B:DB:42:CA:95:14:4B:74:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgecQppxRvH5qgSb20LKlRRLdNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/tC7UKeB8w3xTexAmTW3uJLnKirU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13020

    Signature Algorithm: sha256WithRSAEncryption
         02:21:f7:04:97:a9:0c:10:c8:ba:96:a2:95:e9:58:43:6b:41:
         9e:48:b3:15:77:cf:f8:cc:f1:9b:95:bd:5b:bc:34:ba:7f:7e:
         d9:51:38:e8:31:68:c5:c4:f2:fb:35:10:39:34:d1:7f:b0:d7:
         55:2e:75:97:3c:a8:69:79:62:19:06:e4:6d:45:bd:12:e0:04:
         2d:cf:52:45:5e:8b:c6:1f:07:5b:0e:f0:b4:de:7f:4d:38:11:
         38:91:79:d6:36:0c:8e:29:a0:7f:93:97:c0:03:2d:d3:8c:6c:
         64:9b:90:42:f7:e5:f6:b8:b1:48:04:3d:60:d4:32:17:a2:6e:
         d2:32:60:9a:49:ae:53:6e:ce:1b:74:02:23:3a:2c:79:3f:6d:
         b7:e0:3c:25:b7:e8:f5:77:85:e3:a6:4b:04:c7:a8:68:2d:33:
         71:82:49:3a:cd:b6:a8:78:d7:09:41:9d:ba:64:73:b2:42:54:
         e1:1f:a0:08:73:ac:a9:d6:00:29:5d:e4:cf:f8:06:bc:8a:c8:
         d2:ae:d6:21:9c:f3:1d:9a:de:24:fc:08:33:61:a6:9c:b7:84:
         5f:66:d2:98:ea:db:f6:04:90:3a:ce:8a:0e:c7:e0:cc:2a:be:
         1e:e0:e8:dd:8d:dc:9f:1b:dc:68:0a:de:cf:19:fc:6f:6d:94:
         7c:bc:06:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:31:06 2026 by rpki-client