This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/az7D72m3aRzcMGuqVgsus2HYPJI.asa
File:                     az7D72m3aRzcMGuqVgsus2HYPJI.asa (raw, json)
Hash identifier:          UYH2LQP6yhA1ucYPAXvinazn/8R7Ym8Hnb5ZSwGQQiU=
Subject key identifier:   6B:3E:C3:EF:69:B7:69:1C:DC:30:6B:AA:56:0B:2E:B3:61:D8:3C:92
Certificate issuer:       /CN=7d415bee222585f2d1aafbffba795031a45129c7
Certificate serial:       019AEED247FDC2B0413BFF25E370BB794F11
Authority key identifier: 7D:41:5B:EE:22:25:85:F2:D1:AA:FB:FF:BA:79:50:31:A4:51:29:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fUFb7iIlhfLRqvv_unlQMaRRKcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/az7D72m3aRzcMGuqVgsus2HYPJI.asa
Signing time:             Fri 05 Dec 2025 14:02:29 +0000
ASPA not before:          Fri 05 Dec 2025 14:02:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            204653
Providers:                AS: 44486
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fUFb7iIlhfLRqvv_unlQMaRRKcc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:ee:d2:47:fd:c2:b0:41:3b:ff:25:e3:70:bb:79:4f:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d415bee222585f2d1aafbffba795031a45129c7
        Validity
            Not Before: Dec  5 14:02:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6b3ec3ef69b7691cdc306baa560b2eb361d83c92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:af:0e:f9:db:bf:de:27:4e:fe:23:7f:ec:71:
                    e6:30:e1:67:6e:6d:15:3f:47:15:bb:a3:b6:c2:11:
                    a6:4a:30:25:47:19:cf:f1:e2:37:25:b2:2d:cb:fc:
                    4b:73:42:e2:50:4a:48:aa:b6:34:0f:cf:4d:f5:e8:
                    68:4b:4d:f7:df:0a:34:26:aa:70:28:cd:a0:26:cb:
                    5d:fd:01:1f:06:a2:74:66:21:69:8f:ff:7a:00:d8:
                    84:39:43:dd:31:5e:4f:3c:c0:ee:4c:8d:f6:d2:f1:
                    f9:ea:3b:28:90:83:d2:1e:e5:bb:f7:8b:fe:d8:db:
                    00:2e:19:fe:92:11:02:50:fc:ce:cf:e4:c6:8f:a5:
                    79:e1:54:5b:d4:08:53:80:7d:da:4c:27:81:35:2e:
                    a9:78:d1:6f:27:fd:a4:d3:63:a6:af:a7:ee:6e:78:
                    c7:40:e9:fc:fb:e1:3c:d7:c2:e6:4c:66:e9:5e:ef:
                    ad:58:d1:bb:ad:a2:73:87:94:90:50:d6:9b:8f:29:
                    f2:c8:94:6a:b3:b0:e5:3a:a7:42:32:b4:91:d9:4b:
                    ff:bd:58:7a:91:26:92:fa:7b:85:c9:14:d7:45:3e:
                    fc:99:9d:0d:15:24:ed:92:83:26:55:14:4a:e8:c7:
                    2d:9b:74:45:ad:96:b0:80:7c:a4:4b:05:47:a9:7f:
                    41:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:3E:C3:EF:69:B7:69:1C:DC:30:6B:AA:56:0B:2E:B3:61:D8:3C:92
            X509v3 Authority Key Identifier:
                keyid:7D:41:5B:EE:22:25:85:F2:D1:AA:FB:FF:BA:79:50:31:A4:51:29:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUFb7iIlhfLRqvv_unlQMaRRKcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/az7D72m3aRzcMGuqVgsus2HYPJI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204653

    Signature Algorithm: sha256WithRSAEncryption
         68:bc:38:72:41:37:92:6a:d7:d7:9c:3b:d7:d9:22:d2:bd:fd:
         b4:06:9c:b8:40:46:95:dc:e8:8c:a5:6a:da:37:27:93:25:cf:
         8f:6d:96:28:11:4a:e1:98:68:57:e5:04:11:5b:6e:38:31:f2:
         37:d4:b7:65:ac:e6:ad:3d:c3:f7:f0:91:14:d3:85:3e:46:80:
         0e:14:ff:c2:1a:41:53:89:98:74:a3:f9:77:a2:8c:3b:8d:91:
         5a:57:4f:6d:ab:e9:d5:82:d0:60:50:a1:72:1b:3c:21:64:9c:
         dd:f8:5b:11:e9:9a:5f:fc:c3:d8:e0:eb:4c:55:7c:aa:7a:8b:
         c8:3f:3d:19:ba:92:98:28:0d:cf:0c:df:5b:e4:96:6d:29:68:
         d2:22:3c:5d:26:ed:95:21:13:dc:3a:49:c3:30:b3:8c:2e:e8:
         cb:fb:1c:4a:16:e4:0f:f6:ac:11:4a:29:94:f0:49:f5:73:3c:
         e1:31:6d:f7:7d:f0:e3:32:67:8f:7c:1c:68:1e:c9:6d:cd:fb:
         19:29:08:6a:b5:47:cd:1c:86:cc:d4:24:6f:7d:f1:7f:e9:7e:
         b1:00:13:f1:67:de:bc:c7:d6:62:c6:21:c8:eb:67:bf:a8:61:
         c7:b9:e1:07:ca:59:e2:f2:67:8b:b7:11:2d:b9:6c:6b:83:e9:
         6d:53:55:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:11:39 2025 by rpki-client