This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/cFwV6b1vV1ohRKYYWuEDOAdg1N0.asa
File:                     cFwV6b1vV1ohRKYYWuEDOAdg1N0.asa (raw, json)
Hash identifier:          Ayfnf+ERuqktIc5tO5+JoNswSsuneeuJ+BLm8Zge0cQ=
Subject key identifier:   70:5C:15:E9:BD:6F:57:5A:21:44:A6:18:5A:E1:03:38:07:60:D4:DD
Certificate issuer:       /CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
Certificate serial:       019ADF1294BDE99573AE8A265C73425D8BD2
Authority key identifier: A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/cFwV6b1vV1ohRKYYWuEDOAdg1N0.asa
Signing time:             Tue 02 Dec 2025 12:38:48 +0000
ASPA not before:          Tue 02 Dec 2025 12:38:48 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            202945
Providers:                AS: 30781
                          AS: 34019
                          AS: 204092
                          AS: 208627
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:df:12:94:bd:e9:95:73:ae:8a:26:5c:73:42:5d:8b:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
        Validity
            Not Before: Dec  2 12:38:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=705c15e9bd6f575a2144a6185ae103380760d4dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:bd:55:dd:60:fe:41:90:21:00:af:70:3f:94:
                    48:8e:25:2c:9b:cd:4c:4f:a2:e7:83:6f:9f:42:13:
                    0d:b9:10:f9:45:3b:45:22:b8:49:e4:9a:b2:49:d5:
                    0b:bf:d8:c9:a7:68:27:cf:11:02:57:4e:b4:e1:46:
                    8f:e4:66:59:fc:5a:4a:f9:ff:7a:0e:37:08:d1:b2:
                    0a:f3:5c:ab:17:4c:3b:2e:7b:ca:a5:ab:c9:56:7d:
                    89:bb:dd:93:b1:88:c5:17:64:9b:84:ab:86:e5:2a:
                    c6:58:34:29:e6:89:21:48:9d:7f:c9:3b:04:d2:20:
                    81:a4:77:27:f3:23:a4:19:45:32:9c:8d:26:7b:5e:
                    c2:3c:fb:76:17:a1:1c:20:4a:d8:ab:88:d6:cf:c9:
                    5d:7b:17:e4:e7:05:25:d7:03:24:9a:04:bd:04:73:
                    16:a3:ff:8a:8b:4d:8c:8a:64:b5:e6:80:ae:6c:58:
                    7a:99:fc:df:eb:cf:41:13:b2:f6:7f:5c:1f:16:b3:
                    ae:8a:00:f0:de:32:d4:ad:aa:b6:74:c8:59:8f:67:
                    d6:11:cb:6c:ad:dd:78:9d:66:64:bc:36:dd:d6:01:
                    04:6f:09:31:c7:0c:45:20:da:3a:33:5f:1d:23:69:
                    b9:cd:74:94:57:93:c1:e0:5b:08:b6:76:0c:37:1b:
                    6f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:5C:15:E9:BD:6F:57:5A:21:44:A6:18:5A:E1:03:38:07:60:D4:DD
            X509v3 Authority Key Identifier:
                keyid:A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/cFwV6b1vV1ohRKYYWuEDOAdg1N0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202945

    Signature Algorithm: sha256WithRSAEncryption
         b5:c2:3a:a0:40:c6:60:32:15:2d:22:cb:64:4c:4c:1a:88:83:
         e2:df:b8:a7:58:79:90:9d:8c:ca:15:af:90:7e:b2:83:45:3f:
         74:2e:94:36:94:e8:cc:58:47:3e:88:d3:89:6e:e4:d3:c4:ac:
         e6:43:4d:1a:f6:39:c0:8e:21:87:95:46:55:4d:7b:6d:4a:6b:
         9b:3c:35:30:63:a4:2f:c0:f0:1f:2e:ce:73:2e:6c:a8:50:81:
         3e:a0:63:bf:15:be:35:de:a2:ea:33:66:36:d0:7d:6b:e6:df:
         14:f9:58:1c:85:f3:53:5b:cb:bc:6b:ba:12:b3:8b:e8:75:25:
         f9:fd:e2:51:0e:d6:f3:48:e4:6d:e9:ef:41:45:e4:8a:25:2c:
         5a:b3:e0:10:11:19:69:b7:f6:be:bf:f5:89:0d:b3:a8:1e:dd:
         09:ed:8c:aa:2e:fb:1d:e1:d0:37:a0:d5:45:3e:b4:ca:cd:c7:
         9b:30:2b:31:97:e9:6e:9b:ca:7c:80:ae:40:5c:6c:a0:4e:4d:
         ce:cf:4c:aa:15:2a:5c:9f:e6:4c:96:6b:42:b2:3e:c9:87:a3:
         70:ec:e4:ef:6c:34:41:b6:05:05:35:2c:24:34:71:83:48:00:
         54:fa:4f:73:07:91:9c:03:b8:a4:e7:90:4e:c6:ee:b8:04:0b:
         c4:2f:dd:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:11:45 2025 by rpki-client