This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/4AzH-iJI8sWiTUYTC8VHHmS8UpU.asa
File:                     4AzH-iJI8sWiTUYTC8VHHmS8UpU.asa (raw, json)
Hash identifier:          dwBM8qAJmwUvx2ChQXvyI7QlD+6hPqiqi5rWx3oHZos=
Subject key identifier:   E0:0C:C7:FA:22:48:F2:C5:A2:4D:46:13:0B:C5:47:1E:64:BC:52:95
Certificate issuer:       /CN=08bf59899b7aca30a3c7d5db93b212d98709c89b
Certificate serial:       019ADFC088B949C18DBA42371CE24817A728
Authority key identifier: 08:BF:59:89:9B:7A:CA:30:A3:C7:D5:DB:93:B2:12:D9:87:09:C8:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/4AzH-iJI8sWiTUYTC8VHHmS8UpU.asa
Signing time:             Tue 02 Dec 2025 15:48:48 +0000
ASPA not before:          Tue 02 Dec 2025 15:48:48 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            58308
Providers:                AS: 29075
                          AS: 59689
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:df:c0:88:b9:49:c1:8d:ba:42:37:1c:e2:48:17:a7:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08bf59899b7aca30a3c7d5db93b212d98709c89b
        Validity
            Not Before: Dec  2 15:48:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e00cc7fa2248f2c5a24d46130bc5471e64bc5295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3f:4f:c4:2c:4e:a0:45:ce:3d:63:07:f9:49:
                    63:45:29:6e:3d:0b:26:ca:a3:3f:ba:3c:ca:c7:be:
                    71:ae:3c:6e:88:86:17:ce:82:bf:28:35:12:a3:c7:
                    c7:0a:8b:0f:d5:1a:7a:89:88:cd:54:d3:a2:ed:9b:
                    cd:a5:a8:33:2d:47:c9:d9:57:31:6d:f7:93:38:69:
                    a9:92:75:29:93:32:93:84:fb:d2:60:33:3b:aa:a2:
                    a4:74:88:7a:c9:06:af:44:ae:86:93:79:08:5f:7f:
                    77:0e:f3:04:a2:12:b8:c7:53:58:3d:6c:0d:22:5e:
                    96:54:86:d6:d2:8e:95:bc:b2:5a:b2:14:f5:43:5e:
                    ea:ff:d5:28:27:ec:08:01:34:8c:aa:51:66:75:53:
                    3f:60:f6:e5:7d:4d:45:73:19:4d:6c:c7:25:67:50:
                    29:a7:b5:35:23:73:00:db:61:57:c9:2d:c8:35:6e:
                    fe:bc:35:c8:db:0f:8d:58:f7:54:99:9f:cd:b5:e4:
                    c7:4a:e6:ce:bd:37:71:80:93:00:7f:9d:fb:27:1a:
                    78:a2:f1:79:9a:b3:16:d7:47:3a:49:d6:0c:1b:2b:
                    90:f5:15:5b:f9:81:9f:b6:30:db:d4:55:23:36:f6:
                    1c:1c:26:a0:34:7d:6b:95:c2:40:11:7a:fc:a4:b0:
                    7f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:0C:C7:FA:22:48:F2:C5:A2:4D:46:13:0B:C5:47:1E:64:BC:52:95
            X509v3 Authority Key Identifier:
                keyid:08:BF:59:89:9B:7A:CA:30:A3:C7:D5:DB:93:B2:12:D9:87:09:C8:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/4AzH-iJI8sWiTUYTC8VHHmS8UpU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58308

    Signature Algorithm: sha256WithRSAEncryption
         2b:98:78:f5:4a:bd:97:83:ef:2c:86:ae:07:f8:36:ba:42:bc:
         1b:e1:4c:69:1e:ed:ac:a1:70:9a:ee:36:6e:49:57:fc:20:46:
         39:dd:50:b8:e8:fc:77:81:94:b0:d4:40:6a:78:43:72:06:e0:
         2b:76:50:5a:0d:e4:06:c4:33:73:f0:4c:e3:a3:70:fe:9c:d9:
         5f:f1:86:9c:a7:18:86:61:4e:14:4c:18:18:c8:b8:37:3b:b8:
         82:0d:79:b4:a9:e0:7f:70:af:13:ba:6e:14:25:8d:e8:c6:0f:
         fc:ad:4d:9d:23:c2:0b:bb:14:4f:88:54:a0:b1:8e:94:90:37:
         02:da:ee:7f:fb:5c:25:dc:25:32:75:e3:49:51:d7:78:2c:c4:
         ef:35:19:cd:b1:3b:65:45:b3:a5:ae:dc:31:90:df:e2:b6:96:
         62:f9:22:f1:8d:35:12:9c:3c:cd:55:ac:0a:38:6e:8e:5e:57:
         90:24:63:8f:37:fd:4b:35:d5:86:cd:aa:96:fb:96:1a:0f:f2:
         4f:0c:a5:a9:c5:88:26:d0:40:48:5d:cb:c5:f5:92:97:b9:de:
         bf:dc:3f:9e:c3:b5:97:f0:0b:36:7e:20:05:89:16:bd:6e:28:
         b8:31:4a:5b:f2:b4:3e:a4:92:0c:bf:f1:f7:45:c1:93:db:83:
         9e:28:1e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 05:37:25 2025 by rpki-client