This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/yRudXorxnvueWEv1laK5g0QyggU.asa
File:                     yRudXorxnvueWEv1laK5g0QyggU.asa (raw, json)
Hash identifier:          uEI7+zajFcoccQxQSO5n5lK2+bMnA5xMY3cPSGH3byc=
Subject key identifier:   C9:1B:9D:5E:8A:F1:9E:FB:9E:58:4B:F5:95:A2:B9:83:44:32:82:05
Certificate issuer:       /CN=31d31ecc54b90e9dff2442b9051aa9568f306e78
Certificate serial:       019AFE0EA0A2A7895CEF461389B77616211E
Authority key identifier: 31:D3:1E:CC:54:B9:0E:9D:FF:24:42:B9:05:1A:A9:56:8F:30:6E:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MdMezFS5Dp3_JEK5BRqpVo8wbng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/yRudXorxnvueWEv1laK5g0QyggU.asa
Signing time:             Mon 08 Dec 2025 13:02:42 +0000
ASPA not before:          Mon 08 Dec 2025 13:02:42 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            47184
Providers:                AS: 0
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MdMezFS5Dp3_JEK5BRqpVo8wbng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 07:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:fe:0e:a0:a2:a7:89:5c:ef:46:13:89:b7:76:16:21:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31d31ecc54b90e9dff2442b9051aa9568f306e78
        Validity
            Not Before: Dec  8 13:02:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c91b9d5e8af19efb9e584bf595a2b98344328205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0d:01:80:96:fe:bf:a5:67:2d:21:a9:d4:84:
                    89:f2:df:85:58:60:d2:90:d2:d6:45:e9:84:d8:6e:
                    35:d0:e1:42:0e:9f:f1:ef:60:99:1b:3b:c1:8d:5b:
                    79:87:26:82:9e:f8:39:25:bd:2c:74:68:1c:aa:87:
                    4c:f6:6c:20:d8:78:6f:8b:d8:1e:1c:d3:64:ad:62:
                    87:b5:44:76:cc:f1:12:eb:29:75:d6:f6:e1:31:b7:
                    19:09:5c:3c:38:42:ec:bd:c1:b5:3a:43:1e:08:28:
                    21:50:ca:e5:04:91:4e:a3:61:39:cd:e2:2a:29:ac:
                    eb:11:37:6a:9f:f7:9a:fe:c6:7b:50:68:ae:d1:35:
                    e5:77:1f:85:26:63:bf:b1:79:a8:f0:7b:b1:0a:b8:
                    08:20:e4:cf:cc:f3:83:de:4b:42:79:61:fa:e5:b6:
                    60:c2:cc:a0:c7:54:26:50:cf:a5:ef:f4:12:c1:d1:
                    f5:86:73:66:c9:16:f0:5a:b6:49:16:94:63:85:30:
                    92:04:3d:4f:21:b2:cc:e6:17:36:3a:04:4e:c6:6e:
                    71:6e:92:5f:68:7d:5d:11:8d:35:ac:b7:ec:8d:9c:
                    a1:3c:3c:9a:76:e4:44:7c:23:ae:b2:ca:76:29:40:
                    81:59:90:56:4a:13:c5:e6:6d:a0:7a:19:3b:79:70:
                    8e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:1B:9D:5E:8A:F1:9E:FB:9E:58:4B:F5:95:A2:B9:83:44:32:82:05
            X509v3 Authority Key Identifier:
                keyid:31:D3:1E:CC:54:B9:0E:9D:FF:24:42:B9:05:1A:A9:56:8F:30:6E:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdMezFS5Dp3_JEK5BRqpVo8wbng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/yRudXorxnvueWEv1laK5g0QyggU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47184

    Signature Algorithm: sha256WithRSAEncryption
         24:da:cb:b1:27:ad:82:b8:ac:c8:46:a4:f0:93:ff:53:bc:3c:
         1a:7f:ab:fc:cf:0c:14:33:5f:85:92:22:68:ec:83:21:3d:2a:
         94:ad:dd:6b:03:a4:c2:8e:63:85:0c:1f:ef:2f:29:9c:6a:80:
         6d:1b:6b:87:a6:c2:b8:b6:2d:d0:83:cd:b5:6e:f2:7e:85:0b:
         34:cb:ec:40:ca:c1:e7:5e:ea:0b:15:5d:46:87:59:c8:56:5b:
         d6:b7:fc:c0:b0:1a:21:72:2d:05:2a:9d:66:23:5a:57:a1:c1:
         06:55:9c:a2:cc:c0:83:bd:a4:3b:40:a0:fb:50:b5:41:e8:79:
         64:c2:c8:d4:8c:41:ef:63:f9:31:70:1d:c6:3b:cc:67:92:16:
         ab:c7:f0:8a:ad:de:64:e1:f3:a6:d2:84:f7:37:44:b1:0e:22:
         4d:d4:ce:69:7e:81:3c:b9:2c:61:17:42:16:34:0d:e9:03:00:
         6f:aa:33:97:ea:a7:f2:f9:fb:f6:e5:c3:33:39:ee:18:45:18:
         62:a5:c8:5c:ff:34:74:cf:bf:d2:16:d9:65:59:42:cb:55:f6:
         00:31:3f:80:f6:02:76:e7:78:f9:1c:5d:9a:fa:e2:b8:8d:18:
         b4:61:18:ff:4b:c2:e7:49:a3:d3:1c:24:50:bf:8c:0a:49:ed:
         42:10:9b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 17:02:25 2025 by rpki-client