This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/PguFJecoQt--LyHW2Dxlv0ZZ3t0.asa
File:                     PguFJecoQt--LyHW2Dxlv0ZZ3t0.asa (raw, json)
Hash identifier:          0DuH9ZfW8f/p2+Moq7rG/7mXkezlodPdLgpnaG/Lc0I=
Subject key identifier:   3E:0B:85:25:E7:28:42:DF:BE:2F:21:D6:D8:3C:65:BF:46:59:DE:DD
Certificate issuer:       /CN=8a72b60f5fb4930016ceb860cc174a53135f1616
Certificate serial:       019ACAE099243D9D7A635ACA54C3BD0DE8BC
Authority key identifier: 8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/PguFJecoQt--LyHW2Dxlv0ZZ3t0.asa
Signing time:             Fri 28 Nov 2025 14:31:48 +0000
ASPA not before:          Fri 28 Nov 2025 14:31:48 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            45009
Providers:                AS: 8283
                          AS: 25091
                          AS: 50869
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:ca:e0:99:24:3d:9d:7a:63:5a:ca:54:c3:bd:0d:e8:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a72b60f5fb4930016ceb860cc174a53135f1616
        Validity
            Not Before: Nov 28 14:31:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=3e0b8525e72842dfbe2f21d6d83c65bf4659dedd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e4:9f:e8:85:81:f9:39:af:60:b9:74:63:5f:
                    f9:84:98:ae:56:a5:a5:7e:5d:33:70:31:5d:ab:68:
                    3c:bb:5f:69:be:12:94:57:5e:ec:c0:15:36:56:ce:
                    ea:88:a7:f0:25:47:96:ed:3c:b5:79:8a:b6:9c:f5:
                    19:a6:f9:50:bb:f4:ce:30:62:31:df:2b:dd:a1:64:
                    cc:93:2d:a0:85:15:bd:b5:de:97:26:b3:cf:4e:63:
                    aa:04:a3:64:9d:0f:17:5f:b8:cf:96:b1:94:dc:d6:
                    cd:52:eb:41:5f:89:ba:fa:18:20:5d:03:b1:34:02:
                    76:81:20:fb:be:7e:60:20:3c:e8:0f:7d:f7:df:c9:
                    71:7d:84:ca:2a:bc:d4:ac:28:60:0c:99:31:f7:f7:
                    7a:48:57:ee:56:d4:52:a9:0d:57:1e:bf:7e:b7:2b:
                    a8:76:ec:72:d4:89:56:f8:31:64:b4:9b:c0:0e:5a:
                    5d:aa:1d:81:cc:18:07:4b:af:0e:ea:0f:bc:8f:9c:
                    8d:a3:1e:a3:d8:7c:f8:2f:62:db:78:72:0a:be:9d:
                    69:33:b0:3e:08:62:13:5d:32:86:c1:04:9d:60:05:
                    cf:2b:27:cc:21:f3:5c:23:37:b4:d4:f1:4c:9f:a7:
                    46:76:0a:db:a6:94:fd:ac:21:b0:af:b7:6f:ce:a8:
                    f3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:0B:85:25:E7:28:42:DF:BE:2F:21:D6:D8:3C:65:BF:46:59:DE:DD
            X509v3 Authority Key Identifier:
                keyid:8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/PguFJecoQt--LyHW2Dxlv0ZZ3t0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  45009

    Signature Algorithm: sha256WithRSAEncryption
         1d:96:06:a2:de:32:8b:67:a9:3c:e6:45:63:f2:9c:9c:90:ba:
         cf:32:fb:84:bc:3a:bf:3c:96:b8:f9:ef:69:58:75:26:1b:5a:
         3d:4d:27:e3:b7:77:2c:06:a2:de:28:d6:03:2f:0e:10:07:9d:
         60:e5:e6:b7:14:df:6e:96:d3:45:5c:09:1e:74:2a:6e:30:80:
         ea:36:ff:59:62:f5:10:86:23:c3:58:3d:84:f0:2a:39:60:66:
         37:27:ff:29:a3:6b:73:bb:2a:3b:2b:6a:06:f8:14:af:15:4c:
         d5:69:d1:24:f8:9a:ae:99:4f:51:fc:32:46:b4:51:53:17:c0:
         87:7b:a0:a2:f0:78:9d:3d:ae:00:44:e4:0a:02:da:f3:ad:6b:
         e4:85:e0:f5:b0:7e:19:d1:1e:a4:ea:0a:48:b1:59:1c:23:ce:
         b1:01:e8:93:a4:0c:66:8c:3d:4b:02:32:06:1f:e1:f0:03:19:
         f3:4c:c5:72:82:06:46:34:59:16:20:9a:49:53:6b:43:5c:71:
         9d:26:e6:97:76:96:ec:9d:6a:3d:27:c2:e0:89:78:21:e0:e5:
         6b:dd:08:47:c3:08:d5:de:93:a0:48:9c:2b:5a:8e:ab:9c:b6:
         0e:09:39:b0:7c:7d:5a:17:aa:01:f0:5f:c8:b6:e1:13:1c:24:
         ee:a7:aa:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:11:41 2025 by rpki-client