This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/x5mGmJWW7VG2d9fAFZDjA0LUA6M.asa
File:                     x5mGmJWW7VG2d9fAFZDjA0LUA6M.asa (raw, json)
Hash identifier:          VX9BMxwn8E44ljUNBHA9sm5zOwxMI5hsQlaAlIe0HNQ=
Subject key identifier:   C7:99:86:98:95:96:ED:51:B6:77:D7:C0:15:90:E3:03:42:D4:03:A3
Certificate issuer:       /CN=8a72b60f5fb4930016ceb860cc174a53135f1616
Certificate serial:       019ACAE1847BABFB0E978FF366EC1D9DBFC0
Authority key identifier: 8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/x5mGmJWW7VG2d9fAFZDjA0LUA6M.asa
Signing time:             Fri 28 Nov 2025 14:32:48 +0000
ASPA not before:          Fri 28 Nov 2025 14:32:48 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            61421
Providers:                AS: 6939
                          AS: 8283
                          AS: 45009
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:ca:e1:84:7b:ab:fb:0e:97:8f:f3:66:ec:1d:9d:bf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a72b60f5fb4930016ceb860cc174a53135f1616
        Validity
            Not Before: Nov 28 14:32:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c79986989596ed51b677d7c01590e30342d403a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:20:ab:a0:35:cd:21:94:5c:63:4a:06:a3:0f:
                    32:44:f6:38:78:c2:2a:ad:19:1c:a1:3e:4f:3c:a1:
                    e7:b4:28:5d:c5:03:71:6c:f4:ec:29:d3:f4:dd:22:
                    5f:01:3d:e1:8a:b0:83:11:f8:aa:88:68:5d:11:c2:
                    5d:a8:84:7e:94:72:d6:cc:bc:f6:21:df:37:2f:97:
                    8f:b7:54:2f:10:8e:67:26:a4:34:f9:7a:ed:92:91:
                    2b:75:f3:bd:62:9b:0c:4f:cd:f6:24:37:28:18:40:
                    a8:74:b2:36:ff:ae:8a:4f:b1:34:b0:07:16:5a:73:
                    2c:ac:6f:2a:7f:dc:a1:17:0a:86:36:0d:31:2d:6f:
                    14:a4:49:29:b3:a9:4d:da:f9:0e:d5:d5:8f:57:b1:
                    22:55:a9:d8:24:6c:c7:f4:85:a2:ad:8d:7a:9b:cb:
                    55:8e:0c:da:d8:57:38:7a:4b:18:3b:5b:b0:1e:52:
                    fe:0c:05:21:31:99:03:b6:5d:15:e1:93:f7:c2:1d:
                    38:bc:54:ac:ba:ab:25:8a:87:77:a2:36:58:a5:29:
                    96:7a:17:5b:04:70:5f:63:c3:3c:d8:f8:09:86:54:
                    e7:1f:f6:a8:4c:2b:34:6e:64:e1:26:18:d4:80:67:
                    3a:05:5c:32:7d:40:39:93:81:22:f1:01:57:1a:a3:
                    b4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:99:86:98:95:96:ED:51:B6:77:D7:C0:15:90:E3:03:42:D4:03:A3
            X509v3 Authority Key Identifier:
                keyid:8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/x5mGmJWW7VG2d9fAFZDjA0LUA6M.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61421

    Signature Algorithm: sha256WithRSAEncryption
         c4:d5:3f:6f:28:fd:b3:c1:57:c2:f5:99:84:ff:bc:90:59:92:
         c5:dc:bc:f1:fb:69:e0:46:d9:f6:a9:07:91:5b:90:61:ca:e5:
         a9:44:70:84:a9:83:2f:f1:c2:64:a1:95:82:27:eb:45:12:9d:
         d9:10:8e:b9:16:4c:fe:37:c8:7a:4a:90:5b:64:af:6c:0d:63:
         13:03:21:de:07:d3:0c:bb:66:04:87:96:94:01:f9:f3:13:ae:
         a5:db:79:4e:72:76:27:e2:8a:9f:e3:11:53:43:0d:4c:d3:ed:
         25:67:28:c7:03:e2:6f:24:89:30:33:50:65:bf:17:a6:30:8d:
         67:10:3d:69:f3:23:33:e6:76:fd:d8:71:06:5f:a1:5e:10:39:
         be:ca:57:65:b7:32:ab:d6:6a:de:39:13:6e:fb:59:0a:c0:c6:
         35:8c:1d:c7:2f:34:83:31:2b:b3:64:6b:a8:e3:31:60:fa:0a:
         ca:92:cf:6e:f9:56:8f:62:8a:01:93:b5:8d:24:c3:a3:51:7b:
         61:c7:1c:b4:12:39:71:35:26:d8:de:1c:3e:5d:a1:bd:b2:e8:
         f7:bc:ea:37:f5:95:22:0d:7a:47:50:ab:42:a8:ce:d5:a4:52:
         34:20:f0:bc:44:99:0d:f9:a5:57:d0:67:73:e8:8c:7c:45:14:
         62:3a:f0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:11:41 2025 by rpki-client