This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/_RxvAeHpFONnYajZa7ON1mGQbhs.asa
File:                     _RxvAeHpFONnYajZa7ON1mGQbhs.asa (raw, json)
Hash identifier:          xFKcAvCC5vdLzyXxKRsgkirX+IuvxL5Uhr3MSO1dHqk=
Subject key identifier:   FD:1C:6F:01:E1:E9:14:E3:67:61:A8:D9:6B:B3:8D:D6:61:90:6E:1B
Certificate issuer:       /CN=7ff17ae547b9f2641e60577fe553ddb6f749a087
Certificate serial:       019ADB90728FD67986E76DD43E10DA3876E8
Authority key identifier: 7F:F1:7A:E5:47:B9:F2:64:1E:60:57:7F:E5:53:DD:B6:F7:49:A0:87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/_RxvAeHpFONnYajZa7ON1mGQbhs.asa
Signing time:             Mon 01 Dec 2025 20:17:48 +0000
ASPA not before:          Mon 01 Dec 2025 20:17:48 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            214205
Providers:                AS: 34927
                          AS: 52025
                          AS: 205941
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:db:90:72:8f:d6:79:86:e7:6d:d4:3e:10:da:38:76:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ff17ae547b9f2641e60577fe553ddb6f749a087
        Validity
            Not Before: Dec  1 20:17:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=fd1c6f01e1e914e36761a8d96bb38dd661906e1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7c:56:1d:7a:e7:54:14:5f:f7:f6:c7:69:03:
                    ff:d5:92:c0:0b:cd:c7:1e:49:a0:d1:09:c3:26:68:
                    87:b0:10:93:59:48:3b:99:95:55:a6:0c:ef:e8:d9:
                    6c:2b:e1:8a:0b:ca:5a:bc:c7:42:61:86:78:71:91:
                    61:1f:be:29:34:f3:c4:10:a6:da:db:68:c6:6b:a8:
                    a1:3d:01:cc:4d:ad:e9:52:e9:91:7c:e2:74:fe:ee:
                    63:aa:f6:ce:5a:76:5f:47:70:d9:27:62:74:f7:96:
                    78:bf:a2:e2:33:11:35:fb:44:6c:33:d5:73:f7:e5:
                    3e:0f:7a:8b:6e:7b:f9:5f:98:28:25:f4:89:8c:a7:
                    ad:b3:ef:3d:b8:10:7b:d3:1e:87:19:e7:f2:de:a5:
                    f3:c1:87:f6:cc:87:e0:5c:5a:56:a9:bd:7f:33:22:
                    88:d1:ce:b8:78:1b:6a:44:5b:2e:6a:ab:a7:9c:c0:
                    27:9e:bf:7a:66:e5:57:11:e9:24:43:20:0a:57:66:
                    0a:1c:f8:1f:e7:f1:17:39:d8:fa:fa:8f:18:31:35:
                    e3:d3:12:7a:2b:3c:f8:4a:17:15:42:7c:ce:4f:93:
                    d9:23:d3:31:35:66:f8:d9:1f:ce:66:53:1c:c4:b2:
                    0e:3f:d3:ac:f2:d4:d8:5b:c5:23:8c:3c:db:f4:ec:
                    38:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:1C:6F:01:E1:E9:14:E3:67:61:A8:D9:6B:B3:8D:D6:61:90:6E:1B
            X509v3 Authority Key Identifier:
                keyid:7F:F1:7A:E5:47:B9:F2:64:1E:60:57:7F:E5:53:DD:B6:F7:49:A0:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/_RxvAeHpFONnYajZa7ON1mGQbhs.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214205

    Signature Algorithm: sha256WithRSAEncryption
         0a:cd:cb:54:ba:ff:d7:27:31:f1:34:6b:af:26:58:ec:3c:3b:
         ab:14:1f:14:5b:3f:c0:11:d3:b2:44:27:84:80:04:17:66:8d:
         93:1c:fe:7a:f5:08:e3:41:8b:70:87:20:f3:31:b2:4d:cb:4a:
         d1:40:eb:c2:17:c2:07:8d:e1:67:29:07:3a:fb:f9:60:34:5e:
         b2:b9:dd:6d:2f:b3:6a:10:6f:72:ce:48:ca:68:d4:1e:7c:e4:
         a4:ee:c9:47:dc:3f:00:2a:ae:90:e8:03:20:20:f4:53:65:22:
         4b:4d:f1:1b:60:ee:c1:22:f0:18:20:1d:36:37:5d:6b:e8:2a:
         79:be:1b:ac:43:89:5f:b1:7b:1a:05:77:0c:02:89:80:12:04:
         c4:bf:46:55:0e:ea:0b:a9:6d:b1:84:8f:cb:61:30:e0:44:4c:
         e0:fc:4e:e8:dc:f8:0c:b9:5b:f4:39:bf:57:37:1e:59:54:b0:
         bb:2f:64:dd:bb:d0:c9:b8:ed:35:72:87:89:52:24:80:04:b4:
         26:1b:8a:82:7a:9d:1f:79:a2:78:ad:4a:b8:e9:05:77:94:b5:
         0d:c3:a7:b7:62:62:d0:64:03:82:a9:29:80:79:2e:36:b8:71:
         ad:00:4f:3c:89:44:2a:ec:93:0b:76:af:2c:ca:dd:b9:8f:7d:
         75:62:28:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:11:29 2025 by rpki-client