This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/n1ZXxlY8nlsbxYQ5L076Dr17-c4.asa
File:                     n1ZXxlY8nlsbxYQ5L076Dr17-c4.asa (raw, json)
Hash identifier:          dzE/q21fmrH9SVkZPk72j/WGQhTy8qFsnaxN27uHbdY=
Subject key identifier:   9F:56:57:C6:56:3C:9E:5B:1B:C5:84:39:2F:4E:FA:0E:BD:7B:F9:CE
Certificate issuer:       /CN=027e5858fa543fe3ff474d8d76ab9701ea010b0b
Certificate serial:       019B0DD21359DD8946E0B494FD64A43A3495
Authority key identifier: 02:7E:58:58:FA:54:3F:E3:FF:47:4D:8D:76:AB:97:01:EA:01:0B:0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/n1ZXxlY8nlsbxYQ5L076Dr17-c4.asa
Signing time:             Thu 11 Dec 2025 14:30:29 +0000
ASPA not before:          Thu 11 Dec 2025 14:30:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            214443
Providers:                AS: 9002
                          AS: 35836
                          AS: 41327
                          AS: 50877
                          AS: 61968
                          AS: 196959
                          AS: 202056
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 08:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0d:d2:13:59:dd:89:46:e0:b4:94:fd:64:a4:3a:34:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=027e5858fa543fe3ff474d8d76ab9701ea010b0b
        Validity
            Not Before: Dec 11 14:30:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9f5657c6563c9e5b1bc584392f4efa0ebd7bf9ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8f:e8:5e:b6:ec:de:07:b1:6d:ed:90:7a:d4:
                    ef:3b:5c:c6:0b:5a:51:a9:ba:16:97:96:29:86:1a:
                    d9:a3:f6:80:a9:ce:ee:c4:bb:10:eb:59:6d:89:53:
                    bc:36:1c:e0:49:c1:28:48:f1:06:43:16:d4:39:ee:
                    20:6f:da:b9:18:b1:ec:8c:70:e2:31:39:8d:1f:81:
                    af:3b:58:7d:b1:f4:a8:5f:1f:5d:71:df:8d:36:c6:
                    d1:6c:12:4b:b2:8c:04:4c:4c:b0:c3:dd:f1:b9:b3:
                    6f:ca:1b:6b:b3:e6:7a:ff:af:1a:eb:c2:50:6c:21:
                    b0:58:a9:ae:dd:4a:59:54:18:b5:1b:0c:6a:8c:88:
                    08:fa:73:d7:cc:b8:a1:95:6e:c2:04:42:01:9f:97:
                    da:9a:f6:c1:fc:c1:68:29:0a:d8:a7:2f:ec:b6:86:
                    7a:fb:f5:0d:77:bc:cf:e4:0c:2b:bc:32:4a:1a:0e:
                    6b:9d:f7:9a:a5:19:43:72:91:14:34:4b:18:f6:21:
                    1c:23:f0:0f:a5:e5:9f:7d:34:93:0c:12:0a:b0:57:
                    ce:0e:38:06:c2:a6:10:55:f9:a5:b9:90:f4:29:8c:
                    00:f5:3b:c0:01:a7:25:d9:a7:a6:80:48:c6:9c:a7:
                    96:90:b3:1c:74:f1:03:27:54:a4:63:45:50:81:fb:
                    58:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:56:57:C6:56:3C:9E:5B:1B:C5:84:39:2F:4E:FA:0E:BD:7B:F9:CE
            X509v3 Authority Key Identifier:
                keyid:02:7E:58:58:FA:54:3F:E3:FF:47:4D:8D:76:AB:97:01:EA:01:0B:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/n1ZXxlY8nlsbxYQ5L076Dr17-c4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214443

    Signature Algorithm: sha256WithRSAEncryption
         53:4f:b2:5e:d4:b2:b4:1d:03:e0:06:3d:59:e1:a8:46:75:cb:
         1e:0d:30:59:5b:7b:36:78:d1:27:81:94:67:fc:48:a9:c8:af:
         b0:10:b0:26:a1:39:60:ad:ca:27:ff:f8:27:1d:3f:7c:1d:c3:
         0b:1c:f1:7e:c8:ff:93:16:9c:48:e5:50:3f:2b:5e:60:fe:28:
         49:e2:1e:68:a6:14:0d:35:b6:88:78:a8:a2:dc:4b:71:e2:5a:
         81:a8:2a:da:f2:2d:ce:f2:fd:ba:3b:9e:a8:d3:3f:1a:05:2d:
         dd:db:1c:7e:3c:83:ac:b8:19:f8:7e:aa:56:b0:c4:78:95:53:
         fb:eb:0b:51:75:4c:e0:c3:a3:a7:d1:fb:62:1e:33:99:69:98:
         01:1f:c0:7a:13:c2:9f:fd:a0:e0:51:e8:11:44:81:7d:5c:6b:
         70:25:ae:6a:03:3e:c4:26:a7:de:1e:dd:2d:3d:14:3f:a6:ff:
         11:5d:1c:43:a1:03:42:87:7a:30:7c:6a:0b:c1:5b:19:a3:81:
         dc:2c:98:a5:38:76:b9:1f:95:fa:03:77:eb:2b:d4:10:46:a0:
         4b:f5:ab:4b:f3:8c:ea:02:4f:2b:c5:2e:9a:15:7b:f9:97:b4:
         87:b3:5a:7a:a4:8d:a7:99:b9:5d:54:c5:5e:28:9c:ec:71:8a:
         45:8a:94:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 17:02:56 2025 by rpki-client