This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/9aAyo6rprahdH9ZSUtgycjgaaNQ.asa
File:                     9aAyo6rprahdH9ZSUtgycjgaaNQ.asa (raw, json)
Hash identifier:          jHUBARdI8pSANeu1sJwWAig2I7vT4TtQr3+sXIljZgg=
Subject key identifier:   F5:A0:32:A3:AA:E9:AD:A8:5D:1F:D6:52:52:D8:32:72:38:1A:68:D4
Certificate issuer:       /CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Certificate serial:       019AE576099DDF61641366F376FA12A696FF
Authority key identifier: 08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/9aAyo6rprahdH9ZSUtgycjgaaNQ.asa
Signing time:             Wed 03 Dec 2025 18:25:09 +0000
ASPA not before:          Wed 03 Dec 2025 18:25:09 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            205929
Providers:                AS: 1299
                          AS: 6830
                          AS: 6939
                          AS: 34927
                          AS: 58299
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:e5:76:09:9d:df:61:64:13:66:f3:76:fa:12:a6:96:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
        Validity
            Not Before: Dec  3 18:25:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f5a032a3aae9ada85d1fd65252d83272381a68d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:56:84:93:29:a6:41:87:1b:90:56:ab:a8:17:
                    a1:14:3b:19:a1:ff:17:76:b2:05:5e:45:1f:cc:e7:
                    04:b8:cb:22:f6:9f:35:7c:8d:72:9b:a3:9c:16:f8:
                    23:e3:0c:7a:d4:d3:56:a7:9d:04:a9:c3:69:56:0e:
                    70:4b:66:4e:d1:bc:1f:e9:d4:c6:69:52:5a:d9:61:
                    0a:2d:b0:a4:a7:df:e9:5b:99:86:b7:3e:1b:3b:18:
                    3c:bf:44:7c:c0:29:07:4f:ef:b4:e0:af:45:8d:c0:
                    40:20:c2:5c:6c:95:f7:87:d9:d8:b1:97:c6:75:b5:
                    76:ec:e1:d1:4c:39:44:a8:2b:5d:e1:ac:f6:f6:4d:
                    3e:ac:0c:8d:04:65:df:58:32:f5:54:e4:a9:ad:ae:
                    9a:18:c1:88:75:f1:eb:3b:76:c2:eb:16:66:89:cc:
                    7c:4e:cd:48:f8:5f:1b:32:31:c8:dd:b0:cf:cb:89:
                    db:6c:97:d7:09:b3:68:a0:20:45:7b:16:60:0c:c5:
                    ce:f5:73:0e:30:69:5a:92:b7:72:bf:a8:cb:a4:9c:
                    3d:1b:9f:04:d1:22:67:c6:f4:b6:d7:3f:60:3f:e1:
                    3f:50:d4:ab:c9:a4:3c:3c:44:6d:2d:13:52:1d:d8:
                    be:d0:e5:20:fa:60:99:3b:5f:25:51:82:55:fa:ac:
                    2c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A0:32:A3:AA:E9:AD:A8:5D:1F:D6:52:52:D8:32:72:38:1A:68:D4
            X509v3 Authority Key Identifier:
                keyid:08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/9aAyo6rprahdH9ZSUtgycjgaaNQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205929

    Signature Algorithm: sha256WithRSAEncryption
         97:d9:5b:0f:16:63:9c:26:39:b1:23:fd:82:7a:7c:61:70:46:
         9d:62:4e:1e:10:a2:f8:b2:47:b2:d6:6f:c5:8d:2c:cd:06:df:
         95:85:56:7a:f2:ca:d8:d4:cc:14:24:46:24:2d:66:d4:e7:6e:
         2f:02:6d:e8:66:0e:4f:87:aa:a1:e1:79:a4:dc:0a:42:7a:0b:
         2f:ed:59:a1:c0:74:c7:2c:74:59:df:a1:dc:71:27:70:bc:86:
         37:12:f1:36:fa:7b:1f:88:b2:d4:36:04:72:fe:b4:1c:f9:02:
         bb:99:5a:8a:9c:d2:45:9b:e6:6e:86:3a:61:0a:5c:16:af:43:
         e4:c3:d0:cf:3d:0d:66:a6:4b:89:77:e3:be:ab:20:0d:60:81:
         82:41:94:8a:60:aa:2f:00:74:61:a6:84:68:6f:f8:10:e1:84:
         c9:e6:eb:77:cf:6a:65:05:03:b7:44:d8:e9:77:20:e7:4e:7b:
         df:bb:4f:0d:2a:49:db:3b:24:81:f1:bd:4b:e2:12:b5:59:ca:
         f2:92:51:50:b3:c7:23:b0:b8:0a:6f:ba:0f:01:7d:63:28:06:
         19:ad:d7:be:de:e2:b2:b3:b0:b6:64:d2:a8:f1:0a:9e:9d:e6:
         c4:c8:09:c9:c9:b1:cf:a4:71:f8:68:57:c8:06:98:5e:dd:51:
         f7:bc:f8:c6
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZrldgmd32FkE2bzdvoSppb/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZmNhYWY4ZDE3ZGQxYTY1Nzk1ZjcxNGIyNjdmMWJjZTIx
OTM4YjkwHhcNMjUxMjAzMTgyNTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNWEwMzJhM2FhZTlhZGE4NWQxZmQ2NTI1MmQ4MzI3MjM4MWE2OGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1aEkymmQYcbkFarqBehFDsZof8X
drIFXkUfzOcEuMsi9p81fI1ym6OcFvgj4wx61NNWp50EqcNpVg5wS2ZO0bwf6dTG
aVJa2WEKLbCkp9/pW5mGtz4bOxg8v0R8wCkHT++04K9FjcBAIMJcbJX3h9nYsZfG
dbV27OHRTDlEqCtd4az29k0+rAyNBGXfWDL1VOSpra6aGMGIdfHrO3bC6xZmicx8
Ts1I+F8bMjHI3bDPy4nbbJfXCbNooCBFexZgDMXO9XMOMGlakrdyv6jLpJw9G58E
0SJnxvS21z9gP+E/UNSryaQ8PERtLRNSHdi+0OUg+mCZO18lUYJV+qwsAQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFPWgMqOq6a2oXR/WUlLYMnI4GmjUMB8GA1UdIwQY
MBaAFAj8qvjRfdGmV5X3FLJn8bziGTi5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1B5cS1ORjkwYVpYbGZjVXNtZnh2T0laT0xrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8wNjgwYWUtMjJmOS00M2JlLTkwYTgt
NzdlZWVhZjcxZDA4LzEvOWFBeW82cnByYWhkSDlaU1V0Z3ljamdhYU5RLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8wNjgwYWUtMjJmOS00M2JlLTkwYTgtNzdlZWVhZjcxZDA4
LzEvQ1B5cS1ORjkwYVpYbGZjVXNtZnh2T0laT0xrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMkaTANBgkqhkiG
9w0BAQsFAAOCAQEAl9lbDxZjnCY5sSP9gnp8YXBGnWJOHhCi+LJHstZvxY0szQbf
lYVWevLK2NTMFCRGJC1m1OduLwJt6GYOT4eqoeF5pNwKQnoLL+1ZocB0xyx0Wd+h
3HEncLyGNxLxNvp7H4iy1DYEcv60HPkCu5laipzSRZvmboY6YQpcFq9D5MPQzz0N
ZqZLiXfjvqsgDWCBgkGUimCqLwB0YaaEaG/4EOGEyebrd89qZQUDt0TY6Xcg5057
37tPDSpJ2zskgfG9S+IStVnK8pJRULPHI7C4Cm+6DwF9YygGGa3Xvt7isrOwtmTS
qPEKnp3mxMgJycmxz6Rx+GhXyAaYXt1R97z4xg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 04:12:20 2025 by rpki-client