This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/RMsG8pQVuDko30N-hzzT26RjJ9Y.asa
File:                     RMsG8pQVuDko30N-hzzT26RjJ9Y.asa (raw, json)
Hash identifier:          yi02C4KYzTGBREJtJL0ti8csY3NPFrvUw9hF+6s7XDg=
Subject key identifier:   44:CB:06:F2:94:15:B8:39:28:DF:43:7E:87:3C:D3:DB:A4:63:27:D6
Certificate issuer:       /CN=295d8586b1dfe6213e0b2c1d2bffc1b2c8d351cf
Certificate serial:       019B08655EF60F56E89E40F60187992480B4
Authority key identifier: 29:5D:85:86:B1:DF:E6:21:3E:0B:2C:1D:2B:FF:C1:B2:C8:D3:51:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KV2FhrHf5iE-CywdK__BssjTUc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/RMsG8pQVuDko30N-hzzT26RjJ9Y.asa
Signing time:             Wed 10 Dec 2025 13:13:39 +0000
ASPA not before:          Wed 10 Dec 2025 13:13:39 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            215163
Providers:                AS: 200462
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KV2FhrHf5iE-CywdK__BssjTUc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 10:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:08:65:5e:f6:0f:56:e8:9e:40:f6:01:87:99:24:80:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295d8586b1dfe6213e0b2c1d2bffc1b2c8d351cf
        Validity
            Not Before: Dec 10 13:13:39 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=44cb06f29415b83928df437e873cd3dba46327d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fb:42:85:22:0e:3c:53:18:83:5f:8b:2d:70:
                    84:42:78:c8:0e:99:25:66:f2:fb:25:ef:7b:bc:79:
                    f4:1b:73:53:64:e3:51:cc:43:ab:16:3b:68:63:5c:
                    07:af:26:80:7c:32:99:2d:68:55:d6:d8:83:c2:f5:
                    68:ae:38:1b:03:3b:fe:01:f7:c5:cd:33:02:61:be:
                    6c:d9:f7:7b:c9:0d:95:7e:60:da:50:77:12:0d:e0:
                    d5:e9:20:30:7f:e8:c5:f8:46:7a:34:7a:0d:0a:61:
                    44:04:1f:c0:b7:5c:fd:bc:28:51:d2:50:8e:d5:86:
                    98:db:e4:41:c8:cc:16:96:03:01:5f:7c:9e:b8:73:
                    14:34:8d:7b:bd:71:59:ec:36:e5:a0:62:2c:72:fc:
                    2c:67:29:89:51:22:98:af:45:71:1a:8b:0c:26:dd:
                    fa:4c:98:fa:ea:2a:a4:27:38:3f:c6:12:b9:ca:0e:
                    cd:0a:92:9f:fb:3f:2b:82:42:9c:c4:a2:0e:92:c7:
                    60:9a:fb:ed:fb:11:64:03:4f:2a:d6:5d:ed:eb:12:
                    b1:0e:a2:04:9a:b6:e5:86:93:a1:0b:3a:ac:23:55:
                    4b:19:dd:98:bf:b4:82:6e:dc:59:e9:01:df:98:75:
                    19:e7:64:a9:b4:04:42:c2:20:40:d2:bc:68:53:18:
                    84:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:CB:06:F2:94:15:B8:39:28:DF:43:7E:87:3C:D3:DB:A4:63:27:D6
            X509v3 Authority Key Identifier:
                keyid:29:5D:85:86:B1:DF:E6:21:3E:0B:2C:1D:2B:FF:C1:B2:C8:D3:51:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KV2FhrHf5iE-CywdK__BssjTUc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/RMsG8pQVuDko30N-hzzT26RjJ9Y.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215163

    Signature Algorithm: sha256WithRSAEncryption
         01:70:6c:49:8b:d7:00:be:4a:d0:94:c9:c2:a8:8c:9d:c0:da:
         0b:3f:3f:23:15:e1:50:bc:ed:8a:13:91:5e:0c:2d:bc:31:5f:
         45:c8:17:0d:6a:f1:8d:15:d4:24:6b:7d:11:df:67:fc:35:b5:
         75:46:62:ef:8f:27:b3:6b:1a:5b:33:8b:57:8f:66:04:2c:a0:
         83:c3:87:ca:72:ee:7b:4b:df:9a:13:3f:01:1e:49:52:35:68:
         39:d9:eb:8d:69:fc:78:cf:2a:48:e0:88:ae:27:da:d3:ea:ea:
         b0:b4:da:ac:fb:df:d1:4b:ac:90:42:e7:be:ff:19:96:06:25:
         4e:bd:50:97:05:99:46:c4:76:53:6b:1b:44:20:d5:de:2c:8c:
         81:f8:b5:16:ce:e1:37:4b:76:61:69:91:6f:45:b4:8a:7c:6e:
         6b:0a:c5:83:e7:1a:26:e9:50:21:1a:fd:f4:87:f8:f5:b8:51:
         58:74:20:e4:b5:00:8a:2e:1a:da:1f:54:4b:a5:f5:be:7a:f5:
         6a:1a:17:86:cf:38:92:82:5c:6b:65:7c:03:2b:2a:27:5d:29:
         dd:ae:54:af:b2:1a:f9:d2:70:0b:fa:11:20:67:6a:a0:68:c2:
         46:3b:39:82:8e:f2:bf:4a:19:ab:71:34:7e:14:42:49:de:ff:
         8f:cf:8b:95
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZsIZV72D1bonkD2AYeZJIC0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NWQ4NTg2YjFkZmU2MjEzZTBiMmMxZDJiZmZjMWIyYzhk
MzUxY2YwHhcNMjUxMjEwMTMxMzM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NGNiMDZmMjk0MTViODM5MjhkZjQzN2U4NzNjZDNkYmE0NjMyN2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqftChSIOPFMYg1+LLXCEQnjIDpkl
ZvL7Je97vHn0G3NTZONRzEOrFjtoY1wHryaAfDKZLWhV1tiDwvVorjgbAzv+AffF
zTMCYb5s2fd7yQ2VfmDaUHcSDeDV6SAwf+jF+EZ6NHoNCmFEBB/At1z9vChR0lCO
1YaY2+RByMwWlgMBX3yeuHMUNI17vXFZ7DbloGIscvwsZymJUSKYr0VxGosMJt36
TJj66iqkJzg/xhK5yg7NCpKf+z8rgkKcxKIOksdgmvvt+xFkA08q1l3t6xKxDqIE
mrblhpOhCzqsI1VLGd2Yv7SCbtxZ6QHfmHUZ52SptARCwiBA0rxoUxiE8QIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFETLBvKUFbg5KN9Dfoc809ukYyfWMB8GA1UdIwQY
MBaAFCldhYax3+YhPgssHSv/wbLI01HPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1YyRmhySGY1aUUtQ3l3ZEtfX0Jzc2pUVWM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC83YzM2NTQtNTcwZi00NTQ0LWFkZWIt
NjZiYjMwYzI3YmMxLzEvUk1zRzhwUVZ1RGtvMzBOLWh6elQyNlJqSjlZLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC83YzM2NTQtNTcwZi00NTQ0LWFkZWItNjZiYjMwYzI3YmMx
LzEvS1YyRmhySGY1aUUtQ3l3ZEtfX0Jzc2pUVWM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNIezANBgkqhkiG
9w0BAQsFAAOCAQEAAXBsSYvXAL5K0JTJwqiMncDaCz8/IxXhULztihORXgwtvDFf
RcgXDWrxjRXUJGt9Ed9n/DW1dUZi748ns2saWzOLV49mBCygg8OHynLue0vfmhM/
AR5JUjVoOdnrjWn8eM8qSOCIrifa0+rqsLTarPvf0UuskELnvv8ZlgYlTr1QlwWZ
RsR2U2sbRCDV3iyMgfi1Fs7hN0t2YWmRb0W0inxuawrFg+caJulQIRr99If49bhR
WHQg5LUAii4a2h9US6X1vnr1ahoXhs84koJca2V8AysqJ10p3a5Ur7Ia+dJwC/oR
IGdqoGjCRjs5go7yv0oZq3E0fhRCSd7/j8+LlQ==
-----END CERTIFICATE-----
Generated at Mon Dec 15 17:02:51 2025 by rpki-client