This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/WnbUZd8VzGXIZNm_6Ldem9PyqpY.asa
File:                     WnbUZd8VzGXIZNm_6Ldem9PyqpY.asa (raw, json)
Hash identifier:          h1Kql9WjztW+T3od8LCl8lNgzg0+OneCnlP0755zkcQ=
Subject key identifier:   5A:76:D4:65:DF:15:CC:65:C8:64:D9:BF:E8:B7:5E:9B:D3:F2:AA:96
Certificate issuer:       /CN=e80ec31635f4d91bb11312ba0a3465c18f233f68
Certificate serial:       019AE4DA643758CB8899AF18B3B73E8C0E84
Authority key identifier: E8:0E:C3:16:35:F4:D9:1B:B1:13:12:BA:0A:34:65:C1:8F:23:3F:68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/WnbUZd8VzGXIZNm_6Ldem9PyqpY.asa
Signing time:             Wed 03 Dec 2025 15:35:08 +0000
ASPA not before:          Wed 03 Dec 2025 15:35:08 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            204104
Providers:                AS: 31549
                          AS: 41881
                          AS: 42337
                          AS: 43754
                          AS: 62403
                          AS: 205647
                          AS: 211904
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:e4:da:64:37:58:cb:88:99:af:18:b3:b7:3e:8c:0e:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e80ec31635f4d91bb11312ba0a3465c18f233f68
        Validity
            Not Before: Dec  3 15:35:08 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5a76d465df15cc65c864d9bfe8b75e9bd3f2aa96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:40:fe:16:97:52:1a:31:e8:39:1f:5f:29:8c:
                    31:9a:7c:38:19:83:1f:ab:23:fb:c6:96:9c:bb:16:
                    21:d0:45:d5:18:fc:1f:56:74:bb:e8:a2:b8:4c:01:
                    0c:79:a8:26:e1:a4:48:09:d7:96:2b:42:99:6c:5e:
                    78:a2:c1:12:73:75:95:2c:f4:ed:75:c9:7a:4d:93:
                    8c:69:a1:b2:11:68:44:0d:39:7e:f8:58:dd:3c:46:
                    3b:d8:fe:dd:a8:bf:90:ee:73:89:78:d5:56:cc:f2:
                    8a:19:8d:94:21:96:89:a0:10:a8:10:dd:cb:fb:e3:
                    5b:5a:66:47:9a:b6:65:74:34:de:09:5f:fb:2d:3e:
                    f2:af:8e:c2:f2:b3:96:79:4c:0e:41:50:fa:8d:1b:
                    68:cc:e0:30:c7:57:51:89:f2:6a:13:32:e9:3b:5b:
                    40:e5:03:2a:96:32:d7:9f:5e:12:0e:a8:68:ed:ae:
                    75:cc:80:27:51:e8:bc:f4:e2:b8:e7:7e:5c:00:2e:
                    d0:be:b9:a8:12:fe:93:3a:45:51:11:d7:cd:9c:cd:
                    cd:80:21:d9:ef:cf:e6:88:01:65:92:4d:85:cc:b7:
                    96:71:1a:c4:27:12:f9:d7:f2:bc:01:ab:72:f3:42:
                    6c:64:1f:8d:27:d0:40:44:8c:fa:28:8a:74:ea:72:
                    b3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:76:D4:65:DF:15:CC:65:C8:64:D9:BF:E8:B7:5E:9B:D3:F2:AA:96
            X509v3 Authority Key Identifier:
                keyid:E8:0E:C3:16:35:F4:D9:1B:B1:13:12:BA:0A:34:65:C1:8F:23:3F:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/WnbUZd8VzGXIZNm_6Ldem9PyqpY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204104

    Signature Algorithm: sha256WithRSAEncryption
         71:bd:e7:5c:48:ff:3c:65:23:39:b2:a9:5e:18:40:f4:d7:7f:
         dc:ce:f5:fc:45:b2:dc:26:c3:86:96:53:12:2d:c7:03:82:90:
         bf:b3:36:44:6c:76:f3:9b:09:16:24:49:a8:24:36:1d:cb:71:
         13:5e:83:66:4f:f8:79:13:46:8f:8d:7c:78:bd:b5:ed:8c:3a:
         60:80:ad:26:6f:23:14:94:e7:56:a0:72:66:55:af:ab:52:4f:
         96:ba:34:af:cd:73:8d:65:c8:b5:af:af:c9:5d:9c:79:48:9f:
         77:e0:c3:8d:95:d6:6a:ff:36:cd:46:77:41:d2:a8:f4:ca:11:
         d0:8e:71:86:c1:bd:38:86:20:0f:f5:a5:7b:ad:57:cb:e3:6d:
         eb:6f:d0:8a:da:d0:f3:86:31:f8:0f:5c:d3:e8:91:bd:c3:f6:
         42:a5:01:28:8b:34:11:0f:83:83:2d:5c:ec:2a:fc:1c:2a:89:
         8e:40:ef:07:2d:d5:10:3c:13:55:48:f4:87:d1:29:1e:b0:55:
         8f:77:27:00:2d:63:a0:86:75:5d:9b:ea:3b:af:4d:ef:e1:b7:
         da:3c:2a:e0:42:9e:de:d3:1c:d9:cc:43:76:13:b0:d2:7a:c5:
         d9:8a:84:03:98:70:7b:73:74:3c:bc:88:69:d6:f4:d9:f6:33:
         02:3d:36:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:11:43 2025 by rpki-client