This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/_ONnyoGJy4BONjnQqy_VIZR_lsQ.asa
File:                     _ONnyoGJy4BONjnQqy_VIZR_lsQ.asa (raw, json)
Hash identifier:          fg8lcyp5xk0Ls5QPpNy6ZcES0R4cZ7H66Wj2T/SkgFA=
Subject key identifier:   FC:E3:67:CA:81:89:CB:80:4E:36:39:D0:AB:2F:D5:21:94:7F:96:C4
Certificate issuer:       /CN=acb20250d4cdd366719b969d6f412301c13eb901
Certificate serial:       019AFAEA97FCE1301514F0A1869088CC1B05
Authority key identifier: AC:B2:02:50:D4:CD:D3:66:71:9B:96:9D:6F:41:23:01:C1:3E:B9:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/_ONnyoGJy4BONjnQqy_VIZR_lsQ.asa
Signing time:             Sun 07 Dec 2025 22:24:29 +0000
ASPA not before:          Sun 07 Dec 2025 22:24:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            206557
Providers:                AS: 2116
                          AS: 6667
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 10:02:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:fa:ea:97:fc:e1:30:15:14:f0:a1:86:90:88:cc:1b:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acb20250d4cdd366719b969d6f412301c13eb901
        Validity
            Not Before: Dec  7 22:24:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=fce367ca8189cb804e3639d0ab2fd521947f96c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5f:96:e1:79:20:e0:42:8f:3a:45:fa:b4:3c:
                    18:f2:ae:ff:5a:b5:e1:1b:1a:fe:df:62:5d:13:9d:
                    83:75:5a:59:fd:cd:c8:7f:72:a4:f3:b7:d6:44:3b:
                    80:c6:98:fe:c3:cf:9e:0f:8e:54:e8:49:e7:03:07:
                    e8:96:fe:14:11:ea:d0:88:aa:0c:cf:e0:ce:a1:b5:
                    11:8a:c6:a8:15:c8:d3:ff:f4:6e:24:2c:c9:ed:7b:
                    3e:0e:d3:e6:c7:7d:e2:73:da:55:97:47:b2:2d:72:
                    89:87:2c:a4:f9:4c:1a:b9:93:52:01:d0:c5:6e:3a:
                    d8:4d:d3:f4:32:ac:75:fe:4d:c6:21:db:65:2e:c7:
                    c2:11:95:9b:38:f5:e8:87:6d:54:24:45:b8:65:92:
                    98:88:a8:1d:4f:a6:f5:db:fb:af:11:09:f5:85:c8:
                    d3:20:67:f3:e7:46:18:4b:89:cf:e9:bd:62:b4:e9:
                    ab:d5:2c:b5:3d:ba:2d:8c:6c:57:42:b0:6e:0d:86:
                    1e:d5:bc:ab:e6:34:76:12:0f:e5:12:05:5f:a2:ca:
                    08:53:89:b5:99:21:27:b6:35:ca:57:13:24:20:20:
                    55:ce:c6:ec:eb:2d:73:12:e0:e5:5b:5f:e8:2a:9f:
                    6e:6a:ac:b5:3d:ed:56:0f:83:53:9d:69:89:55:5f:
                    b8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:E3:67:CA:81:89:CB:80:4E:36:39:D0:AB:2F:D5:21:94:7F:96:C4
            X509v3 Authority Key Identifier:
                keyid:AC:B2:02:50:D4:CD:D3:66:71:9B:96:9D:6F:41:23:01:C1:3E:B9:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/_ONnyoGJy4BONjnQqy_VIZR_lsQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206557

    Signature Algorithm: sha256WithRSAEncryption
         06:f9:f6:2d:a9:57:ac:b5:83:4b:59:d2:c9:21:5e:98:93:a7:
         d8:82:8c:cf:da:70:8b:ff:f0:dd:d3:a6:1a:cb:83:f1:2b:d0:
         1c:dc:53:39:70:06:ac:9e:ca:16:fe:8e:2e:dd:1d:95:83:6d:
         ba:af:a9:49:56:4b:53:f1:46:a3:1e:9d:af:3b:f1:be:76:dc:
         41:38:8d:9f:bd:15:87:44:40:07:06:03:00:42:48:20:e0:96:
         b7:1c:e4:a3:42:55:c5:58:c0:ad:80:bd:6a:bf:da:46:ab:74:
         96:97:7f:0a:4c:bb:4a:fd:f7:18:9f:ae:d4:29:a5:03:ad:1d:
         34:55:40:85:80:b6:db:79:f4:e6:ac:71:c3:b0:98:64:d7:6f:
         5e:ac:b0:e1:63:3c:0b:ff:50:5c:93:19:b2:8f:a8:c5:d1:b8:
         cf:1d:4b:0a:3b:11:e6:8e:27:a3:6e:1e:2b:9a:9b:55:fc:8b:
         82:a0:4e:f2:58:ce:e1:bd:7e:e5:91:eb:21:88:40:7d:4d:8f:
         88:62:b6:12:44:fd:ab:f0:1a:3f:68:21:ec:35:6e:55:ab:05:
         07:24:7f:89:89:19:2d:d6:b0:df:37:9c:24:49:7e:65:92:0c:
         f4:a5:71:3a:98:fa:37:12:35:5a:2d:fb:e1:e2:bb:0f:3f:87:
         63:51:a2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 17:02:39 2025 by rpki-client