This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/vWwiGSVRiuY5G_sGCiMiyC9oZaw.asa
File:                     vWwiGSVRiuY5G_sGCiMiyC9oZaw.asa (raw, json)
Hash identifier:          TYWXQ81PwJFaPM/v0IBTjfWfvW7fjHxqu9IT+A6xBqo=
Subject key identifier:   BD:6C:22:19:25:51:8A:E6:39:1B:FB:06:0A:23:22:C8:2F:68:65:AC
Certificate issuer:       /CN=1d04af28f8f7aa858e27d8e2c76114c6ff49bace
Certificate serial:       019ACA17C220EE3CDB4C086B9101EA42D17E
Authority key identifier: 1D:04:AF:28:F8:F7:AA:85:8E:27:D8:E2:C7:61:14:C6:FF:49:BA:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/vWwiGSVRiuY5G_sGCiMiyC9oZaw.asa
Signing time:             Fri 28 Nov 2025 10:52:25 +0000
ASPA not before:          Fri 28 Nov 2025 10:52:25 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            212223
Providers:                AS: 9150
                          AS: 39686
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:ca:17:c2:20:ee:3c:db:4c:08:6b:91:01:ea:42:d1:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d04af28f8f7aa858e27d8e2c76114c6ff49bace
        Validity
            Not Before: Nov 28 10:52:25 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=bd6c221925518ae6391bfb060a2322c82f6865ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:da:16:b1:eb:80:9e:55:23:2f:a3:43:8e:52:
                    f8:d5:0e:fd:df:56:7c:ae:b8:19:5b:56:c9:9f:be:
                    86:aa:ff:e2:04:ef:63:7b:e0:c0:f9:de:c0:f6:8f:
                    4f:da:61:21:26:04:84:e9:e7:0a:cf:74:69:e3:48:
                    17:83:90:0e:fd:a9:3f:1a:e1:37:3b:1d:b8:06:38:
                    74:40:9e:fd:4b:78:58:97:0c:7a:69:cb:43:ad:6a:
                    20:a2:e0:05:b3:90:97:ed:74:5b:d2:08:76:c6:74:
                    06:64:8d:81:f0:ac:dd:53:d9:77:b0:5d:31:1f:52:
                    71:c8:17:b2:4d:67:cc:1c:a1:4d:9e:95:97:ca:0f:
                    cc:c4:0f:bf:ae:72:84:51:45:06:8a:e9:43:fa:9b:
                    0a:19:9d:ed:33:4b:07:a7:13:d6:7c:32:b9:5e:89:
                    49:44:56:d2:a3:de:4a:5e:e9:11:3b:df:2d:c7:79:
                    b4:d0:67:2a:cc:f7:49:91:c7:5c:04:0b:2c:e4:74:
                    21:69:e4:6b:22:67:4f:e8:eb:ed:23:73:be:be:52:
                    4b:bb:6e:80:f1:7d:b1:9d:bf:c3:6d:ce:4b:ef:51:
                    be:18:3c:05:3d:ce:20:71:41:b3:4a:ba:a2:f3:09:
                    6b:7f:c2:90:88:7c:35:f1:68:84:15:7a:f1:8b:02:
                    51:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:6C:22:19:25:51:8A:E6:39:1B:FB:06:0A:23:22:C8:2F:68:65:AC
            X509v3 Authority Key Identifier:
                keyid:1D:04:AF:28:F8:F7:AA:85:8E:27:D8:E2:C7:61:14:C6:FF:49:BA:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/vWwiGSVRiuY5G_sGCiMiyC9oZaw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212223

    Signature Algorithm: sha256WithRSAEncryption
         63:6a:f3:58:e0:56:de:6e:c5:a1:67:fd:ab:e2:25:03:13:23:
         14:29:f0:23:39:2c:c4:1b:d7:e2:c6:12:8c:cc:c6:2e:ad:0e:
         4a:af:e6:31:e0:df:84:70:c4:51:20:54:0e:50:bf:99:ca:37:
         a7:ee:0c:3a:1e:ea:04:7e:5c:45:fe:1d:9e:2f:22:17:69:3f:
         0b:eb:ff:01:f5:de:b5:fa:0b:48:08:45:87:43:2c:a0:3f:13:
         06:00:84:e8:5a:16:a8:61:4f:ad:22:e0:aa:af:3b:8a:34:36:
         76:f4:3f:94:83:38:e2:83:72:89:c0:87:b0:fb:1c:c1:4c:72:
         5f:36:68:5c:1d:b2:ee:91:5f:e5:ce:2a:db:f5:cb:23:4d:af:
         76:98:cd:02:56:be:1e:f0:53:9a:50:fd:a3:8b:dc:e4:33:38:
         54:6d:78:43:92:af:40:62:3d:b6:58:f0:ea:1f:33:ec:a3:df:
         12:96:3e:88:0e:c8:ae:28:b3:1e:9d:c4:c6:17:96:a9:ac:5f:
         5e:f3:ab:c4:2f:18:f3:4f:f1:f2:75:b1:54:02:8c:77:e0:54:
         c2:42:ad:45:f1:e2:dc:52:3f:33:49:66:c6:56:a7:59:c1:0b:
         44:81:cf:d4:68:20:27:17:27:4f:92:b1:3b:5a:f2:da:53:ee:
         e8:83:e0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:11:45 2025 by rpki-client