This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/Gaonav40tTJpKCNRA2Pgw8c6CJI.asa
File:                     Gaonav40tTJpKCNRA2Pgw8c6CJI.asa (raw, json)
Hash identifier:          qQGsDuLfuc8HGPjQosjqKzgl1S/2LQUHdjWbkc+kEYQ=
Subject key identifier:   19:AA:27:6A:FE:34:B5:32:69:28:23:51:03:63:E0:C3:C7:3A:08:92
Certificate issuer:       /CN=cf328249cc35ec27cc10e18b882c6c13897c8497
Certificate serial:       019B212B129BFF5ECF441133CA28C4355EFE
Authority key identifier: CF:32:82:49:CC:35:EC:27:CC:10:E1:8B:88:2C:6C:13:89:7C:84:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/Gaonav40tTJpKCNRA2Pgw8c6CJI.asa
Signing time:             Mon 15 Dec 2025 08:40:29 +0000
ASPA not before:          Mon 15 Dec 2025 08:40:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            62220
Providers:                AS: 8194
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 08:40:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:21:2b:12:9b:ff:5e:cf:44:11:33:ca:28:c4:35:5e:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf328249cc35ec27cc10e18b882c6c13897c8497
        Validity
            Not Before: Dec 15 08:40:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=19aa276afe34b532692823510363e0c3c73a0892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f2:9c:f2:c9:80:b8:5f:e5:7b:29:85:46:e9:
                    72:ce:54:f0:cd:3f:f4:62:44:8d:e6:e0:3d:b8:08:
                    5b:d1:50:a5:da:14:39:a5:3a:74:3f:97:8d:98:21:
                    4d:75:78:e5:ed:24:de:e7:53:20:2a:bf:a6:f5:65:
                    f4:a6:d2:a9:bf:5b:26:d2:f8:92:a3:9d:9c:90:90:
                    9c:f3:c3:62:92:4b:3e:76:30:70:c7:ba:ad:4f:44:
                    20:6c:8b:0a:f5:fd:d9:67:62:0f:14:c9:49:95:13:
                    d7:05:0d:e6:75:e6:0f:7b:d9:b9:b8:70:c0:bb:cb:
                    41:7d:5b:e2:7a:50:94:06:60:f0:34:61:ee:ca:34:
                    c2:15:64:b2:26:c0:9d:bc:97:50:81:7a:2d:72:17:
                    19:8a:28:66:8a:cf:c9:61:e9:61:66:23:8f:ab:80:
                    e5:6c:13:40:85:84:41:8a:56:68:c4:75:8f:af:fb:
                    75:bc:f2:0d:3c:38:fc:77:32:c4:f0:2e:d8:a7:80:
                    87:aa:4e:8b:40:1d:2a:92:50:2d:c8:51:c8:6b:3f:
                    3e:3b:e5:5b:40:8d:51:40:9e:8e:1a:de:65:e1:82:
                    9b:43:da:65:5e:eb:4a:a1:d4:87:34:a8:a8:73:ed:
                    10:15:35:e0:84:38:a1:e9:77:a5:9b:ee:77:8d:b6:
                    95:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:AA:27:6A:FE:34:B5:32:69:28:23:51:03:63:E0:C3:C7:3A:08:92
            X509v3 Authority Key Identifier:
                keyid:CF:32:82:49:CC:35:EC:27:CC:10:E1:8B:88:2C:6C:13:89:7C:84:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/Gaonav40tTJpKCNRA2Pgw8c6CJI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62220

    Signature Algorithm: sha256WithRSAEncryption
         05:5c:3e:f2:01:43:02:56:fb:ad:4b:7c:53:4a:a2:8e:28:e6:
         21:0b:81:64:54:8e:57:a3:4a:b3:c4:a2:75:83:1b:2b:11:d4:
         8b:45:8e:de:3a:84:7d:0d:54:0d:65:80:e5:68:d3:be:b6:66:
         31:b9:70:a8:6e:53:0d:3e:e1:06:2b:7b:e8:b9:82:f7:58:bb:
         de:fb:b6:c6:59:95:59:e9:fd:60:3e:3f:8b:4d:45:ac:69:7f:
         19:5b:24:e5:df:83:b7:53:dd:36:7c:6f:c1:70:61:05:34:d3:
         1c:a1:34:30:65:50:17:64:42:70:c8:c2:d4:bb:c6:b8:0d:a6:
         b1:e6:1e:14:75:35:c1:41:54:5f:e8:4d:ca:e2:f3:76:72:3c:
         4a:00:11:ef:85:8c:7f:fb:2b:04:34:e7:5c:3d:cc:92:01:72:
         8d:d7:25:35:8e:36:5e:af:92:84:d8:90:e3:6e:5b:71:fe:f7:
         0e:9a:4a:3a:0f:e4:e3:7c:ec:7d:90:48:f1:92:89:f5:e8:d1:
         b7:19:f1:4b:37:5f:ab:b7:a8:a3:35:ad:83:67:1b:4a:f2:77:
         5a:5f:6d:c4:54:7a:8f:5f:ec:94:c7:68:84:12:e1:f5:26:fe:
         9c:c1:03:37:07:eb:fe:39:76:f2:82:5d:59:fd:19:72:77:81:
         66:08:e6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 17:02:54 2025 by rpki-client