This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/Lew-h_DR6pX_cLDKkCKKKvC30n4.asa
File:                     Lew-h_DR6pX_cLDKkCKKKvC30n4.asa (raw, json)
Hash identifier:          d3xiU+jGcgBPAr/J+bp6R3hubPZue+FUp5GBeI9OOQw=
Subject key identifier:   2D:EC:3E:87:F0:D1:EA:95:FF:70:B0:CA:90:22:8A:2A:F0:B7:D2:7E
Certificate issuer:       /CN=6a35ecf15f1a6db3c8261092aebe2213259135ce
Certificate serial:       019B04EE130DAE84472FE628C545F1456026
Authority key identifier: 6A:35:EC:F1:5F:1A:6D:B3:C8:26:10:92:AE:BE:22:13:25:91:35:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ajXs8V8abbPIJhCSrr4iEyWRNc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/Lew-h_DR6pX_cLDKkCKKKvC30n4.asa
Signing time:             Tue 09 Dec 2025 21:04:29 +0000
ASPA not before:          Tue 09 Dec 2025 21:04:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            213423
Providers:                AS: 34927
                          AS: 47526
                          AS: 212895
                          AS: 214915
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ajXs8V8abbPIJhCSrr4iEyWRNc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 12:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:04:ee:13:0d:ae:84:47:2f:e6:28:c5:45:f1:45:60:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a35ecf15f1a6db3c8261092aebe2213259135ce
        Validity
            Not Before: Dec  9 21:04:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2dec3e87f0d1ea95ff70b0ca90228a2af0b7d27e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:82:d8:60:04:59:b1:82:d8:d9:f9:ca:0a:15:
                    2f:93:e0:fe:33:e7:0f:94:0c:df:c8:8c:6c:81:31:
                    84:5b:47:35:00:7c:73:58:55:6d:1c:1a:10:ec:4e:
                    91:d8:f6:dd:85:a6:7d:bf:1b:f5:b4:f0:de:9f:43:
                    1f:ba:40:92:f5:63:ba:9a:e8:39:24:c5:fa:b6:88:
                    0b:a1:84:d5:3f:24:f1:23:ae:64:c6:b6:e6:b1:9b:
                    4e:fa:80:96:dd:cf:ec:9c:25:c6:c0:83:16:50:d4:
                    93:d6:d8:13:f8:6a:0b:96:84:93:35:10:0f:66:c5:
                    14:f6:29:92:a8:f1:e4:0d:58:35:6c:a7:88:ad:1c:
                    df:d5:d3:ac:20:a0:f5:ae:fd:35:7c:1b:0b:dc:26:
                    e7:43:00:f7:fa:51:e4:b4:9f:a2:77:5c:0d:7c:7a:
                    bc:c4:f0:7f:46:c6:e0:18:f0:07:97:90:3d:fd:b8:
                    30:60:7a:a7:74:02:d7:4b:d4:8a:1f:2e:37:4c:91:
                    ea:a3:20:7c:43:f4:ba:69:4d:a0:66:d5:56:45:9b:
                    da:0f:36:9d:80:4d:e9:48:a6:68:db:8e:2e:cd:46:
                    a1:1b:2b:01:b4:a7:a7:3c:2c:67:ce:12:68:ac:df:
                    7d:1e:54:4e:ab:16:cf:90:32:50:b3:f2:e1:8c:c8:
                    50:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:EC:3E:87:F0:D1:EA:95:FF:70:B0:CA:90:22:8A:2A:F0:B7:D2:7E
            X509v3 Authority Key Identifier:
                keyid:6A:35:EC:F1:5F:1A:6D:B3:C8:26:10:92:AE:BE:22:13:25:91:35:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajXs8V8abbPIJhCSrr4iEyWRNc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/Lew-h_DR6pX_cLDKkCKKKvC30n4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213423

    Signature Algorithm: sha256WithRSAEncryption
         55:7b:12:bc:60:7f:51:71:92:18:1d:aa:7a:46:46:72:d3:85:
         2d:c0:bc:76:1a:98:dd:dd:83:a7:aa:82:48:cc:f7:fd:24:6c:
         4c:6e:29:46:77:de:01:15:d1:f7:d4:49:16:4a:0a:35:3c:24:
         0d:b9:59:bf:da:49:ab:9c:fa:d8:06:47:3c:a2:56:03:de:9b:
         b2:a5:83:9c:2a:18:af:8e:e0:ac:07:30:b2:2d:5b:a9:78:c9:
         5b:20:d2:b9:18:36:24:0f:08:93:bf:03:d1:4a:e3:53:ac:00:
         c8:1d:b1:aa:49:df:74:ba:29:ad:ea:79:ad:0a:12:72:c9:91:
         b6:66:f9:4c:91:be:e6:62:2a:cd:04:4a:5d:1e:00:fb:d6:61:
         ad:16:d0:59:cd:09:08:71:eb:eb:62:ef:72:98:80:59:2e:47:
         7f:49:26:b0:7b:42:0f:10:bd:a4:cd:ae:53:8b:c6:4a:f1:6c:
         1d:8d:ec:4f:f2:1e:52:33:c7:46:29:ae:cd:8a:1d:3f:51:cf:
         bf:42:78:c9:7d:cd:7d:c6:ca:d7:a8:2e:f0:09:1b:14:f6:08:
         39:be:08:82:01:e3:31:66:6c:8f:8c:2c:ea:8c:80:ff:40:87:
         4c:ec:a5:16:92:bf:b0:fe:08:58:df:83:7e:f7:8b:d6:13:5f:
         2d:91:e3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 17:02:19 2025 by rpki-client