This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/tIddSJpZ8A8bsH1Q9vYKm2A610E.asa
File:                     tIddSJpZ8A8bsH1Q9vYKm2A610E.asa (raw, json)
Hash identifier:          FxJTYjqaIVsvB66XTycCPAWGxY0433SU6Z6bkpRMAQ4=
Subject key identifier:   B4:87:5D:48:9A:59:F0:0F:1B:B0:7D:50:F6:F6:0A:9B:60:3A:D7:41
Certificate issuer:       /CN=84d509259f700cdc4448f1fbf530c19e40754ec4
Certificate serial:       019ADFC1727A4282C9E490C2490550184DB0
Authority key identifier: 84:D5:09:25:9F:70:0C:DC:44:48:F1:FB:F5:30:C1:9E:40:75:4E:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/tIddSJpZ8A8bsH1Q9vYKm2A610E.asa
Signing time:             Tue 02 Dec 2025 15:49:48 +0000
ASPA not before:          Tue 02 Dec 2025 15:49:48 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            59689
Providers:                AS: 29075
                          AS: 30781
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:df:c1:72:7a:42:82:c9:e4:90:c2:49:05:50:18:4d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84d509259f700cdc4448f1fbf530c19e40754ec4
        Validity
            Not Before: Dec  2 15:49:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b4875d489a59f00f1bb07d50f6f60a9b603ad741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:05:04:1c:1e:65:ae:18:1f:29:0b:48:f7:7e:
                    90:6b:59:d4:25:a0:67:ab:39:a3:bb:ee:65:e0:01:
                    f1:43:89:e4:5c:f7:17:5c:6c:0e:87:0b:95:3e:35:
                    98:9f:99:dd:20:32:35:99:00:4e:ff:75:3a:d4:eb:
                    5f:ca:e7:00:31:6c:9d:6e:2c:03:4b:00:4c:7a:44:
                    e6:e4:7d:2d:3d:26:af:3c:16:8e:83:c5:88:30:40:
                    81:de:6a:12:35:af:f4:c3:fe:c7:2c:82:ea:31:fa:
                    31:52:9e:cf:79:28:be:4a:b9:57:34:45:2e:3d:c2:
                    57:35:63:d7:b5:e8:c4:a2:e4:a1:8c:ca:e5:13:b4:
                    fb:6e:ed:b4:13:87:5d:c3:c9:7e:4b:bc:39:d6:61:
                    8f:e7:46:74:e3:de:cc:1e:79:f5:d6:24:73:d6:99:
                    a3:55:ec:2b:9f:d2:0c:67:c0:01:bb:f1:25:01:e9:
                    8f:f9:f2:58:99:bf:00:c8:73:8c:d8:93:85:bf:aa:
                    c4:4b:3a:d0:9a:ee:f4:f2:e0:42:5b:24:9f:31:e0:
                    58:08:64:02:28:f1:f6:e6:ef:bf:98:05:b3:62:93:
                    59:ab:5a:5d:69:47:f0:9a:3d:52:59:ec:2a:10:e7:
                    77:2f:4d:92:99:b1:10:dc:93:a2:58:f4:68:e1:68:
                    9c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:87:5D:48:9A:59:F0:0F:1B:B0:7D:50:F6:F6:0A:9B:60:3A:D7:41
            X509v3 Authority Key Identifier:
                keyid:84:D5:09:25:9F:70:0C:DC:44:48:F1:FB:F5:30:C1:9E:40:75:4E:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/tIddSJpZ8A8bsH1Q9vYKm2A610E.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59689

    Signature Algorithm: sha256WithRSAEncryption
         9f:cf:79:c0:8f:87:3b:50:34:9e:0c:ab:54:59:8b:76:c6:10:
         b7:89:73:cf:b0:ac:30:59:b6:ba:7c:5f:21:6b:55:25:7c:aa:
         c5:11:9e:c0:59:a7:8e:fa:32:1e:96:6f:66:16:f5:b3:33:bd:
         13:b2:3d:04:fe:44:b4:ce:2f:d0:f5:20:39:d8:65:0c:8f:75:
         20:8f:78:14:b2:f8:f1:c8:1b:b2:82:9d:ac:06:1f:bc:bf:e6:
         a6:93:11:3f:75:7a:87:c8:f9:85:26:a7:f9:3b:83:15:e8:d2:
         c6:12:db:91:af:29:51:76:eb:3c:6f:a0:d1:b2:6a:a2:94:7c:
         c1:3e:9b:ee:67:43:8d:20:ca:ae:b5:ef:06:a1:84:ff:84:67:
         c8:f7:55:83:ce:7b:bd:77:3e:39:de:02:57:f8:42:8a:b3:4e:
         c8:50:85:19:bb:ff:85:7f:ab:ba:0a:13:34:65:0b:4c:5a:39:
         c1:29:0c:d7:79:c5:c6:b6:e6:35:9f:13:d7:7f:b8:74:86:3a:
         e3:88:e0:41:56:fc:6e:73:fd:a3:5d:b6:9f:74:47:b4:83:2f:
         fb:7c:58:7c:ff:c5:d6:ea:ac:9a:2a:84:e4:8a:77:33:0e:d9:
         82:1f:7f:d9:5b:3c:19:61:dc:69:2d:a1:f9:ed:c8:04:f6:8e:
         26:64:fc:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:11:23 2025 by rpki-client