This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3a8604-76d9-4e95-9d8b-a42010514296/1/bzyJjbuCDIW55Y1BFbRoWGv4grQ.asa
File:                     bzyJjbuCDIW55Y1BFbRoWGv4grQ.asa (raw, json)
Hash identifier:          +u+29vjwK80vsHlbPupPL69T+chusu3cEMS40p3pEws=
Subject key identifier:   6F:3C:89:8D:BB:82:0C:85:B9:E5:8D:41:15:B4:68:58:6B:F8:82:B4
Certificate issuer:       /CN=f9e9da464ae8060b5bbd2a2c535de9d1151f7991
Certificate serial:       019AEFC5CEF607875CC0386D5302F479B101
Authority key identifier: F9:E9:DA:46:4A:E8:06:0B:5B:BD:2A:2C:53:5D:E9:D1:15:1F:79:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-enaRkroBgtbvSosU13p0RUfeZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/3a8604-76d9-4e95-9d8b-a42010514296/1/bzyJjbuCDIW55Y1BFbRoWGv4grQ.asa
Signing time:             Fri 05 Dec 2025 18:28:29 +0000
ASPA not before:          Fri 05 Dec 2025 18:28:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            210632
Providers:                AS: 11967
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/3a8604-76d9-4e95-9d8b-a42010514296/1/1-enaRkroBgtbvSosU13p0RUfeZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/3a8604-76d9-4e95-9d8b-a42010514296/1/1-enaRkroBgtbvSosU13p0RUfeZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-enaRkroBgtbvSosU13p0RUfeZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:ef:c5:ce:f6:07:87:5c:c0:38:6d:53:02:f4:79:b1:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9e9da464ae8060b5bbd2a2c535de9d1151f7991
        Validity
            Not Before: Dec  5 18:28:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6f3c898dbb820c85b9e58d4115b468586bf882b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:39:0d:20:a9:99:a9:e3:e5:45:c3:a5:9c:26:
                    b2:03:5d:0e:fa:2c:2d:1a:11:83:1b:11:1a:d3:10:
                    fc:97:d7:c9:a8:16:1f:51:c3:c5:f8:d5:fe:2d:32:
                    36:9b:6b:f3:64:5d:b2:e5:ca:17:cc:32:fd:89:2a:
                    74:df:27:c6:75:81:85:fd:e9:48:87:d3:4f:f1:08:
                    0e:c1:18:00:11:4b:7f:9e:2c:1e:59:d5:ec:27:c9:
                    1c:6d:1d:50:56:9d:bd:9d:ba:1a:01:e6:be:1a:20:
                    a0:1d:60:85:5f:b0:25:e8:34:f7:17:71:dd:d2:ae:
                    f8:5e:ba:ba:34:53:b4:b5:80:c9:33:91:b8:53:20:
                    a3:f3:5f:c6:f1:18:c9:85:a2:29:bc:3f:ec:01:66:
                    26:f8:8f:f8:c4:93:cb:87:ae:ff:5a:64:9c:5c:fe:
                    26:dc:1b:df:5d:77:4d:59:26:a8:ab:9c:e2:59:20:
                    a8:4a:b1:fa:4a:aa:2b:2d:f3:5b:06:27:45:77:54:
                    7b:1b:59:1a:95:b9:6c:bc:a3:95:c9:e9:b4:a1:3c:
                    45:ad:0b:75:d7:95:e9:8d:5c:15:cf:4c:0d:72:01:
                    0c:bf:6e:5d:b9:3c:fb:60:59:ce:1a:eb:44:87:da:
                    77:e3:e9:8c:3f:cb:fe:cf:57:69:7e:5f:93:fd:62:
                    ab:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:3C:89:8D:BB:82:0C:85:B9:E5:8D:41:15:B4:68:58:6B:F8:82:B4
            X509v3 Authority Key Identifier:
                keyid:F9:E9:DA:46:4A:E8:06:0B:5B:BD:2A:2C:53:5D:E9:D1:15:1F:79:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-enaRkroBgtbvSosU13p0RUfeZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3a8604-76d9-4e95-9d8b-a42010514296/1/bzyJjbuCDIW55Y1BFbRoWGv4grQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3a8604-76d9-4e95-9d8b-a42010514296/1/1-enaRkroBgtbvSosU13p0RUfeZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210632

    Signature Algorithm: sha256WithRSAEncryption
         0d:b3:1b:b0:5d:b4:e9:44:57:8a:1a:78:f6:76:c2:c5:cd:98:
         fd:65:6d:76:05:5a:91:23:82:be:b2:32:a5:64:c2:44:84:db:
         a8:04:39:dc:df:45:79:c5:89:d0:aa:a5:a5:64:ba:76:d8:b4:
         c7:ae:8e:0b:b1:8e:b2:fb:fd:08:2e:66:89:3f:01:b0:62:95:
         78:f4:b3:ab:e0:4c:3d:5a:08:0f:3a:b2:cf:24:07:cb:8d:a7:
         4d:91:a7:e0:ca:4f:76:20:f4:57:d1:b9:0b:60:88:ec:2a:ae:
         ae:70:d1:5d:df:6d:ec:13:fd:3f:93:df:1c:42:a9:47:8f:27:
         18:6c:da:c4:0f:68:4f:68:2e:d6:ba:00:8f:d0:f9:34:0d:64:
         5b:8b:5b:b6:e1:39:1f:c5:20:8d:86:76:1d:a3:80:0b:42:0d:
         f7:20:30:6b:0d:af:84:c4:32:2e:d3:14:0f:a9:41:72:7c:80:
         56:58:ba:08:e3:06:56:0e:5d:73:49:78:1d:0e:23:62:7a:4f:
         f8:b8:ff:38:ef:73:9b:10:b2:79:ae:3d:30:62:f1:8e:30:ee:
         ca:78:8b:df:d0:3e:3a:28:99:e7:34:da:71:4d:35:83:ce:6a:
         df:d7:2b:27:e3:aa:ef:47:e6:a7:a2:0b:92:89:c4:7d:ea:24:
         2f:6d:b4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:12:28 2025 by rpki-client