This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/sDDyHkEYz6b-uuUFfohEajuP1a4.asa
File:                     sDDyHkEYz6b-uuUFfohEajuP1a4.asa (raw, json)
Hash identifier:          NPqm48NMUC8oNjQMXA6W0RiB5e8zA7PLlrlh+UM6JA8=
Subject key identifier:   B0:30:F2:1E:41:18:CF:A6:FE:BA:E5:05:7E:88:44:6A:3B:8F:D5:AE
Certificate issuer:       /CN=6ffe7b21b62183d5e3d4ae1b93ff00909282c912
Certificate serial:       019ADA8433DAC3EC27DEB2A7B28E092DC221
Authority key identifier: 6F:FE:7B:21:B6:21:83:D5:E3:D4:AE:1B:93:FF:00:90:92:82:C9:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/sDDyHkEYz6b-uuUFfohEajuP1a4.asa
Signing time:             Mon 01 Dec 2025 15:24:48 +0000
ASPA not before:          Mon 01 Dec 2025 15:24:48 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            197942
Providers:                AS: 1257
                          AS: 3301
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:da:84:33:da:c3:ec:27:de:b2:a7:b2:8e:09:2d:c2:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ffe7b21b62183d5e3d4ae1b93ff00909282c912
        Validity
            Not Before: Dec  1 15:24:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b030f21e4118cfa6febae5057e88446a3b8fd5ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:13:91:a6:76:b8:03:36:91:e3:c5:58:2c:69:
                    58:83:db:59:5f:c6:fc:36:d0:e4:ba:ae:de:e0:56:
                    59:2f:5c:e3:17:2e:d4:ad:d9:e8:4d:f4:4f:a2:a6:
                    9b:14:63:54:9d:18:48:73:04:11:b1:d9:fa:7c:8e:
                    c1:d3:f3:eb:14:be:8a:88:fd:8b:83:8d:80:d4:6b:
                    ee:09:f2:a6:9a:4c:75:e2:d6:c2:00:31:aa:cf:0d:
                    84:24:15:be:fc:9a:7b:d0:bd:79:e0:c6:e6:48:82:
                    6a:72:9f:7c:28:4c:ed:82:14:de:13:c5:6d:e5:28:
                    5e:f6:bb:f3:cc:08:83:4b:6a:3c:f4:bf:f1:c8:78:
                    ce:b1:26:b8:c5:8d:8d:63:df:1d:9e:70:6a:80:85:
                    21:5d:c1:2e:14:70:77:25:86:18:36:bb:ee:ce:0a:
                    50:a3:29:bb:c1:77:55:de:0f:73:5e:94:43:51:26:
                    9a:ce:c7:0b:ed:19:92:24:06:e3:f8:ab:04:f6:be:
                    b0:ec:56:6b:f3:9f:4c:4b:58:64:c9:86:36:83:7b:
                    23:30:db:36:9e:e5:6f:23:7a:f2:6b:73:7c:0d:7a:
                    d5:f1:42:1d:6b:b1:63:c2:8d:ce:73:ee:ff:ca:42:
                    2b:4a:d8:40:40:9a:30:62:8a:59:54:0a:12:a7:05:
                    61:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:30:F2:1E:41:18:CF:A6:FE:BA:E5:05:7E:88:44:6A:3B:8F:D5:AE
            X509v3 Authority Key Identifier:
                keyid:6F:FE:7B:21:B6:21:83:D5:E3:D4:AE:1B:93:FF:00:90:92:82:C9:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/sDDyHkEYz6b-uuUFfohEajuP1a4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197942

    Signature Algorithm: sha256WithRSAEncryption
         ab:ed:cd:59:ac:ee:51:90:94:a0:47:4f:cc:d2:66:8a:d8:34:
         5f:f9:d8:c7:f2:bc:d8:c9:13:17:ad:66:3e:b1:d3:26:af:24:
         29:78:8f:bc:fa:fd:35:41:ce:bf:58:dc:71:24:cc:76:bd:ac:
         c4:a9:1b:7d:74:a0:66:25:23:6d:7d:d9:55:65:53:57:bf:8e:
         b0:29:9f:68:e9:16:52:f2:b2:1c:1a:3b:12:ee:47:02:40:ac:
         f3:8f:62:18:39:18:ff:98:23:78:4f:75:bc:79:2b:c3:85:13:
         13:7f:12:18:5b:39:51:f7:39:02:e7:d2:5b:88:19:f0:00:d6:
         39:13:63:77:23:bf:e1:80:d5:69:37:6d:a4:6f:39:87:c2:92:
         26:65:fa:ab:f6:5e:65:2f:1d:3e:32:4a:b4:3f:73:ce:f9:7b:
         35:8e:32:df:59:3e:d3:32:4e:07:41:77:8b:2c:33:22:e9:89:
         58:11:ac:3c:8f:8e:45:59:18:ba:54:fd:88:bd:66:e0:c7:7e:
         38:bb:5b:40:01:29:9a:a3:57:1c:39:c0:7c:11:2a:98:76:d4:
         3b:d4:01:2c:ce:35:e2:f6:68:e9:bb:a7:69:7a:89:b6:71:0e:
         2f:83:0b:07:0d:a0:c1:6d:00:f3:a7:2f:c8:53:79:6f:3f:e8:
         89:8f:4e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:11:44 2025 by rpki-client