This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/xDM12CcGD2Bni6l8L8cHWegda-o.asa
File:                     xDM12CcGD2Bni6l8L8cHWegda-o.asa (raw, json)
Hash identifier:          KFGZ+nd44n5SlA7OxGk3cEFVuk7r49rEOqIITKnjxxw=
Subject key identifier:   C4:33:35:D8:27:06:0F:60:67:8B:A9:7C:2F:C7:07:59:E8:1D:6B:EA
Certificate issuer:       /CN=00b4fe4394e33fc22ac5cbb545f9cd1094087567
Certificate serial:       019ADFB4A18CDCB799EE623050613968A754
Authority key identifier: 00:B4:FE:43:94:E3:3F:C2:2A:C5:CB:B5:45:F9:CD:10:94:08:75:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/xDM12CcGD2Bni6l8L8cHWegda-o.asa
Signing time:             Tue 02 Dec 2025 15:35:48 +0000
ASPA not before:          Tue 02 Dec 2025 15:35:48 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            206155
Providers:                AS: 3215
                          AS: 6939
                          AS: 57199
                          AS: 204092
                          AS: 209533
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:df:b4:a1:8c:dc:b7:99:ee:62:30:50:61:39:68:a7:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00b4fe4394e33fc22ac5cbb545f9cd1094087567
        Validity
            Not Before: Dec  2 15:35:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c43335d827060f60678ba97c2fc70759e81d6bea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c4:01:15:b7:8a:f8:28:40:00:ff:af:8a:81:
                    6a:7f:fe:6d:1d:73:e7:e0:9e:60:d0:38:cc:00:1c:
                    6c:de:40:dd:0e:60:94:2e:a0:70:5e:50:72:38:bd:
                    ea:59:e3:78:82:c0:bd:e1:b4:04:f3:99:8f:db:19:
                    03:7a:97:19:4d:97:96:fe:20:41:a7:2f:96:d3:9c:
                    08:ed:09:64:ba:97:e1:d4:ed:ce:ad:58:7d:3e:a9:
                    ea:70:62:46:83:92:7b:92:aa:36:1e:40:86:82:f5:
                    68:0e:64:d8:92:e1:b3:33:39:b1:1c:a4:43:e7:c4:
                    0f:c7:45:f4:0b:53:20:fd:c3:5b:64:e9:35:1d:44:
                    d2:d4:17:4b:67:66:76:d5:a9:90:76:e1:55:57:08:
                    49:cb:fd:63:9b:53:27:d8:b4:50:70:69:24:46:53:
                    7f:5d:37:fe:3e:3d:9c:31:70:f0:47:74:a0:a1:a5:
                    cc:ba:3d:c4:3b:57:80:44:0b:2e:7f:d6:f0:76:c5:
                    74:c9:27:52:f2:ba:03:30:b2:94:74:68:b8:e0:dc:
                    09:72:3b:5b:e9:93:54:5f:85:d7:1a:3f:53:b4:e2:
                    1b:12:08:2d:bb:26:5d:6b:21:ba:f6:8e:63:b6:54:
                    71:ed:2e:8a:77:c7:ee:37:1b:ad:79:c5:e3:27:aa:
                    d5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:33:35:D8:27:06:0F:60:67:8B:A9:7C:2F:C7:07:59:E8:1D:6B:EA
            X509v3 Authority Key Identifier:
                keyid:00:B4:FE:43:94:E3:3F:C2:2A:C5:CB:B5:45:F9:CD:10:94:08:75:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/xDM12CcGD2Bni6l8L8cHWegda-o.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206155

    Signature Algorithm: sha256WithRSAEncryption
         8e:c7:54:ed:50:28:ca:ab:b9:22:ed:3d:14:d4:3c:56:16:4d:
         0d:ae:d4:61:69:10:6c:3d:76:09:f4:f0:13:be:38:0f:d4:f3:
         2a:08:f3:29:4c:3d:f5:18:0d:52:0a:54:cc:b8:cd:0f:f5:d7:
         0c:0f:f8:ac:fa:b0:4e:5b:20:c4:06:83:6a:58:e6:49:68:df:
         27:fd:83:93:73:fa:29:75:64:e5:42:85:4f:e5:15:dc:48:29:
         01:90:52:89:95:4d:49:2c:4b:46:1e:8d:47:ee:0a:9c:50:2c:
         4d:a0:f5:a3:33:f6:e1:d6:90:f4:79:a7:c2:cd:2b:5b:b4:71:
         9d:79:7b:cf:16:37:18:fb:d6:ad:6e:c9:eb:a0:f6:20:a7:59:
         4c:2f:43:c6:d9:28:35:79:4c:99:ac:30:30:91:9d:e3:94:25:
         99:b3:f0:99:f3:2c:ec:08:eb:c2:77:c6:b0:90:23:a3:81:b7:
         a2:3b:15:f6:bd:51:dd:18:78:af:88:1b:55:39:4d:40:45:64:
         58:c6:80:7b:93:a1:5a:97:f2:0c:4e:ec:95:ce:44:f9:d6:fd:
         41:b3:c0:f5:dd:0f:c7:2c:f5:35:5b:04:8a:b2:06:e6:ab:98:
         43:05:67:3e:be:5f:10:fe:22:cf:0e:b8:a6:a8:2a:f9:72:e8:
         2e:23:14:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:11:26 2025 by rpki-client