This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/jDQ8F_F11yNWOX6kbTNP0Ql0Wi8.asa
File:                     jDQ8F_F11yNWOX6kbTNP0Ql0Wi8.asa (raw, json)
Hash identifier:          a4/BoGxMxUQA6ejTQInWpx7OBve66J6mI7qjuV4Hb5Q=
Subject key identifier:   8C:34:3C:17:F1:75:D7:23:56:39:7E:A4:6D:33:4F:D1:09:74:5A:2F
Certificate issuer:       /CN=ca5154158905d1d44c4588dfd25802f324a93d61
Certificate serial:       019ADF288D9410370E9D469AFBC8036485BB
Authority key identifier: CA:51:54:15:89:05:D1:D4:4C:45:88:DF:D2:58:02:F3:24:A9:3D:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ylFUFYkF0dRMRYjf0lgC8ySpPWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/jDQ8F_F11yNWOX6kbTNP0Ql0Wi8.asa
Signing time:             Tue 02 Dec 2025 13:02:48 +0000
ASPA not before:          Tue 02 Dec 2025 13:02:48 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            213313
Providers:                AS: 35280
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ylFUFYkF0dRMRYjf0lgC8ySpPWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:df:28:8d:94:10:37:0e:9d:46:9a:fb:c8:03:64:85:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca5154158905d1d44c4588dfd25802f324a93d61
        Validity
            Not Before: Dec  2 13:02:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8c343c17f175d72356397ea46d334fd109745a2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7f:86:26:13:55:dd:c9:97:4e:1e:86:c0:e5:
                    31:fe:11:4e:3a:6d:06:9d:ee:0d:28:74:39:1c:60:
                    55:bf:52:30:2e:76:c7:2e:c8:70:f5:56:d2:61:a3:
                    35:61:aa:95:42:ad:c1:35:46:68:17:e4:21:ed:ed:
                    61:8a:49:30:2e:48:7a:c2:d8:cb:a7:16:ac:66:9d:
                    2f:e8:6c:c1:be:0d:9b:e1:71:e0:48:75:53:3d:de:
                    db:df:56:a6:0c:25:5b:2c:75:2c:dd:43:17:70:ed:
                    f5:95:b4:b2:e9:4f:a6:1c:83:74:fa:61:d0:b7:c3:
                    a7:42:09:76:8d:b2:6f:7c:dd:36:42:dc:e2:6a:00:
                    6e:fe:92:03:68:19:07:6a:2c:18:1d:8a:f4:ba:93:
                    60:c0:e3:b1:2f:3d:73:e1:f3:21:74:23:cd:2a:fe:
                    20:db:f8:28:ac:c1:0f:70:b0:d5:a9:52:ac:d6:83:
                    f9:31:91:51:9a:cc:58:a1:4c:a1:bc:4d:f7:d5:93:
                    03:5c:cc:e7:b8:75:d7:93:83:38:fe:b1:6f:40:19:
                    87:96:7a:a7:41:a2:a1:4b:b4:0d:c3:c1:fd:55:40:
                    13:63:ff:f0:cf:b5:c4:93:e2:8a:c4:2e:bc:f4:a5:
                    92:2f:b7:42:e4:0e:d5:4e:7d:c9:b1:0c:86:8b:65:
                    20:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:34:3C:17:F1:75:D7:23:56:39:7E:A4:6D:33:4F:D1:09:74:5A:2F
            X509v3 Authority Key Identifier:
                keyid:CA:51:54:15:89:05:D1:D4:4C:45:88:DF:D2:58:02:F3:24:A9:3D:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylFUFYkF0dRMRYjf0lgC8ySpPWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/jDQ8F_F11yNWOX6kbTNP0Ql0Wi8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213313

    Signature Algorithm: sha256WithRSAEncryption
         05:0e:f9:f1:63:33:9a:2d:6f:52:12:66:10:a3:4e:80:f9:3d:
         55:43:58:30:0f:c9:99:9d:79:7d:f6:65:48:bb:93:89:fc:75:
         fe:90:87:f1:16:af:fc:6d:9d:a6:5a:64:b7:d4:9d:6c:9a:43:
         45:f7:b4:34:43:82:c4:94:64:2f:fb:71:3d:5f:25:79:6d:f6:
         77:82:f9:77:6d:63:6d:4a:bd:82:e5:a7:fc:40:f6:60:a8:67:
         83:d1:3f:28:93:04:21:8c:7c:9e:64:09:13:34:73:64:53:ef:
         91:79:9c:b0:29:8a:45:e8:fd:57:3f:84:1b:07:6d:4b:03:3c:
         fe:01:77:50:32:96:bd:c8:8a:96:e8:cf:a6:e5:a6:e9:3e:0f:
         7c:3a:d3:58:f2:ee:e3:4c:47:39:aa:51:cc:b7:b7:7f:3c:79:
         2a:17:f5:53:ec:ae:55:60:70:b7:30:ab:70:de:82:62:ef:08:
         42:f6:54:67:26:02:fe:5c:57:42:63:3a:b4:1f:cc:e4:d7:50:
         f6:9d:f5:af:8f:44:73:40:ba:18:89:a0:de:0f:be:9e:4a:6b:
         5a:ab:da:2f:7d:b5:48:23:a7:f2:33:67:6c:a1:d5:08:67:b2:
         fc:e0:12:b0:cc:bb:8f:87:38:4a:a8:73:f4:53:70:22:25:66:
         dc:df:2a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:12:28 2025 by rpki-client