This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/fefy6snOGkYKz4BcC7pQsNK-PvE.asa
File:                     fefy6snOGkYKz4BcC7pQsNK-PvE.asa (raw, json)
Hash identifier:          SWtJqNFXQTI8LCAh4pXA3VcFga+kZdL/HJ4STKPzIpY=
Subject key identifier:   7D:E7:F2:EA:C9:CE:1A:46:0A:CF:80:5C:0B:BA:50:B0:D2:BE:3E:F1
Certificate issuer:       /CN=99f6bf0e8c6efc4affaf726288469caff417de66
Certificate serial:       019ADE6A1F961DACB6E202CE61F7DC0B02CE
Authority key identifier: 99:F6:BF:0E:8C:6E:FC:4A:FF:AF:72:62:88:46:9C:AF:F4:17:DE:66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/fefy6snOGkYKz4BcC7pQsNK-PvE.asa
Signing time:             Tue 02 Dec 2025 09:34:48 +0000
ASPA not before:          Tue 02 Dec 2025 09:34:48 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            203662
Providers:                AS: 63473
                          AS: 152900
                          AS: 215467
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:de:6a:1f:96:1d:ac:b6:e2:02:ce:61:f7:dc:0b:02:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99f6bf0e8c6efc4affaf726288469caff417de66
        Validity
            Not Before: Dec  2 09:34:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7de7f2eac9ce1a460acf805c0bba50b0d2be3ef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:46:67:f8:68:e2:52:96:65:ca:09:15:40:d0:
                    cb:53:1c:64:a5:83:01:f8:ec:27:8c:66:7e:51:a2:
                    1d:91:e4:d9:fe:9c:6b:b1:56:03:13:36:b7:0c:82:
                    ed:aa:37:25:43:42:11:86:6f:7c:83:4e:ef:16:5a:
                    ba:04:6f:a1:a3:72:da:35:1c:61:c4:04:fd:c5:2f:
                    4e:24:df:fa:f3:bd:11:9b:18:7e:54:b2:49:80:5d:
                    18:aa:b4:bc:60:b8:18:d1:6a:a2:9d:32:c6:0c:73:
                    71:c5:b7:83:20:c3:f1:78:80:f2:1c:af:f0:14:6a:
                    65:d7:73:5d:1f:af:70:aa:a6:aa:40:55:63:ce:eb:
                    70:60:d8:f5:ea:e8:dc:37:50:ed:65:8b:90:dc:c6:
                    0b:6d:46:65:b2:b0:fd:12:28:fc:ef:11:56:05:f2:
                    b3:4c:c5:f9:60:34:b1:8c:6c:96:ef:3e:b7:9a:bf:
                    a4:80:3b:5a:7d:72:22:5b:94:e3:c3:f9:45:7b:da:
                    40:21:b2:d3:d8:6d:a1:43:dc:76:38:a2:43:58:45:
                    8b:6e:a7:18:79:10:8b:d0:eb:74:f0:99:0a:72:61:
                    f6:3e:c0:36:c0:de:d1:36:70:e7:09:9b:92:1f:05:
                    2c:39:a9:d9:c3:b1:ff:98:92:ef:e2:d0:35:68:67:
                    3b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E7:F2:EA:C9:CE:1A:46:0A:CF:80:5C:0B:BA:50:B0:D2:BE:3E:F1
            X509v3 Authority Key Identifier:
                keyid:99:F6:BF:0E:8C:6E:FC:4A:FF:AF:72:62:88:46:9C:AF:F4:17:DE:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/fefy6snOGkYKz4BcC7pQsNK-PvE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203662

    Signature Algorithm: sha256WithRSAEncryption
         44:e4:93:ed:03:11:cf:2b:67:ba:d6:2e:3a:61:d6:4a:a7:6e:
         45:43:9d:8c:76:57:2e:9a:2e:05:b1:47:b9:56:34:6e:63:08:
         6d:e8:58:ed:46:8e:4c:9a:75:aa:20:6d:28:11:6b:a8:40:08:
         9f:f3:ad:8e:3f:52:67:9b:c4:0f:8b:f3:bf:8e:28:5a:bb:ab:
         81:34:5b:ae:4a:6c:27:52:41:a2:36:44:51:97:8a:ba:d9:20:
         53:24:11:04:84:66:88:65:d4:dc:f0:5f:5f:72:30:a0:a4:e3:
         f0:f6:82:5f:13:ad:24:83:94:e7:62:dc:6e:26:fc:10:3c:a3:
         47:ca:55:db:81:9b:49:95:e0:15:11:3f:83:e5:8e:69:68:c4:
         8c:3e:d6:26:80:eb:19:83:41:cd:a2:b9:0f:1c:41:4d:6a:01:
         87:15:ce:41:8a:5f:d7:5a:c1:7d:91:4a:ee:db:02:9d:4a:7b:
         4e:25:ab:2a:da:fe:29:04:ee:5e:19:e2:9b:90:57:e1:a7:d7:
         92:4d:8a:3a:11:17:a1:34:51:20:72:5e:dc:a6:70:28:5c:8d:
         04:62:8a:72:00:9e:c2:18:e5:64:53:f7:4f:ce:1d:61:c0:b2:
         15:0e:eb:d7:69:9f:d0:a0:8e:f0:5b:6a:bd:9f:9f:15:c2:89:
         58:83:c2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:11:42 2025 by rpki-client