This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VmP0ATIzlJZzuZmxdiDwxRRvSuY.asa
File:                     VmP0ATIzlJZzuZmxdiDwxRRvSuY.asa (raw, json)
Hash identifier:          QDqtnVv0GAfDesodj0ytNnBt7Z3JzA38fwKzHLeXSEk=
Subject key identifier:   56:63:F4:01:32:33:94:96:73:B9:99:B1:76:20:F0:C5:14:6F:4A:E6
Certificate issuer:       /CN=54d65d06de265da2b5d588e06df8816ef45b2e17
Certificate serial:       019AF3C907C2E11AE8C64A87A6F7FDF13B43
Authority key identifier: 54:D6:5D:06:DE:26:5D:A2:B5:D5:88:E0:6D:F8:81:6E:F4:5B:2E:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VNZdBt4mXaK11YjgbfiBbvRbLhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VmP0ATIzlJZzuZmxdiDwxRRvSuY.asa
Signing time:             Sat 06 Dec 2025 13:10:29 +0000
ASPA not before:          Sat 06 Dec 2025 13:10:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            203921
Providers:                AS: 212238
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VNZdBt4mXaK11YjgbfiBbvRbLhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:c9:07:c2:e1:1a:e8:c6:4a:87:a6:f7:fd:f1:3b:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54d65d06de265da2b5d588e06df8816ef45b2e17
        Validity
            Not Before: Dec  6 13:10:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5663f4013233949673b999b17620f0c5146f4ae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b2:9e:19:79:da:d6:0c:44:ad:3b:fc:90:0b:
                    0e:de:7a:ff:ef:22:95:c4:a1:76:ac:4b:d0:4d:5a:
                    6c:e7:d2:ad:0a:11:11:56:f4:99:45:12:49:35:b6:
                    34:38:69:91:dd:85:f9:dc:b2:9b:da:e1:4a:85:61:
                    10:43:34:1f:78:01:65:82:27:3a:72:83:57:1b:0a:
                    6f:4c:46:83:36:03:d5:7a:ea:49:d7:f5:98:2d:cd:
                    fa:f2:36:75:de:f0:5a:0f:0f:f9:92:1c:bd:1a:c6:
                    66:1a:4f:83:eb:c3:70:0c:62:ad:c0:67:95:51:7e:
                    5f:b2:82:3e:2d:95:32:3e:88:d1:cd:b1:c1:20:71:
                    c9:48:1c:3b:1b:fb:a6:24:52:d4:f5:b5:eb:19:a4:
                    12:1f:c9:e4:e0:6e:78:64:89:13:d2:64:15:de:64:
                    74:0f:ea:a9:8d:68:fc:d6:fb:32:64:c1:b0:75:ec:
                    28:fa:ed:40:59:b6:a5:6d:0d:a2:87:9a:68:f5:14:
                    c1:6c:ce:50:19:80:2a:59:57:e7:c2:3c:c5:4a:b2:
                    44:f8:e6:30:17:36:a4:36:78:45:27:1d:ef:ac:67:
                    00:dd:d3:36:d2:28:8c:11:3f:75:ca:6b:7a:fe:6c:
                    5f:1d:20:75:0f:7f:c3:60:f5:e7:e2:1c:32:40:14:
                    51:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:63:F4:01:32:33:94:96:73:B9:99:B1:76:20:F0:C5:14:6F:4A:E6
            X509v3 Authority Key Identifier:
                keyid:54:D6:5D:06:DE:26:5D:A2:B5:D5:88:E0:6D:F8:81:6E:F4:5B:2E:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VNZdBt4mXaK11YjgbfiBbvRbLhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VmP0ATIzlJZzuZmxdiDwxRRvSuY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203921

    Signature Algorithm: sha256WithRSAEncryption
         60:41:b6:88:ae:6f:a6:b8:9b:d1:e0:a8:40:52:f9:b3:bb:84:
         18:f5:e2:0d:71:45:cf:54:23:63:51:fd:9a:f5:5a:50:6e:c3:
         3b:07:75:60:7e:bf:32:c9:f2:e4:82:48:e4:72:60:f6:b8:d7:
         23:d3:87:32:04:2f:29:45:5a:ef:ac:70:ec:d5:cc:61:76:85:
         ac:93:c4:6d:9b:d4:81:9a:e0:ff:9d:95:71:52:56:65:3f:23:
         20:de:47:46:95:74:50:4b:61:dd:05:f3:f3:a7:00:6a:6b:4b:
         4d:a2:dd:ec:d8:c5:d4:8c:60:a5:f4:60:f9:13:99:6a:df:27:
         1c:ef:ed:6c:48:6f:a5:49:8d:f5:a5:d7:d7:2d:1f:8c:e0:e8:
         50:49:bd:52:3c:23:c2:70:19:d7:44:19:ef:f1:52:29:ba:e9:
         c5:5b:aa:4b:b4:85:84:55:50:04:2f:2a:7f:98:34:22:3c:5d:
         7c:1d:9b:86:7c:68:10:ae:e0:ed:05:c0:e6:53:1c:71:9a:6c:
         6f:88:ec:f7:e9:1d:45:c9:29:44:c9:34:0f:fb:04:d7:9d:52:
         74:92:f6:43:31:92:2b:5a:8f:00:f8:6f:93:19:a4:55:20:1a:
         aa:40:c0:8b:0f:d2:79:48:48:ec:22:3b:ec:18:f0:44:34:a3:
         97:f2:ae:04
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZrzyQfC4RroxkqHpvf98TtDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0ZDY1ZDA2ZGUyNjVkYTJiNWQ1ODhlMDZkZjg4MTZlZjQ1
YjJlMTcwHhcNMjUxMjA2MTMxMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjYzZjQwMTMyMzM5NDk2NzNiOTk5YjE3NjIwZjBjNTE0NmY0YWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7KeGXna1gxErTv8kAsO3nr/7yKV
xKF2rEvQTVps59KtChERVvSZRRJJNbY0OGmR3YX53LKb2uFKhWEQQzQfeAFlgic6
coNXGwpvTEaDNgPVeupJ1/WYLc368jZ13vBaDw/5khy9GsZmGk+D68NwDGKtwGeV
UX5fsoI+LZUyPojRzbHBIHHJSBw7G/umJFLU9bXrGaQSH8nk4G54ZIkT0mQV3mR0
D+qpjWj81vsyZMGwdewo+u1AWbalbQ2ih5po9RTBbM5QGYAqWVfnwjzFSrJE+OYw
FzakNnhFJx3vrGcA3dM20iiMET91ymt6/mxfHSB1D3/DYPXn4hwyQBRR9QIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFFZj9AEyM5SWc7mZsXYg8MUUb0rmMB8GA1UdIwQY
MBaAFFTWXQbeJl2itdWI4G34gW70Wy4XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVk5aZEJ0NG1YYUsxMVlqZ2JmaUJidlJiTGhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80ZWE4NzMtZmFmYy00MGQxLWFhZWIt
YTEzOTc4NzBiMTY2LzEvVm1QMEFUSXpsSlp6dVpteGRpRHd4UlJ2U3VZLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS80ZWE4NzMtZmFmYy00MGQxLWFhZWItYTEzOTc4NzBiMTY2
LzEvVk5aZEJ0NG1YYUsxMVlqZ2JmaUJidlJiTGhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMckTANBgkqhkiG
9w0BAQsFAAOCAQEAYEG2iK5vprib0eCoQFL5s7uEGPXiDXFFz1QjY1H9mvVaUG7D
Owd1YH6/Msny5IJI5HJg9rjXI9OHMgQvKUVa76xw7NXMYXaFrJPEbZvUgZrg/52V
cVJWZT8jIN5HRpV0UEth3QXz86cAamtLTaLd7NjF1IxgpfRg+ROZat8nHO/tbEhv
pUmN9aXX1y0fjODoUEm9UjwjwnAZ10QZ7/FSKbrpxVuqS7SFhFVQBC8qf5g0Ijxd
fB2bhnxoEK7g7QXA5lMccZpsb4js9+kdRckpRMk0D/sE151SdJL2QzGSK1qPAPhv
kxmkVSAaqkDAiw/SeUhI7CI77BjwRDSjl/KuBA==
-----END CERTIFICATE-----
Generated at Sun Dec 7 06:39:22 2025 by rpki-client