This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/utu4HG5Q_7wmUAMYqV-VoOkOlAU.asa
File:                     utu4HG5Q_7wmUAMYqV-VoOkOlAU.asa (raw, json)
Hash identifier:          GWkYlaZN+/4nG13OOIg1vJsZ8EIkcdYZl1pQv3olPHk=
Subject key identifier:   BA:DB:B8:1C:6E:50:FF:BC:26:50:03:18:A9:5F:95:A0:E9:0E:94:05
Certificate issuer:       /CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Certificate serial:       019AF37BF3D2481C3B6AF8BA60843FE7A387
Authority key identifier: CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/utu4HG5Q_7wmUAMYqV-VoOkOlAU.asa
Signing time:             Sat 06 Dec 2025 11:46:18 +0000
ASPA not before:          Sat 06 Dec 2025 11:46:18 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            44244
Providers:                AS: 12880
                          AS: 49666
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 11:46:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:7b:f3:d2:48:1c:3b:6a:f8:ba:60:84:3f:e7:a3:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
        Validity
            Not Before: Dec  6 11:46:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=badbb81c6e50ffbc26500318a95f95a0e90e9405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5a:fe:b5:9e:ee:9b:34:04:5a:66:c9:36:76:
                    51:b9:92:87:e4:5f:6b:3d:2f:fb:ee:16:3f:25:cd:
                    72:67:b3:7d:a5:e2:9c:0e:3e:00:45:03:d4:6f:da:
                    a2:cb:5a:37:d1:c1:08:f1:a2:4f:8b:92:47:31:6d:
                    63:fd:a7:b4:7b:fc:f4:f3:49:fb:f0:fc:c1:76:5e:
                    85:54:52:43:f4:2e:9d:d1:3a:02:5a:8c:92:ec:81:
                    f9:8b:ec:93:03:09:7b:36:a2:f6:34:41:4f:68:6c:
                    48:2c:8a:15:94:50:88:80:c4:2f:f9:66:be:11:b3:
                    2d:d6:52:bd:19:de:ad:2b:42:5b:ac:04:0d:93:47:
                    a3:99:eb:f9:fd:37:54:c3:58:a1:4f:82:81:d5:fc:
                    2d:86:f9:66:58:a6:cd:09:82:0b:22:54:c6:ad:37:
                    18:5c:48:d5:b4:d4:cc:b4:a9:b6:37:cf:09:d8:67:
                    6c:81:c4:83:87:30:6b:d2:0e:de:d2:5a:8d:2c:0a:
                    be:83:62:36:26:11:e4:cc:b7:9a:0b:fd:a6:32:7f:
                    ad:24:68:3c:6d:88:96:28:59:94:0d:04:33:73:b3:
                    d3:1d:09:03:bb:4f:89:fc:9e:c8:3c:6e:e0:12:52:
                    a6:4a:d8:4c:ea:46:ca:b5:9a:22:77:04:9b:a6:5c:
                    98:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:DB:B8:1C:6E:50:FF:BC:26:50:03:18:A9:5F:95:A0:E9:0E:94:05
            X509v3 Authority Key Identifier:
                keyid:CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/utu4HG5Q_7wmUAMYqV-VoOkOlAU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44244

    Signature Algorithm: sha256WithRSAEncryption
         96:0f:9f:d7:14:c8:2a:9d:ef:9f:ac:21:10:17:50:e6:bf:14:
         d9:f6:5f:09:e6:16:5d:52:c5:6a:d7:22:71:0b:1f:ad:ee:ec:
         99:e0:46:ee:36:38:2b:74:08:ae:91:eb:76:33:72:ce:18:bf:
         f2:47:3e:41:5d:27:bf:5e:e9:80:b6:fa:ff:18:29:6b:48:7f:
         96:cf:25:91:d0:a2:4f:f0:a5:06:14:89:32:0c:c5:f6:49:d1:
         ab:3f:9f:d6:93:d1:a0:3e:5b:c7:84:e9:2d:15:ce:9a:09:51:
         0c:de:aa:2c:da:f9:72:70:e1:0d:0e:4a:be:6e:6e:89:37:a4:
         fb:a3:46:96:f5:18:cd:e7:04:8e:40:c8:2b:70:a0:30:e2:a1:
         2c:65:1b:88:33:6a:ce:99:12:76:e8:f4:ab:e3:fa:cc:da:f9:
         ea:81:52:ec:d3:49:84:da:55:67:47:5b:f6:d1:04:06:b0:7b:
         a7:7a:82:9f:2f:fd:cb:ee:4b:83:2f:a0:00:0b:2c:e1:11:d0:
         2d:3c:a4:45:10:f9:a3:7a:0d:05:55:3b:97:a0:97:c1:61:ab:
         5d:78:9e:e3:18:fc:5c:c3:69:2c:df:50:0e:09:40:87:37:02:
         01:cc:96:a0:0b:4a:00:61:37:b3:a8:78:bd:4a:2e:25:6a:e7:
         a5:d8:ac:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:32:20 2025 by rpki-client