This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/2qEJf-3plphGQsWl8SQW6YyPVOo.asa
File:                     2qEJf-3plphGQsWl8SQW6YyPVOo.asa (raw, json)
Hash identifier:          4+rKO1n6NP2bn9zS31aZfPbPe3Ulpd6fobeXDKXV5hg=
Subject key identifier:   DA:A1:09:7F:ED:E9:96:98:46:42:C5:A5:F1:24:16:E9:8C:8F:54:EA
Certificate issuer:       /CN=fada41774765a4cdb050d82af11ba7d2d54b6e13
Certificate serial:       019B212DD2248158C30A7BD13386F2972F5C
Authority key identifier: FA:DA:41:77:47:65:A4:CD:B0:50:D8:2A:F1:1B:A7:D2:D5:4B:6E:13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-tpBd0dlpM2wUNgq8Run0tVLbhM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/2qEJf-3plphGQsWl8SQW6YyPVOo.asa
Signing time:             Mon 15 Dec 2025 08:43:29 +0000
ASPA not before:          Mon 15 Dec 2025 08:43:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            47922
Providers:                AS: 12578
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-tpBd0dlpM2wUNgq8Run0tVLbhM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 08:43:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:21:2d:d2:24:81:58:c3:0a:7b:d1:33:86:f2:97:2f:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fada41774765a4cdb050d82af11ba7d2d54b6e13
        Validity
            Not Before: Dec 15 08:43:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=daa1097fede996984642c5a5f12416e98c8f54ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4f:86:da:cf:6e:be:a5:78:46:45:6f:cc:93:
                    1f:52:1e:af:8f:35:cd:f6:2d:9b:bd:85:38:93:f7:
                    ad:c3:dc:02:41:df:75:27:90:cf:05:bf:40:f5:e6:
                    33:94:cc:11:42:fc:72:b8:4b:5b:9d:d9:41:74:e6:
                    48:83:48:32:5b:62:61:64:a2:b3:0c:8b:80:2a:39:
                    2f:d5:0e:18:88:2f:05:2e:b0:46:8e:c2:42:ba:f7:
                    c7:c2:06:4d:aa:59:85:0c:98:36:5b:ab:d5:45:b5:
                    cf:68:1a:8e:8c:d0:94:3e:07:93:47:88:1b:ce:17:
                    0e:a4:9d:dc:f1:50:fe:5b:40:cb:2d:d8:43:13:ce:
                    ee:82:4d:00:96:1b:e7:7a:18:2f:dc:03:79:2f:66:
                    cf:f4:da:c6:29:a8:74:ee:81:52:38:9a:49:2f:c2:
                    84:35:90:b1:8c:ef:7b:73:40:a4:5e:cc:3e:19:10:
                    2d:a2:fd:57:1e:6e:af:ef:2c:29:fc:f2:d7:60:a9:
                    0e:f4:54:7d:96:6f:f8:db:6a:99:b6:6c:f1:ce:7b:
                    48:12:85:7b:e1:a9:60:ae:b6:1b:d9:03:fe:10:64:
                    0d:49:09:b0:23:c6:13:e8:1a:ea:0d:3e:4a:3c:80:
                    dc:b7:c0:69:2f:a4:16:53:0d:a5:f5:62:a1:21:46:
                    82:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A1:09:7F:ED:E9:96:98:46:42:C5:A5:F1:24:16:E9:8C:8F:54:EA
            X509v3 Authority Key Identifier:
                keyid:FA:DA:41:77:47:65:A4:CD:B0:50:D8:2A:F1:1B:A7:D2:D5:4B:6E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tpBd0dlpM2wUNgq8Run0tVLbhM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/2qEJf-3plphGQsWl8SQW6YyPVOo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47922

    Signature Algorithm: sha256WithRSAEncryption
         35:11:7d:29:eb:a2:31:6d:f8:f4:4b:c0:2c:da:2c:25:f4:3f:
         84:f7:74:be:9c:74:ab:7c:b4:c1:18:ae:f6:34:a6:a9:72:b6:
         c9:15:10:0d:15:14:94:68:a6:c2:d0:24:1e:a9:0e:aa:5b:41:
         4c:e6:9c:59:1b:31:ba:ce:85:26:09:21:a3:24:8c:74:53:51:
         c3:9a:cb:59:cc:4d:95:11:e6:6d:15:e8:21:99:52:ff:bb:ce:
         e0:63:72:d9:bc:a6:42:7a:cc:6e:8d:5a:32:4c:79:4f:52:de:
         0e:a3:8e:09:84:3f:78:c7:8a:71:ac:5a:c5:0f:8e:78:ae:15:
         06:d1:9c:d6:75:36:3a:bd:5c:1b:36:e9:8a:cb:67:cb:0b:7c:
         94:fa:47:f9:52:1d:e3:e2:06:e5:61:13:a3:79:ce:78:81:f8:
         fc:dc:9b:32:24:09:8b:ab:52:32:ef:24:53:84:94:1f:94:1e:
         da:f2:3f:a7:8e:cb:6a:73:ad:7b:e6:b6:e4:4f:f5:2b:0c:e6:
         2f:03:c4:78:13:98:71:59:ec:60:0f:ce:dd:ef:15:06:11:cc:
         a1:7d:c5:c0:d1:2b:b1:4e:bb:d7:8a:6d:05:30:83:00:c4:64:
         36:45:13:3a:8b:02:e7:31:51:7c:a4:a6:91:e9:0a:a8:37:ed:
         de:c4:09:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 17:02:37 2025 by rpki-client