This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/tMCBLo17Jcu9nYj5dm70vUGR7Kw.asa
File:                     tMCBLo17Jcu9nYj5dm70vUGR7Kw.asa (raw, json)
Hash identifier:          6ybtRyvqW2iRo23vB9EOMEnUyiFtXyklB8ljlHnEAdI=
Subject key identifier:   B4:C0:81:2E:8D:7B:25:CB:BD:9D:88:F9:76:6E:F4:BD:41:91:EC:AC
Certificate issuer:       /CN=95d70bf80a07c9ffcbef0cd8465b458d613dcc85
Certificate serial:       019AF44CDF89A30419F8A83C018E22FABD0A
Authority key identifier: 95:D7:0B:F8:0A:07:C9:FF:CB:EF:0C:D8:46:5B:45:8D:61:3D:CC:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/tMCBLo17Jcu9nYj5dm70vUGR7Kw.asa
Signing time:             Sat 06 Dec 2025 15:34:29 +0000
ASPA not before:          Sat 06 Dec 2025 15:34:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            199557
Providers:                AS: 35197
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 14:30:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:4c:df:89:a3:04:19:f8:a8:3c:01:8e:22:fa:bd:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95d70bf80a07c9ffcbef0cd8465b458d613dcc85
        Validity
            Not Before: Dec  6 15:34:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b4c0812e8d7b25cbbd9d88f9766ef4bd4191ecac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:88:db:ef:a2:e0:64:10:a9:ae:1a:2e:51:ec:
                    41:db:58:cc:0c:59:58:80:3b:18:3b:e6:34:ca:d8:
                    24:f5:d6:0a:ec:d4:8d:5f:fb:4c:53:13:fa:90:d3:
                    f5:37:87:57:30:a6:3b:3e:69:09:01:cf:f2:9e:8a:
                    32:66:f9:d6:0b:b1:56:f9:a1:0c:5a:10:99:93:71:
                    1a:31:51:2a:d4:d7:04:7e:20:e5:33:88:a5:ef:96:
                    65:d4:3d:6a:6f:7b:f1:47:c4:23:09:c3:bb:9d:1b:
                    a9:b5:8a:3b:5c:57:55:b8:7c:43:a8:36:ae:66:8a:
                    d0:7d:78:69:25:f4:aa:37:44:02:a9:d4:14:a9:a7:
                    67:ab:8d:ab:db:cb:d1:e6:e8:9a:df:63:6d:50:25:
                    18:b5:e4:5b:a1:b3:18:44:c1:6e:ee:b4:d3:08:25:
                    a7:70:31:9b:bc:19:bf:0a:42:8b:ad:31:ec:02:e3:
                    25:0c:1f:1a:4c:10:f6:72:51:e1:af:4a:17:4f:ae:
                    1f:2b:01:ba:e2:02:f5:64:6d:cd:2f:ac:c7:94:f0:
                    62:61:42:d4:f2:14:64:2c:81:0c:b2:4f:a9:b2:0a:
                    73:e7:f1:4d:3d:5c:6b:36:a0:7a:27:ac:29:fd:70:
                    61:bb:a9:89:23:48:10:c9:ca:59:c8:d1:68:00:c7:
                    16:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C0:81:2E:8D:7B:25:CB:BD:9D:88:F9:76:6E:F4:BD:41:91:EC:AC
            X509v3 Authority Key Identifier:
                keyid:95:D7:0B:F8:0A:07:C9:FF:CB:EF:0C:D8:46:5B:45:8D:61:3D:CC:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/tMCBLo17Jcu9nYj5dm70vUGR7Kw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199557

    Signature Algorithm: sha256WithRSAEncryption
         7a:6b:77:60:6d:62:88:5e:e2:f0:24:b2:ce:86:f6:6e:c0:51:
         bc:1d:88:da:9a:d9:f9:d1:8b:eb:f9:85:05:e3:fe:c5:8d:96:
         e3:a9:cb:da:ca:c5:37:ae:5c:9e:71:f1:eb:d7:cb:fe:40:b8:
         f7:70:9f:a4:c1:7b:16:2c:82:a6:39:32:51:06:4f:7a:1c:cf:
         d7:77:95:2a:29:2f:1b:ff:e3:c4:c6:b6:92:9d:cd:22:83:d5:
         11:33:81:08:b2:ec:ab:55:1a:7e:70:02:10:fa:ad:cd:40:bf:
         90:6d:ab:69:e7:2c:8e:9a:c9:9c:3f:bb:54:98:7f:c0:2b:e6:
         ee:ef:3b:ec:ea:6d:a3:cb:59:49:bb:ac:aa:ad:0e:95:6e:94:
         2f:b4:92:fa:ba:c8:35:60:89:78:97:4c:44:f1:92:c5:40:6d:
         19:de:ab:30:2e:35:6e:c8:a1:13:19:61:83:ba:4e:b8:1c:f9:
         7b:a6:28:73:27:71:cc:88:57:57:02:43:f1:52:8f:b9:84:29:
         c9:41:8a:9d:93:85:34:ac:87:28:a7:f9:06:44:bb:e1:6d:cd:
         ce:ad:11:6b:e0:6e:23:2e:be:f9:63:e9:3e:67:84:bc:fc:63:
         60:3d:d8:42:bc:93:a7:ae:df:66:9f:15:ba:05:cb:97:07:6b:
         7e:f7:54:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 17:02:38 2025 by rpki-client