This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/eZW6Hra3VKDaHpIw4oWeb7v-Ing.asa
File:                     eZW6Hra3VKDaHpIw4oWeb7v-Ing.asa (raw, json)
Hash identifier:          prXq7zIRsAV9jtqOkMC/JnDXSMdKIhkp+Aj/pefkjkg=
Subject key identifier:   79:95:BA:1E:B6:B7:54:A0:DA:1E:92:30:E2:85:9E:6F:BB:FE:22:78
Certificate issuer:       /CN=df6a9267b18b36d828890a86387f310b84c04b63
Certificate serial:       019B212DD1F199D2506455E70340CCD6A8C3
Authority key identifier: DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/eZW6Hra3VKDaHpIw4oWeb7v-Ing.asa
Signing time:             Mon 15 Dec 2025 08:43:29 +0000
ASPA not before:          Mon 15 Dec 2025 08:43:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            24972
Providers:                AS: 2588
                          AS: 8194
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 08:43:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:21:2d:d1:f1:99:d2:50:64:55:e7:03:40:cc:d6:a8:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6a9267b18b36d828890a86387f310b84c04b63
        Validity
            Not Before: Dec 15 08:43:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7995ba1eb6b754a0da1e9230e2859e6fbbfe2278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ac:27:71:83:16:e5:c6:5c:58:ea:b1:cc:5f:
                    ff:4b:5c:e5:16:9b:f9:a8:74:07:d5:c8:38:e8:a1:
                    0e:c2:71:c9:84:14:90:97:30:ef:48:8f:ec:0b:07:
                    1c:3d:1e:e7:34:0e:1c:42:16:24:a6:98:67:a6:ee:
                    68:39:4f:40:37:5b:03:b4:f5:af:f9:78:aa:47:77:
                    82:9f:a0:37:37:1b:e2:12:42:82:7b:e7:c7:20:45:
                    15:9c:12:21:7c:71:67:e9:21:d1:42:9f:c7:3c:85:
                    ce:ee:0e:f3:77:ea:c4:6d:ab:e5:e2:eb:82:07:41:
                    5f:91:ab:91:38:78:f3:6e:93:e5:38:76:d7:b5:1d:
                    8a:0d:ef:84:b5:17:af:52:7d:65:69:d8:54:d6:8d:
                    68:7f:57:39:b2:83:6b:3b:48:c6:fb:6c:e0:1d:18:
                    d2:97:d9:0b:79:41:e7:13:1d:4f:02:d5:c1:0d:cb:
                    e5:09:2e:7b:f1:1f:a1:e4:45:ff:b9:9a:13:6b:63:
                    0e:15:5e:02:13:83:f6:65:af:c2:ea:90:29:36:a2:
                    94:9a:18:5c:aa:0b:b7:14:a0:3b:d0:b8:3e:10:63:
                    33:74:27:0c:62:4d:31:66:40:cf:7a:54:4e:7e:79:
                    1d:9d:99:e9:06:1c:15:c1:25:dd:61:ed:52:ef:82:
                    f4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:95:BA:1E:B6:B7:54:A0:DA:1E:92:30:E2:85:9E:6F:BB:FE:22:78
            X509v3 Authority Key Identifier:
                keyid:DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/eZW6Hra3VKDaHpIw4oWeb7v-Ing.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  24972

    Signature Algorithm: sha256WithRSAEncryption
         92:98:cf:ec:e8:e7:35:b7:cc:ec:b6:ea:28:08:5d:f2:6b:c2:
         d3:4e:27:44:df:2e:59:a6:dc:e2:9e:14:27:40:1d:c5:c8:8d:
         2c:83:c4:2e:0f:10:2c:c4:fb:c5:82:83:df:93:e5:ad:f6:64:
         f9:9f:95:87:ac:91:7d:44:26:7f:05:0f:65:00:f1:f8:12:2d:
         dc:ce:eb:47:c5:76:d3:02:3b:f2:94:25:05:ce:5b:0b:a4:61:
         ce:66:00:2b:bd:48:a9:0e:f8:07:bc:60:bf:8d:3a:fd:e7:28:
         8f:97:73:17:bc:81:de:33:c0:f9:f9:42:cd:76:a9:03:8d:42:
         57:fa:e3:1a:6e:de:ec:e7:bc:63:fb:99:82:92:69:c1:0a:8f:
         36:5d:6d:62:cd:f3:d5:20:aa:0d:dc:af:81:ac:de:c3:f3:f1:
         50:f6:60:23:08:5d:89:2e:34:a7:d0:35:22:3f:c1:74:84:68:
         6e:d1:21:c6:c4:34:be:89:82:fd:65:1b:27:78:7f:0c:97:ba:
         03:92:42:dd:de:43:d3:c1:84:e8:03:f0:a2:9e:95:68:a0:44:
         c3:5a:f7:4d:61:c0:40:ab:a4:97:f1:14:93:43:57:b6:c8:ab:
         60:c8:57:45:5e:00:f3:37:b0:09:91:b7:e6:8b:18:14:3d:f1:
         86:3a:ff:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 17:02:19 2025 by rpki-client