This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/7_Kx6Ctl8DaaoL5p_Ek3ZtApVT4.asa
File:                     7_Kx6Ctl8DaaoL5p_Ek3ZtApVT4.asa (raw, json)
Hash identifier:          8uOvnBvZoQsY2783oMLIp4UXHsh3oz2EmqHH8OrzbmU=
Subject key identifier:   EF:F2:B1:E8:2B:65:F0:36:9A:A0:BE:69:FC:49:37:66:D0:29:55:3E
Certificate issuer:       /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Certificate serial:       019B0DA9A945BC9902172D002C6051646BA7
Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/7_Kx6Ctl8DaaoL5p_Ek3ZtApVT4.asa
Signing time:             Thu 11 Dec 2025 13:46:21 +0000
ASPA not before:          Thu 11 Dec 2025 13:46:21 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            12929
Providers:                AS: 25400
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 14:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0d:a9:a9:45:bc:99:02:17:2d:00:2c:60:51:64:6b:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
        Validity
            Not Before: Dec 11 13:46:21 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=eff2b1e82b65f0369aa0be69fc493766d029553e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d0:41:6e:81:b8:28:89:9c:4b:ce:fa:08:2d:
                    b3:78:3e:b3:09:6d:71:5b:46:9c:b6:93:9f:86:41:
                    0f:b7:ab:3b:55:44:99:fc:06:30:a7:41:00:f8:06:
                    e4:5f:79:3c:6a:20:c3:1d:b6:90:92:e9:c4:6c:37:
                    9a:54:9c:e4:71:50:17:0f:a8:99:16:4f:24:42:d9:
                    a1:7e:40:a9:c7:23:06:66:a2:a6:17:54:a6:65:a1:
                    e9:7b:88:c2:e0:48:f9:ff:08:26:c3:87:7f:d7:21:
                    eb:f2:ae:8d:18:ef:e4:be:08:c2:54:9b:f5:6c:49:
                    f9:79:98:44:84:ae:7f:67:ee:09:ca:79:62:d3:72:
                    cb:32:98:f2:e9:a2:af:d3:d0:3c:ad:8b:8d:41:6c:
                    c0:c6:4e:41:06:5a:1d:d6:8c:88:8e:e1:e5:9a:4d:
                    31:8f:45:d8:f6:f4:de:95:60:e4:d6:97:69:f5:21:
                    29:2d:51:fb:91:7a:a5:e1:a9:e4:41:e6:24:10:33:
                    e4:b4:d3:50:c5:8b:c5:6b:11:f7:2b:47:36:83:7a:
                    54:ae:89:9b:83:20:ce:bf:a7:f5:bd:09:ba:62:c2:
                    b9:ec:8b:63:53:03:5d:2d:f5:b7:8e:e9:80:c3:a7:
                    1d:9d:cb:5e:c1:b7:83:6a:d8:a8:21:68:26:db:7a:
                    b1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F2:B1:E8:2B:65:F0:36:9A:A0:BE:69:FC:49:37:66:D0:29:55:3E
            X509v3 Authority Key Identifier:
                keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/7_Kx6Ctl8DaaoL5p_Ek3ZtApVT4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  12929

    Signature Algorithm: sha256WithRSAEncryption
         ca:3a:b7:e2:a1:02:9f:dd:b6:c0:3e:62:f1:08:c4:d1:c9:26:
         84:df:ae:95:0e:43:00:e9:dd:d1:3d:e6:0d:79:b7:f8:cc:88:
         16:2d:6c:e8:ac:8c:75:de:93:95:1d:6d:3a:f5:18:61:5f:43:
         7a:66:f5:8d:7f:1c:16:ac:a8:7f:2d:c4:1b:1d:5c:a3:7d:bc:
         d4:8f:1d:e8:39:6f:8d:51:3a:6a:00:36:8f:b7:9d:77:76:62:
         56:43:ed:bb:34:59:63:f7:1d:92:e0:c6:f8:b2:2f:ef:62:cd:
         2a:1e:2d:96:73:85:eb:d6:0e:e3:30:56:a6:31:52:2f:02:ac:
         99:3b:c5:e2:73:54:18:3d:b7:fa:13:f3:74:b5:11:65:9a:e4:
         8e:cf:f5:0e:9f:28:72:cb:ef:6d:2e:a7:c7:ba:2f:ae:39:ff:
         29:9b:be:e5:0f:bc:d7:86:11:22:dd:46:5b:be:09:f6:88:90:
         3b:1f:54:27:64:b2:3c:72:be:b5:a7:d6:79:4d:48:6a:09:6c:
         d8:c1:6f:c0:1f:b3:8f:e4:25:37:1b:25:c7:31:a2:b2:c2:84:
         ae:cd:85:ff:1e:d1:dc:0d:0e:71:11:43:f5:06:e0:ae:e0:20:
         d8:e4:9a:33:76:cb:70:65:bb:25:77:28:a5:1c:55:88:1a:95:
         b6:67:b7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 01:01:11 2025 by rpki-client