This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/RkZNyp9wmYxkjqAQhf5rttwR3xU.asa
File:                     RkZNyp9wmYxkjqAQhf5rttwR3xU.asa (raw, json)
Hash identifier:          f/5DtLEb4wh+D+8sMIfmagBhhWS2Yg6kDyhzQs/zOTY=
Subject key identifier:   46:46:4D:CA:9F:70:99:8C:64:8E:A0:10:85:FE:6B:B6:DC:11:DF:15
Certificate issuer:       /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Certificate serial:       019B0DA9ABCBC8BA0589E656D1F6778D4036
Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/RkZNyp9wmYxkjqAQhf5rttwR3xU.asa
Signing time:             Thu 11 Dec 2025 13:46:21 +0000
ASPA not before:          Thu 11 Dec 2025 13:46:21 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            49455
Providers:                AS: 25400
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 19:27:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0d:a9:ab:cb:c8:ba:05:89:e6:56:d1:f6:77:8d:40:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
        Validity
            Not Before: Dec 11 13:46:21 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=46464dca9f70998c648ea01085fe6bb6dc11df15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9e:65:44:ca:ae:2b:8e:74:b9:98:09:4b:f9:
                    ed:5e:eb:f1:67:ef:ff:53:90:bc:df:1e:48:96:64:
                    f1:3a:fd:31:73:6d:32:47:e7:92:52:bb:6d:b2:cd:
                    85:07:b4:c8:58:5e:48:c2:41:3c:8c:1b:ed:f1:d5:
                    b9:39:03:f9:3e:e7:70:7d:08:05:e2:89:03:6b:d4:
                    05:bd:4e:f8:17:64:61:84:ec:c8:30:62:80:43:8c:
                    4a:b8:99:8e:f1:cf:a1:a4:56:39:19:6f:00:47:36:
                    98:c5:ae:79:69:89:84:d3:28:e5:fb:71:06:00:19:
                    b9:c4:03:3b:ea:10:4a:ce:ef:33:08:cb:ba:c6:6f:
                    2b:8e:f2:16:f6:c6:68:be:b8:f7:93:e2:0a:0b:56:
                    1e:ef:19:dc:54:50:dd:1f:83:a1:f9:98:b3:a6:07:
                    eb:d8:9e:4e:44:99:31:71:47:63:89:95:43:a4:b7:
                    57:76:34:aa:88:7b:42:70:94:e2:d7:50:56:c2:01:
                    48:c2:b9:15:73:5c:45:26:9c:1a:c2:eb:08:3c:bb:
                    c4:eb:1e:39:2c:9f:93:37:0e:94:90:08:d2:19:0e:
                    46:b5:da:85:e2:5d:3a:07:c2:81:6b:0b:bb:de:77:
                    b1:d9:59:55:ac:e8:70:43:fc:51:c4:4a:d1:5f:cf:
                    02:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:46:4D:CA:9F:70:99:8C:64:8E:A0:10:85:FE:6B:B6:DC:11:DF:15
            X509v3 Authority Key Identifier:
                keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/RkZNyp9wmYxkjqAQhf5rttwR3xU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49455

    Signature Algorithm: sha256WithRSAEncryption
         43:66:e4:6b:4b:c5:05:9a:2d:6b:b1:ba:16:ab:ba:04:eb:f9:
         b9:7d:d1:a9:39:02:d5:3a:9e:7b:a4:87:54:a8:b8:0e:4c:fd:
         44:ea:96:e1:12:ff:3c:cd:18:1d:6f:5a:ec:2e:b4:e2:b6:89:
         86:9a:5a:33:69:b0:c2:63:2c:23:e5:18:af:f7:56:6b:b8:1c:
         86:14:cb:b7:8e:c4:69:53:4c:ea:d3:c2:09:09:86:39:a4:79:
         16:e0:af:fc:65:f9:fb:b7:7b:03:d6:47:87:2f:0b:18:28:50:
         43:b6:cb:f5:11:ad:8e:fb:6c:09:59:b1:4f:9e:7c:18:1b:3f:
         8c:d7:bd:9e:0d:a0:f6:0a:19:4f:57:22:60:8a:5f:5e:51:7c:
         75:bb:46:0b:aa:5e:af:4f:52:de:1a:4c:9e:a5:d7:67:7c:ce:
         e8:52:c0:d9:08:aa:f7:0b:62:54:55:20:53:9c:4e:bb:6c:03:
         19:09:d4:41:c5:dc:c1:7c:c4:e1:8b:b0:9e:48:06:09:7c:80:
         8f:ed:24:7e:ea:a0:e3:1b:bf:fc:ad:46:f2:30:87:f4:2a:79:
         56:19:9e:be:4e:dc:30:be:32:f9:8b:33:a3:50:4d:b5:c2:80:
         bf:89:53:c7:10:e8:b8:0e:da:93:2b:29:61:71:af:1f:91:af:
         ee:53:c1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 02:41:58 2025 by rpki-client