This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/Iir0TCJvEjSlAaycZZGnx4PF9Gc.asa
File:                     Iir0TCJvEjSlAaycZZGnx4PF9Gc.asa (raw, json)
Hash identifier:          4LzaB4uHCD+cW4z7Pu5qioLqpA0LrFeMNw2vl3XMFVY=
Subject key identifier:   22:2A:F4:4C:22:6F:12:34:A5:01:AC:9C:65:91:A7:C7:83:C5:F4:67
Certificate issuer:       /CN=e10d5c29a3439703d89b5abf03a75d861771bef4
Certificate serial:       019B47C45CB0332EF279343F42011A9332DD
Authority key identifier: E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/Iir0TCJvEjSlAaycZZGnx4PF9Gc.asa
Signing time:             Mon 22 Dec 2025 20:33:29 +0000
ASPA not before:          Mon 22 Dec 2025 20:33:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            12735
Providers:                AS: 174
                          AS: 3257
                          AS: 6762
                          AS: 9002
                          AS: 9121
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 09:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:47:c4:5c:b0:33:2e:f2:79:34:3f:42:01:1a:93:32:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e10d5c29a3439703d89b5abf03a75d861771bef4
        Validity
            Not Before: Dec 22 20:33:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=222af44c226f1234a501ac9c6591a7c783c5f467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2e:e9:d4:c2:2f:ab:4b:90:41:90:be:83:db:
                    de:de:ce:62:54:2b:40:7f:68:70:69:f7:10:77:ea:
                    c2:ab:f8:14:26:dd:cf:92:f6:0b:86:dc:e4:b8:46:
                    ff:13:bb:85:e3:79:1c:40:70:11:00:08:df:0b:21:
                    e8:53:4d:00:1b:e6:24:59:37:74:a9:a4:5b:7e:c4:
                    eb:6d:1e:39:65:75:56:f1:32:00:b6:92:62:0c:96:
                    82:e3:6c:5a:f6:4b:ec:c9:0f:ca:81:b8:45:2e:ba:
                    bb:a7:17:85:84:7c:50:0b:c2:fd:de:ad:bb:77:65:
                    7c:27:78:21:84:b7:9b:bb:82:be:47:e7:ac:a6:f7:
                    1c:59:4e:79:f6:73:3e:e3:08:c8:e2:42:66:b7:bf:
                    f8:26:ec:cd:49:98:7d:c9:9b:fe:f7:34:14:c9:64:
                    fd:fe:5b:c4:d3:31:d5:52:db:de:6d:fa:93:bc:49:
                    b6:3c:32:08:a6:b3:cc:c0:56:78:54:ec:84:52:38:
                    c4:23:f1:96:0c:69:e6:21:f8:de:a1:3f:3a:27:fc:
                    49:b8:54:c2:ad:3b:ef:23:1b:d1:c5:26:cc:05:63:
                    17:2a:78:2b:5e:ec:b3:58:af:5f:af:08:61:0b:6f:
                    3d:05:65:40:a2:f4:5e:4c:0c:2b:d9:ad:f4:4a:53:
                    77:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:2A:F4:4C:22:6F:12:34:A5:01:AC:9C:65:91:A7:C7:83:C5:F4:67
            X509v3 Authority Key Identifier:
                keyid:E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/Iir0TCJvEjSlAaycZZGnx4PF9Gc.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  12735

    Signature Algorithm: sha256WithRSAEncryption
         66:34:ec:a7:d5:bc:92:ad:5a:4d:8b:1d:5f:b5:40:58:5e:8b:
         43:bc:16:61:23:3f:0d:15:ba:ce:60:39:ea:b0:78:91:46:be:
         fc:f5:6c:64:0a:26:94:2f:d1:f1:76:12:46:25:37:b0:b0:96:
         9b:05:32:97:81:a8:bf:61:af:4e:77:a3:e8:97:90:0b:3e:c6:
         02:87:e2:c9:85:12:89:8b:47:df:28:04:ea:dd:e7:89:34:6c:
         ad:f6:fc:03:70:46:1c:ee:c8:c6:91:82:21:2d:b8:5f:96:f5:
         8c:1a:24:8c:a5:28:46:3b:e7:44:6b:b8:be:15:e4:4d:95:96:
         aa:4f:58:bf:a1:ae:33:5b:de:d5:2f:9a:bb:8c:61:aa:16:aa:
         8d:03:34:e2:84:c0:55:08:4c:06:91:ba:a5:7e:4e:c0:3c:82:
         16:81:79:43:2f:7d:01:ba:26:8d:a6:45:6c:16:7f:e6:44:64:
         86:cd:63:b0:f5:24:aa:79:63:28:cd:7f:0b:e4:1c:14:a4:c3:
         f3:ff:ea:7c:92:5f:d4:88:23:1d:ca:c1:12:0d:ad:dd:dc:fa:
         61:75:2a:96:0f:aa:4d:92:dc:79:4d:f2:15:0a:a3:11:4a:b0:
         1c:40:d3:b1:cf:2e:e5:09:10:b4:78:c7:8b:f2:47:d4:5f:3f:
         bb:c6:e3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 12:55:37 2026 by rpki-client