This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/696cb5-8ecc-4df6-982c-0b7ef38a7f87/1/qCwteeixvfUmwUqlzufJR0mv43o.asa
File:                     qCwteeixvfUmwUqlzufJR0mv43o.asa (raw, json)
Hash identifier:          VIKLjFhEh3iLKxVGVUNGi8c5wVoEFUBr/9WVYgRFi2U=
Subject key identifier:   A8:2C:2D:79:E8:B1:BD:F5:26:C1:4A:A5:CE:E7:C9:47:49:AF:E3:7A
Certificate issuer:       /CN=854cd3ba848afb792f2b2183fa62df2d520829bd
Certificate serial:       019AF64467F397035BD979CA85A62250DA94
Authority key identifier: 85:4C:D3:BA:84:8A:FB:79:2F:2B:21:83:FA:62:DF:2D:52:08:29:BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hUzTuoSK-3kvKyGD-mLfLVIIKb0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/696cb5-8ecc-4df6-982c-0b7ef38a7f87/1/qCwteeixvfUmwUqlzufJR0mv43o.asa
Signing time:             Sun 07 Dec 2025 00:44:29 +0000
ASPA not before:          Sun 07 Dec 2025 00:44:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            215685
Providers:                AS: 1299
                          AS: 6939
                          AS: 34927
                          AS: 62403
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/696cb5-8ecc-4df6-982c-0b7ef38a7f87/1/hUzTuoSK-3kvKyGD-mLfLVIIKb0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/696cb5-8ecc-4df6-982c-0b7ef38a7f87/1/hUzTuoSK-3kvKyGD-mLfLVIIKb0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hUzTuoSK-3kvKyGD-mLfLVIIKb0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:44:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f6:44:67:f3:97:03:5b:d9:79:ca:85:a6:22:50:da:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=854cd3ba848afb792f2b2183fa62df2d520829bd
        Validity
            Not Before: Dec  7 00:44:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a82c2d79e8b1bdf526c14aa5cee7c94749afe37a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cf:ae:25:74:65:fb:5f:0d:3a:44:66:d2:16:
                    a9:59:b6:07:4f:1c:c2:52:04:64:25:ee:d0:23:27:
                    43:8a:f9:15:8e:c5:b4:22:32:6f:ea:53:1d:e4:5b:
                    c2:1a:a5:a5:ff:8d:f2:de:81:45:16:e2:99:cf:ba:
                    b8:64:dc:99:01:6b:45:cd:fe:10:ff:d1:a0:d9:71:
                    7b:0b:ce:fb:57:ff:0d:72:42:0f:59:c2:2d:d6:1c:
                    4e:27:cc:fa:a2:79:36:e4:17:92:6c:be:02:a2:e2:
                    13:41:2b:27:d2:d3:be:2b:e0:a3:ec:10:d4:0a:8b:
                    60:13:d2:c9:99:bf:57:a9:f8:b8:48:3f:04:8b:05:
                    7e:08:6a:c6:ff:a2:2d:ac:8c:fe:12:e5:78:cf:a2:
                    cc:23:fa:c2:9b:0b:38:63:2d:90:66:7d:d9:68:7e:
                    28:42:56:72:8d:e6:99:f4:cf:3f:cb:1f:cc:21:da:
                    8b:0a:2c:98:5b:2c:23:10:d8:c3:bc:f8:5c:ed:00:
                    07:dc:17:20:4e:fa:cf:4c:96:8e:a5:e3:0b:60:37:
                    af:f8:0f:ea:19:83:38:7c:f8:4f:54:86:80:ad:2e:
                    be:d6:7f:8e:2f:16:f9:05:ee:0c:dc:68:e5:87:9c:
                    c3:95:39:9d:09:8f:52:0f:05:fa:33:80:2b:1f:16:
                    ab:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:2C:2D:79:E8:B1:BD:F5:26:C1:4A:A5:CE:E7:C9:47:49:AF:E3:7A
            X509v3 Authority Key Identifier:
                keyid:85:4C:D3:BA:84:8A:FB:79:2F:2B:21:83:FA:62:DF:2D:52:08:29:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUzTuoSK-3kvKyGD-mLfLVIIKb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/696cb5-8ecc-4df6-982c-0b7ef38a7f87/1/qCwteeixvfUmwUqlzufJR0mv43o.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/696cb5-8ecc-4df6-982c-0b7ef38a7f87/1/hUzTuoSK-3kvKyGD-mLfLVIIKb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215685

    Signature Algorithm: sha256WithRSAEncryption
         6f:c1:ed:bd:91:fc:bb:1a:ba:ea:37:6d:b1:19:ae:9c:6d:aa:
         32:30:ba:12:14:59:e2:55:d2:41:ad:df:67:01:08:90:eb:4b:
         4f:27:30:31:90:bc:6f:6e:10:5f:91:0d:fe:90:a6:47:df:e4:
         60:92:ef:a9:e9:6b:2d:ee:ec:16:6c:60:d4:c7:97:36:e7:89:
         91:b8:7d:3d:fb:73:cc:03:14:84:e2:b5:5f:b8:aa:cb:92:df:
         18:df:00:31:bd:18:1f:f8:26:9b:22:ba:7b:c3:02:83:3c:f0:
         34:fb:31:f7:cc:70:6b:91:33:39:01:37:f4:11:b4:4a:0d:0c:
         35:b8:c3:80:ed:83:b1:51:64:30:a3:b7:60:5c:3d:bd:9a:05:
         e5:5c:fe:41:61:96:21:23:05:4a:1f:62:be:b8:89:1a:e4:2c:
         c1:29:37:82:37:fe:ad:df:15:fa:ef:36:42:fd:5e:83:58:cf:
         1b:26:de:07:34:9b:26:ef:2c:81:fa:ba:dd:5d:21:5d:4a:19:
         41:4d:5f:4c:d5:e6:f8:34:2b:5a:88:02:18:e1:32:02:a5:cf:
         4f:76:8d:44:c4:b9:68:84:d0:24:91:58:ad:58:33:11:63:92:
         90:bd:e0:88:68:a8:3a:56:cf:c7:ff:d1:3d:a5:63:ab:aa:dd:
         f6:c3:a4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 09:41:31 2025 by rpki-client