This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/wE8ISYtrI1jkz3hkFW01WhiNM5Y.asa
File:                     wE8ISYtrI1jkz3hkFW01WhiNM5Y.asa (raw, json)
Hash identifier:          iAmHSKDocjQmKtaNN1bnl1pex9KoDtpWCgQVRogFg3U=
Subject key identifier:   C0:4F:08:49:8B:6B:23:58:E4:CF:78:64:15:6D:35:5A:18:8D:33:96
Certificate issuer:       /CN=0b6ec8ed8fc93f72334f7a974a46bc27d1102923
Certificate serial:       019B0494592DCBF8AB2E1C0F5B85A68520A8
Authority key identifier: 0B:6E:C8:ED:8F:C9:3F:72:33:4F:7A:97:4A:46:BC:27:D1:10:29:23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C27I7Y_JP3IzT3qXSka8J9EQKSM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/wE8ISYtrI1jkz3hkFW01WhiNM5Y.asa
Signing time:             Tue 09 Dec 2025 19:26:29 +0000
ASPA not before:          Tue 09 Dec 2025 19:26:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            206345
Providers:                AS: 12880
                          AS: 24631
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C27I7Y_JP3IzT3qXSka8J9EQKSM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 15:30:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:04:94:59:2d:cb:f8:ab:2e:1c:0f:5b:85:a6:85:20:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b6ec8ed8fc93f72334f7a974a46bc27d1102923
        Validity
            Not Before: Dec  9 19:26:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c04f08498b6b2358e4cf7864156d355a188d3396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c9:49:e1:2d:95:c2:35:cf:b1:c6:3f:ac:a5:
                    f7:ea:e4:7c:19:ba:de:cf:cb:56:66:c8:ba:ad:7d:
                    d2:3e:42:db:52:cb:9c:80:ad:45:42:c1:83:f5:a8:
                    a9:ea:39:bd:ad:2a:86:51:40:32:be:42:e7:6a:7b:
                    28:ca:30:54:f5:f9:fe:b6:1c:2a:28:13:4c:e5:77:
                    10:e0:bb:b6:9c:55:20:11:05:8a:4c:bd:00:cf:1d:
                    da:23:24:1e:d3:ab:84:36:5e:d0:d7:19:4a:4d:eb:
                    91:50:1b:7e:87:ed:15:7c:11:c0:56:6d:6c:05:50:
                    28:2a:52:7f:5d:02:98:2e:ab:fd:a9:98:7e:8b:38:
                    12:e6:9e:15:26:e4:0e:30:eb:cd:9f:44:a1:fd:34:
                    54:7e:cc:89:ed:08:9f:a6:83:eb:84:ba:1a:33:48:
                    db:77:b8:5f:3a:16:55:70:d7:b0:44:e3:be:50:21:
                    ac:b5:0c:59:e6:07:e1:fa:7b:18:13:33:3a:26:7d:
                    2a:69:fd:a6:c3:55:e9:ee:29:99:ee:19:e5:7e:5c:
                    78:3d:a5:c3:4c:54:4c:b2:95:10:e1:aa:5a:a9:7d:
                    1f:2c:29:60:f1:d6:74:4c:f4:4a:01:23:f5:ba:67:
                    bc:5b:a6:ef:29:3f:a0:82:e9:8b:02:43:92:79:0b:
                    6d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:4F:08:49:8B:6B:23:58:E4:CF:78:64:15:6D:35:5A:18:8D:33:96
            X509v3 Authority Key Identifier:
                keyid:0B:6E:C8:ED:8F:C9:3F:72:33:4F:7A:97:4A:46:BC:27:D1:10:29:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C27I7Y_JP3IzT3qXSka8J9EQKSM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/wE8ISYtrI1jkz3hkFW01WhiNM5Y.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206345

    Signature Algorithm: sha256WithRSAEncryption
         11:13:f5:6b:cd:49:5a:30:21:c1:6b:f4:17:35:b5:9c:4c:05:
         46:c0:01:be:24:86:b2:05:d2:98:49:87:93:9a:88:c6:7f:67:
         ea:9b:60:24:dd:1f:f1:ec:89:c8:77:40:92:ff:31:52:8b:73:
         77:9b:05:7f:1b:bf:bc:02:6c:3e:52:80:d4:b2:78:24:5a:02:
         9f:fb:c8:3c:c6:db:12:f8:c5:17:8f:88:61:e4:0d:dc:fa:73:
         a3:3a:ee:25:73:d0:a8:a7:03:d3:2e:e7:ae:83:ab:53:46:a0:
         7c:05:f4:f0:22:66:de:58:ea:13:f0:35:e5:91:ec:32:70:6d:
         24:4c:c2:fa:d5:1b:64:6e:f6:30:11:e8:5f:ad:37:ab:8e:0d:
         2b:af:3c:08:70:c2:02:f3:64:6b:c4:83:28:c8:56:0e:a5:e9:
         d9:06:fc:5e:f2:70:41:b6:79:4b:b2:1e:ab:e0:13:63:8f:31:
         24:9b:57:f7:96:5b:89:f8:03:1b:c8:8e:ce:36:74:7f:8b:66:
         d3:f7:8a:82:b2:25:52:71:67:b2:a1:b8:e6:1e:b3:0f:21:d2:
         5f:13:54:da:02:b9:18:51:fe:41:7d:59:c7:46:0d:78:48:a7:
         c3:98:90:93:51:a8:38:81:b2:18:46:ab:94:4d:fc:34:0e:b1:
         55:cc:7d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 22:20:06 2025 by rpki-client