This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/8d01Xvs_aaIVSfahCINvVoz5qZs.asa
File:                     8d01Xvs_aaIVSfahCINvVoz5qZs.asa (raw, json)
Hash identifier:          hdcUHQVv+Z/OXdZkuAsmuPgKWFluiU3e3EejuVlqoak=
Subject key identifier:   F1:DD:35:5E:FB:3F:69:A2:15:49:F6:A1:08:83:6F:56:8C:F9:A9:9B
Certificate issuer:       /CN=99892f0793cc894bf2a4c74875af08aa2d1d1c99
Certificate serial:       019B2BEC1206C624DD5668515A49FF03A713
Authority key identifier: 99:89:2F:07:93:CC:89:4B:F2:A4:C7:48:75:AF:08:AA:2D:1D:1C:99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/8d01Xvs_aaIVSfahCINvVoz5qZs.asa
Signing time:             Wed 17 Dec 2025 10:47:29 +0000
ASPA not before:          Wed 17 Dec 2025 10:47:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            61125
Providers:                AS: 24875
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 07:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2b:ec:12:06:c6:24:dd:56:68:51:5a:49:ff:03:a7:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99892f0793cc894bf2a4c74875af08aa2d1d1c99
        Validity
            Not Before: Dec 17 10:47:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f1dd355efb3f69a21549f6a108836f568cf9a99b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ea:2c:6e:67:f5:0d:fd:9e:8f:42:1d:4f:60:
                    8f:56:f1:c7:9e:84:f4:c9:9a:71:db:cc:30:bf:c0:
                    10:c7:e3:74:05:d0:85:1a:0d:d2:7a:3b:9d:ce:88:
                    70:f8:3a:0e:05:ab:f6:72:48:39:a4:f3:29:d2:1d:
                    40:7d:c4:f4:ef:a6:e9:3e:ae:7b:13:fe:e5:df:ba:
                    14:6f:ac:01:a3:1e:b0:27:ce:81:0c:f5:18:1c:d5:
                    e8:3a:77:26:3e:87:a7:41:5c:54:c5:b4:d3:bf:2e:
                    1e:e6:cf:8c:ab:c3:43:6d:13:48:a6:65:69:70:ae:
                    20:ca:c3:ad:8d:59:f7:04:13:6a:0d:87:a4:e1:ca:
                    b5:77:ef:52:e5:f2:5a:44:24:04:bb:de:7e:9c:71:
                    83:c6:5b:94:cb:03:2a:4e:9e:6c:3c:78:58:2f:f2:
                    22:22:ce:3c:fb:3c:9b:6c:77:de:ee:93:7b:d9:ec:
                    da:84:45:97:2f:53:78:0e:a2:4c:a8:96:62:eb:ba:
                    a2:ac:cd:a4:21:d2:fa:59:e4:9b:b7:aa:24:24:06:
                    49:0f:e1:a9:48:1e:ef:33:81:0e:be:8c:9f:4f:42:
                    e6:61:7c:43:33:fb:70:41:17:ec:1d:58:a1:5c:88:
                    86:91:18:aa:04:6d:f2:db:7b:9b:b7:02:88:36:4f:
                    17:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:DD:35:5E:FB:3F:69:A2:15:49:F6:A1:08:83:6F:56:8C:F9:A9:9B
            X509v3 Authority Key Identifier:
                keyid:99:89:2F:07:93:CC:89:4B:F2:A4:C7:48:75:AF:08:AA:2D:1D:1C:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/8d01Xvs_aaIVSfahCINvVoz5qZs.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61125

    Signature Algorithm: sha256WithRSAEncryption
         b3:89:ce:88:df:28:6d:26:be:63:46:0f:6e:fb:41:e6:2c:ed:
         1d:cc:f0:fd:98:4f:8c:2f:df:ec:f0:83:90:ab:59:71:0e:12:
         73:c9:0f:ab:38:c2:c0:35:f0:ca:36:ca:c5:77:08:82:56:31:
         5b:c8:7f:98:43:f2:d8:2c:15:a5:48:9f:57:9f:0c:98:0e:26:
         d5:8f:6e:03:b2:63:03:55:b6:b9:3d:6e:48:d3:1b:15:ec:dd:
         c9:05:25:28:27:62:39:3a:31:2a:8b:62:a4:54:14:f8:5e:07:
         bc:35:24:53:e4:62:92:7c:74:35:1b:b5:c3:9c:19:7c:68:45:
         41:82:07:7c:83:94:af:89:a4:d8:69:3e:e6:3c:0c:c1:8e:be:
         34:f6:7f:f3:81:7a:a7:f0:16:96:56:ad:bb:48:53:57:54:93:
         19:4d:f9:e1:9a:da:f0:9d:15:e7:3f:fd:a4:92:52:51:04:b2:
         db:12:a7:57:a3:02:40:0f:3a:67:f1:a2:2c:80:91:bc:b7:b5:
         f7:89:1e:05:a1:60:1b:fb:3a:55:03:33:4d:d0:69:66:db:fa:
         4f:d1:08:ca:27:dd:f4:c5:d9:23:88:75:49:5d:ac:57:c3:c5:
         92:9f:db:1e:98:18:6f:92:29:4a:94:7b:3f:d9:a7:94:18:fb:
         68:d7:74:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 09:25:19 2025 by rpki-client