This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/7Vc6GyFzlJHyTewvOkdwJkLS-9s.asa
File:                     7Vc6GyFzlJHyTewvOkdwJkLS-9s.asa (raw, json)
Hash identifier:          HPQdXwyp3J2HnbICqRn22xILcDG/y13SiXtWcNiXZ2k=
Subject key identifier:   ED:57:3A:1B:21:73:94:91:F2:4D:EC:2F:3A:47:70:26:42:D2:FB:DB
Certificate issuer:       /CN=d833bfa014b9192f2700acaf6f279dbef8a0aff2
Certificate serial:       019B238C87E5C1E1094ADA7C94CE3C73F7D1
Authority key identifier: D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/7Vc6GyFzlJHyTewvOkdwJkLS-9s.asa
Signing time:             Mon 15 Dec 2025 19:46:10 +0000
ASPA not before:          Mon 15 Dec 2025 19:46:10 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            8943
Providers:                AS: 1299
                          AS: 5405
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 19:20:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:23:8c:87:e5:c1:e1:09:4a:da:7c:94:ce:3c:73:f7:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d833bfa014b9192f2700acaf6f279dbef8a0aff2
        Validity
            Not Before: Dec 15 19:46:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ed573a1b21739491f24dec2f3a47702642d2fbdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:87:1b:c0:10:a7:62:6c:a6:7b:17:c7:93:89:
                    4b:69:4b:01:bb:dd:00:f5:b1:d9:76:4b:98:62:d7:
                    a5:89:14:c7:cc:b0:ae:24:59:0b:89:d1:7f:04:28:
                    9d:ab:3f:2e:02:19:84:19:e7:b5:8d:e1:9f:dc:14:
                    5e:71:c5:8a:b1:48:b0:17:47:dd:4b:a6:bf:98:a7:
                    17:02:e7:15:5a:8b:d3:96:a5:e4:30:78:f8:3f:dc:
                    ba:a1:0d:1c:ab:65:0c:da:ee:30:56:fb:84:4c:6f:
                    e3:b7:4f:2b:69:15:5b:08:73:9e:01:d8:4e:6d:1b:
                    54:08:4a:54:f8:86:7b:59:68:51:b6:a4:50:79:18:
                    67:77:90:1a:1d:7b:fe:59:28:5b:6b:a6:f4:d6:4b:
                    39:8e:e3:2a:a4:e5:bb:3b:01:63:0f:11:52:18:e3:
                    23:ff:71:ed:cc:af:43:e3:f5:dd:22:81:56:ae:0d:
                    ce:67:70:f0:6e:17:c1:18:82:b7:45:88:6b:d6:11:
                    71:b6:1d:d3:52:b8:d1:33:a3:39:64:b0:e6:7b:0e:
                    24:4f:e4:b8:fa:a1:31:34:04:6c:35:6e:54:df:bd:
                    aa:8a:7b:42:61:82:81:70:c5:1b:b1:02:af:38:33:
                    c3:7b:a3:f6:62:65:c8:af:e9:5c:a3:b0:05:96:f1:
                    0f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:57:3A:1B:21:73:94:91:F2:4D:EC:2F:3A:47:70:26:42:D2:FB:DB
            X509v3 Authority Key Identifier:
                keyid:D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/7Vc6GyFzlJHyTewvOkdwJkLS-9s.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  8943

    Signature Algorithm: sha256WithRSAEncryption
         54:13:15:fc:c0:56:3e:b6:a0:cc:2b:5a:49:88:e6:ba:fa:85:
         fc:ab:2e:83:5c:2f:4a:4e:af:46:c7:4e:56:55:c6:95:46:dc:
         b6:ff:37:bc:f3:dd:81:cb:a0:35:ab:1e:0d:13:24:9e:e1:5d:
         00:c2:6e:3a:2f:78:6f:0b:d4:8d:a8:d6:7a:10:aa:88:c9:fd:
         9d:d9:7b:3d:ec:23:be:20:11:82:ad:e3:24:c9:fa:08:be:8d:
         77:1f:2f:fb:61:8d:bb:8a:15:e2:9b:39:85:fc:5b:a5:3a:59:
         58:52:af:15:8d:3b:60:f6:d1:18:b9:dc:eb:e4:d0:71:e2:32:
         cd:c9:18:0b:6b:cb:31:7b:76:4b:c4:d1:1b:0a:fd:16:3a:8f:
         9a:a7:0a:b2:f4:58:08:83:1b:d3:9b:12:aa:36:62:79:4d:b1:
         8b:85:e9:b3:f4:37:fd:85:29:73:da:8f:39:40:57:38:78:26:
         c5:78:eb:23:ad:28:8e:d6:83:b7:4f:65:38:06:db:2a:57:72:
         68:62:48:1b:67:cf:90:1a:8a:8b:96:21:8e:86:05:a6:f9:2a:
         45:ee:84:7f:3b:1a:06:81:c5:15:f0:d4:90:92:d8:95:b0:56:
         5e:6b:cc:0f:1a:0a:68:bf:0c:8c:1d:f3:46:a3:72:89:5f:21:
         af:01:65:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 04:56:25 2025 by rpki-client