This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/EKzVr1AvNpYiprsqEkvQMIL5W4E.asa
File:                     EKzVr1AvNpYiprsqEkvQMIL5W4E.asa (raw, json)
Hash identifier:          Ipa5Hr4X/R8wDhVGPsZEgzWXdPPvkLWg6IkVPIMaQqY=
Subject key identifier:   10:AC:D5:AF:50:2F:36:96:22:A6:BB:2A:12:4B:D0:30:82:F9:5B:81
Certificate issuer:       /CN=f324d0f47297680535eb2799189db888b4066782
Certificate serial:       019B323F0274671F6907444222460089CEC0
Authority key identifier: F3:24:D0:F4:72:97:68:05:35:EB:27:99:18:9D:B8:88:B4:06:67:82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/EKzVr1AvNpYiprsqEkvQMIL5W4E.asa
Signing time:             Thu 18 Dec 2025 16:15:48 +0000
ASPA not before:          Thu 18 Dec 2025 16:15:48 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            205350
Providers:                AS: 6461
                          AS: 41327
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:32:3f:02:74:67:1f:69:07:44:42:22:46:00:89:ce:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f324d0f47297680535eb2799189db888b4066782
        Validity
            Not Before: Dec 18 16:15:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=10acd5af502f369622a6bb2a124bd03082f95b81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:68:88:38:c4:10:ba:96:b9:c6:d3:51:4f:51:
                    5a:94:1a:ec:c6:e4:0f:8d:4d:f3:73:de:89:9f:20:
                    9e:bb:79:5f:ed:20:a2:df:82:1c:66:5f:2d:4f:6d:
                    b8:b8:ae:ad:9b:b9:17:76:84:73:c9:09:75:f5:b5:
                    a7:46:8a:03:13:c8:09:6d:2d:32:86:b9:30:51:6f:
                    42:65:fc:af:47:9f:7d:d4:01:79:c4:a0:54:4d:d7:
                    54:66:24:89:d8:fd:2b:ce:52:f2:bb:51:e3:28:1e:
                    13:09:c1:f9:0e:3e:c0:fe:8c:04:71:5a:2b:31:b3:
                    bd:fd:ce:7b:e3:24:aa:14:60:de:bb:5f:ab:24:61:
                    b1:fc:c5:b7:14:48:66:c3:ab:de:86:f8:07:e2:8d:
                    62:49:7e:c5:df:8e:02:33:20:02:92:34:42:21:0b:
                    be:56:cb:e1:d0:7b:61:c3:6d:86:6c:4d:d2:16:63:
                    c7:77:f7:43:92:73:84:d5:b1:20:c6:64:ee:be:04:
                    15:2f:11:71:2c:df:18:70:ad:f2:83:43:d1:53:fb:
                    6a:e1:44:82:5a:83:85:ad:7a:41:9d:0c:c5:3b:34:
                    6d:c5:c1:24:29:ee:c6:5a:62:26:d9:f5:dc:9d:e5:
                    9d:0a:b6:13:35:dc:af:fa:c2:7d:06:24:d8:cc:af:
                    32:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:AC:D5:AF:50:2F:36:96:22:A6:BB:2A:12:4B:D0:30:82:F9:5B:81
            X509v3 Authority Key Identifier:
                keyid:F3:24:D0:F4:72:97:68:05:35:EB:27:99:18:9D:B8:88:B4:06:67:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/EKzVr1AvNpYiprsqEkvQMIL5W4E.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205350

    Signature Algorithm: sha256WithRSAEncryption
         3e:64:c1:08:be:da:bf:89:b0:89:73:92:f6:3b:a9:d3:d3:9c:
         01:38:46:c7:a3:65:e1:4e:07:48:9d:17:92:2f:50:3a:50:e6:
         6b:45:81:f1:b4:9d:f6:03:f0:cf:48:38:fd:fa:2e:da:ca:9b:
         01:3e:43:30:ce:de:95:42:32:1f:44:ae:9d:de:7a:f0:7b:64:
         2e:a9:45:ed:07:39:70:13:bd:b9:9b:c9:12:ec:3c:06:a5:d3:
         85:2d:12:ce:f6:22:66:e3:4a:d1:38:a6:af:26:f1:53:80:f7:
         32:ba:99:a7:a2:71:29:74:06:d4:ab:22:93:35:7a:9c:73:1e:
         37:3d:48:51:c6:0e:40:01:5f:45:40:6a:c4:48:e4:4f:0f:63:
         35:fe:d8:09:c0:df:a3:d0:29:37:e8:57:7c:75:a2:31:88:79:
         82:59:f8:15:df:f9:49:e3:2e:e5:4b:3c:4b:c0:b4:27:0c:17:
         18:08:0b:f4:c4:af:93:9b:71:e7:fe:15:11:0e:ad:80:d3:c9:
         5b:43:cf:3e:ce:31:46:c0:0f:0e:d4:a1:0f:22:a7:d0:35:1e:
         c2:1c:74:72:40:6b:cd:7c:34:84:02:71:5e:a3:66:b1:6a:29:
         0c:0f:52:00:b0:3c:85:0b:e9:b0:6e:d9:92:91:40:b0:22:b1:
         66:4d:60:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:43:14 2026 by rpki-client