This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/ImSPygzD6VVPadbxl_ihzWnZ-Cs.asa
File:                     ImSPygzD6VVPadbxl_ihzWnZ-Cs.asa (raw, json)
Hash identifier:          OiuxxzuWquLDPwjX5ddpIJ5lv8TlhD5un/7U3cQQfPU=
Subject key identifier:   22:64:8F:CA:0C:C3:E9:55:4F:69:D6:F1:97:F8:A1:CD:69:D9:F8:2B
Certificate issuer:       /CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Certificate serial:       019B237FFF44F1BCE5B97C81D4013E0D1E39
Authority key identifier: E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/ImSPygzD6VVPadbxl_ihzWnZ-Cs.asa
Signing time:             Mon 15 Dec 2025 19:32:29 +0000
ASPA not before:          Mon 15 Dec 2025 19:32:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            48927
Providers:                AS: 174
                          AS: 6939
                          AS: 196610
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 19:20:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:23:7f:ff:44:f1:bc:e5:b9:7c:81:d4:01:3e:0d:1e:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
        Validity
            Not Before: Dec 15 19:32:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=22648fca0cc3e9554f69d6f197f8a1cd69d9f82b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:66:25:da:be:85:71:b9:0e:cf:16:81:69:fa:
                    ae:24:ea:9c:ab:31:f0:b8:dc:ea:18:91:f0:b7:c0:
                    a6:01:05:ef:56:c5:f2:79:29:ab:ec:8d:b4:c3:c7:
                    ae:e5:df:51:be:0a:71:32:f6:d8:7c:27:6a:9e:14:
                    37:fc:fb:18:d1:93:af:9b:6d:e8:ef:90:b8:1e:3d:
                    09:bb:e1:b1:b5:3c:5c:09:7c:e2:5c:05:76:58:0b:
                    82:de:d5:cd:70:37:ee:48:c7:88:c9:a1:93:5e:43:
                    1b:74:59:26:35:f9:98:4e:38:e5:57:e9:7a:39:23:
                    b2:3b:af:98:15:8b:fa:35:c2:78:41:d1:ca:b8:bc:
                    9c:e9:8a:1f:5e:32:47:66:e4:40:ae:4e:74:9b:f1:
                    43:8f:c7:c8:be:8c:a6:2f:8c:13:aa:5b:55:fa:79:
                    d9:dc:08:ec:33:4e:0d:5b:4c:f8:e5:bf:49:82:69:
                    72:42:64:f4:45:1d:4a:28:6f:ef:e3:90:44:88:dc:
                    d4:65:cc:0e:15:c6:dc:9e:92:12:36:f4:62:20:2c:
                    3d:91:80:79:7b:6b:c0:fd:fe:13:e2:b7:16:cf:70:
                    3b:c1:aa:a6:37:ca:2c:8f:ec:b9:9c:f4:3c:95:34:
                    ee:69:4b:a3:b0:15:8a:c1:d0:da:20:40:01:65:59:
                    8e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:64:8F:CA:0C:C3:E9:55:4F:69:D6:F1:97:F8:A1:CD:69:D9:F8:2B
            X509v3 Authority Key Identifier:
                keyid:E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/ImSPygzD6VVPadbxl_ihzWnZ-Cs.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48927

    Signature Algorithm: sha256WithRSAEncryption
         09:61:70:35:e9:03:83:d0:93:7b:f0:35:b4:4b:e3:33:a1:0f:
         28:b9:b3:a5:99:ed:2b:f3:d9:59:cf:e0:af:e6:e1:63:db:f7:
         78:a6:0e:55:83:8a:c4:a2:af:1d:a6:6d:3a:cf:7c:78:59:ff:
         a2:99:e9:82:86:90:10:8e:79:77:2e:16:8b:93:cd:77:d9:30:
         f1:c8:95:ca:78:45:c1:01:bd:62:58:27:69:97:a0:ee:79:2e:
         ec:de:48:4e:74:25:bf:37:f2:a7:12:1f:b8:19:07:28:36:1b:
         ca:89:07:7f:f3:57:5b:79:b7:da:8d:7e:37:c8:b9:86:6b:b1:
         3f:c7:29:ef:a9:7d:3e:61:68:4b:45:d1:63:5d:2f:a4:9c:07:
         40:2e:18:70:cd:4a:7a:e5:59:4a:f4:e0:f5:74:f4:da:7e:e2:
         3b:ad:80:98:12:63:00:33:ca:7c:fb:08:d8:e3:20:51:cf:62:
         85:54:87:30:78:96:8e:69:a4:1e:50:fc:4e:ea:af:4d:b3:d9:
         c9:60:b9:8f:79:8a:35:52:fc:5e:db:15:db:d0:4b:f3:11:51:
         17:ba:a9:f7:74:d5:98:e3:71:b6:55:00:9c:f3:ef:2f:c8:40:
         f6:e0:4a:42:53:b8:7a:19:15:1b:1a:05:de:aa:8d:b6:8f:92:
         75:2e:39:c0
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZsjf/9E8bzluXyB1AE+DR45MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzN2U1ZmYxMjNlYTdkMmU4M2NlMjc1MjBjOTg3ZDAzN2U2
NDlkMDMwHhcNMjUxMjE1MTkzMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjY0OGZjYTBjYzNlOTU1NGY2OWQ2ZjE5N2Y4YTFjZDY5ZDlmODJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGYl2r6FcbkOzxaBafquJOqcqzHw
uNzqGJHwt8CmAQXvVsXyeSmr7I20w8eu5d9RvgpxMvbYfCdqnhQ3/PsY0ZOvm23o
75C4Hj0Ju+GxtTxcCXziXAV2WAuC3tXNcDfuSMeIyaGTXkMbdFkmNfmYTjjlV+l6
OSOyO6+YFYv6NcJ4QdHKuLyc6YofXjJHZuRArk50m/FDj8fIvoymL4wTqltV+nnZ
3AjsM04NW0z45b9JgmlyQmT0RR1KKG/v45BEiNzUZcwOFcbcnpISNvRiICw9kYB5
e2vA/f4T4rcWz3A7waqmN8osj+y5nPQ8lTTuaUujsBWKwdDaIEABZVmOVQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFCJkj8oMw+lVT2nW8Zf4oc1p2fgrMB8GA1UdIwQY
MBaAFON+X/Ej6n0ug84nUgyYfQN+ZJ0DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDM1ZjhTUHFmUzZEemlkU0RKaDlBMzVrblFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9kZmMxMGMtZjg4OS00NTVhLTgyYTAt
YjMwNDA4OTQ4Y2NlLzEvSW1TUHlnekQ2VlZQYWRieGxfaWh6V25aLUNzLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9kZmMxMGMtZjg4OS00NTVhLTgyYTAtYjMwNDA4OTQ4Y2Nl
LzEvNDM1ZjhTUHFmUzZEemlkU0RKaDlBMzVrblFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwC/HzANBgkqhkiG
9w0BAQsFAAOCAQEACWFwNekDg9CTe/A1tEvjM6EPKLmzpZntK/PZWc/gr+bhY9v3
eKYOVYOKxKKvHaZtOs98eFn/opnpgoaQEI55dy4Wi5PNd9kw8ciVynhFwQG9Ylgn
aZeg7nku7N5ITnQlvzfypxIfuBkHKDYbyokHf/NXW3m32o1+N8i5hmuxP8cp76l9
PmFoS0XRY10vpJwHQC4YcM1KeuVZSvTg9XT02n7iO62AmBJjADPKfPsI2OMgUc9i
hVSHMHiWjmmkHlD8TuqvTbPZyWC5j3mKNVL8XtsV29BL8xFRF7qp93TVmONxtlUA
nPPvL8hA9uBKQlO4ehkVGxoF3qqNto+SdS45wA==
-----END CERTIFICATE-----
Generated at Wed Dec 17 04:55:11 2025 by rpki-client