This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/ji0mldIhdSk0saTDvdEkOqyC35Q.asa
File:                     ji0mldIhdSk0saTDvdEkOqyC35Q.asa (raw, json)
Hash identifier:          C8lYKdkDN8lKVQ1PD2gmJH6irap5wjY2T8IRwjQsO+k=
Subject key identifier:   8E:2D:26:95:D2:21:75:29:34:B1:A4:C3:BD:D1:24:3A:AC:82:DF:94
Certificate issuer:       /CN=06079c429a7146f1f9aa049bdb42ca95144b74da
Certificate serial:       019AD6323D9E05B48F7DC703BFEA2F46424A
Authority key identifier: 06:07:9C:42:9A:71:46:F1:F9:AA:04:9B:DB:42:CA:95:14:4B:74:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BgecQppxRvH5qgSb20LKlRRLdNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/ji0mldIhdSk0saTDvdEkOqyC35Q.asa
Signing time:             Sun 30 Nov 2025 19:16:48 +0000
ASPA not before:          Sun 30 Nov 2025 19:16:48 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            13020
Providers:                AS: 3320
                          AS: 15943
                          AS: 50472
                          AS: 50629
Validation:               Failed, certificate revoked on Thu 04 Dec 2025 19:39:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:d6:32:3d:9e:05:b4:8f:7d:c7:03:bf:ea:2f:46:42:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06079c429a7146f1f9aa049bdb42ca95144b74da
        Validity
            Not Before: Nov 30 19:16:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8e2d2695d221752934b1a4c3bdd1243aac82df94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9c:ea:be:28:b6:74:b7:25:bd:61:a9:0a:1c:
                    c7:21:aa:e5:71:95:10:58:32:3a:83:01:ac:73:72:
                    14:05:22:14:27:fb:f9:51:1e:85:4a:01:b7:b2:47:
                    6f:3c:d8:ba:fc:e7:06:65:24:f5:5f:da:dd:ac:76:
                    f2:9c:65:10:d9:b3:9b:1d:01:fa:4e:32:bc:61:8a:
                    3a:f7:2f:05:46:d7:6a:23:95:be:e9:f2:a7:f4:af:
                    6e:d9:06:ca:61:b7:5d:e9:73:29:b0:6f:2b:4f:31:
                    ed:da:a6:81:9f:de:fe:28:3e:9b:71:01:eb:18:c7:
                    74:1c:c8:47:c1:c0:44:5f:92:7b:1e:cb:e3:ad:fb:
                    f1:99:be:49:46:4b:65:6e:a2:c3:8a:7c:87:58:6b:
                    eb:19:35:03:83:4d:c3:e0:2c:71:ee:29:46:20:c3:
                    c2:4e:dc:f0:fe:a9:89:e7:33:65:a2:9e:af:ec:ad:
                    e2:e0:69:9b:e0:5d:af:6a:89:93:69:42:ea:33:f6:
                    d9:94:dd:6a:a6:6e:7c:9a:a5:dc:b8:e3:13:f1:2f:
                    49:2a:c4:bb:1a:c3:72:25:62:a4:ea:9d:16:5e:9f:
                    78:92:45:92:7d:0d:b5:cb:30:2c:49:67:7a:45:46:
                    cb:d9:b9:2c:51:4e:12:7c:59:d6:a4:a6:c1:92:0f:
                    7e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:2D:26:95:D2:21:75:29:34:B1:A4:C3:BD:D1:24:3A:AC:82:DF:94
            X509v3 Authority Key Identifier:
                keyid:06:07:9C:42:9A:71:46:F1:F9:AA:04:9B:DB:42:CA:95:14:4B:74:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgecQppxRvH5qgSb20LKlRRLdNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/ji0mldIhdSk0saTDvdEkOqyC35Q.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13020

    Signature Algorithm: sha256WithRSAEncryption
         0d:c4:71:e2:e0:ac:3d:82:a2:5b:a1:93:5e:07:5a:52:cd:09:
         04:a8:e0:36:4c:f8:db:8e:4b:46:7c:a9:2c:56:05:a4:84:b3:
         7e:87:cd:bb:4e:4d:82:e5:57:8a:4a:89:3e:c2:5e:93:13:b7:
         95:2b:33:b6:26:80:a2:b9:fb:b3:00:7c:9a:77:2d:2c:b4:b6:
         58:e7:1a:92:76:37:7e:a0:83:3e:7a:64:4e:45:aa:dd:3d:ee:
         d1:13:b3:44:f0:03:19:59:ee:ff:06:06:67:2c:b3:d3:c6:d7:
         ad:4e:02:01:88:45:fe:2e:e3:5c:31:53:78:f5:0c:38:2d:15:
         95:76:89:cc:b1:98:26:9c:7e:c2:cc:5c:f5:4f:45:62:28:2c:
         6f:5a:b2:4e:f7:d8:aa:a3:0d:eb:5c:79:5b:50:ba:e0:66:37:
         56:eb:f4:7e:c5:08:56:84:d4:38:43:2d:67:12:73:75:c5:dd:
         ac:74:00:82:33:1c:df:f3:2b:24:3f:b0:8e:51:bc:e7:cd:e1:
         74:6e:a5:8a:8c:3c:f9:5c:8d:3a:52:02:e5:26:e5:b5:36:4a:
         dc:5e:05:91:0c:04:bb:8b:29:be:2a:05:f2:fa:07:7f:42:d8:
         06:12:f3:f9:a6:b1:44:35:f0:15:ae:c0:03:84:b0:35:90:6b:
         69:45:4e:ae
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgISAZrWMj2eBbSPfccDv+ovRkJKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MDc5YzQyOWE3MTQ2ZjFmOWFhMDQ5YmRiNDJjYTk1MTQ0
Yjc0ZGEwHhcNMjUxMTMwMTkxNjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTJkMjY5NWQyMjE3NTI5MzRiMWE0YzNiZGQxMjQzYWFjODJkZjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopzqvii2dLclvWGpChzHIarlcZUQ
WDI6gwGsc3IUBSIUJ/v5UR6FSgG3skdvPNi6/OcGZST1X9rdrHbynGUQ2bObHQH6
TjK8YYo69y8FRtdqI5W+6fKn9K9u2QbKYbdd6XMpsG8rTzHt2qaBn97+KD6bcQHr
GMd0HMhHwcBEX5J7Hsvjrfvxmb5JRktlbqLDinyHWGvrGTUDg03D4Cxx7ilGIMPC
Ttzw/qmJ5zNlop6v7K3i4Gmb4F2vaomTaULqM/bZlN1qpm58mqXcuOMT8S9JKsS7
GsNyJWKk6p0WXp94kkWSfQ21yzAsSWd6RUbL2bksUU4SfFnWpKbBkg9+3wIDAQAB
o4ICAzCCAf8wHQYDVR0OBBYEFI4tJpXSIXUpNLGkw73RJDqsgt+UMB8GA1UdIwQY
MBaAFAYHnEKacUbx+aoEm9tCypUUS3TaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmdlY1FwcHhSdkg1cWdTYjIwTEtsUlJMZE5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi83NDA1ODktODVjZC00OTdhLTkwYzEt
YTJmOWE4YTUxYmIwLzEvamkwbWxkSWhkU2swc2FURHZkRWtPcXlDMzVRLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi83NDA1ODktODVjZC00OTdhLTkwYzEtYTJmOWE4YTUxYmIw
LzEvQmdlY1FwcHhSdkg1cWdTYjIwTEtsUlJMZE5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAjLcMA0GCSqGSIb3
DQEBCwUAA4IBAQANxHHi4Kw9gqJboZNeB1pSzQkEqOA2TPjbjktGfKksVgWkhLN+
h827Tk2C5VeKSok+wl6TE7eVKzO2JoCiufuzAHyady0stLZY5xqSdjd+oIM+emRO
RardPe7RE7NE8AMZWe7/BgZnLLPTxtetTgIBiEX+LuNcMVN49Qw4LRWVdonMsZgm
nH7CzFz1T0ViKCxvWrJO99iqow3rXHlbULrgZjdW6/R+xQhWhNQ4Qy1nEnN1xd2s
dACCMxzf8yskP7COUbznzeF0bqWKjDz5XI06UgLlJuW1NkrcXgWRDAS7iym+KgXy
+gd/QtgGEvP5prFENfAVrsADhLA1kGtpRU6u
-----END CERTIFICATE-----
Generated at Fri Dec 12 21:36:40 2025 by rpki-client