This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/x7mbec4cpv5N8U0_JFOsofDdp9k.asa
File:                     x7mbec4cpv5N8U0_JFOsofDdp9k.asa (raw, json)
Hash identifier:          xc6esLHJMBzAKQI4ygNtC8Fx32gcjy+TaKUBFG2ujWg=
Subject key identifier:   C7:B9:9B:79:CE:1C:A6:FE:4D:F1:4D:3F:24:53:AC:A1:F0:DD:A7:D9
Certificate issuer:       /CN=afe4a0d5fda600c5d5b7f618f686d7e93051b4d7
Certificate serial:       019B73FBC207FD6D1437EF5F4629F4367E0C
Authority key identifier: AF:E4:A0:D5:FD:A6:00:C5:D5:B7:F6:18:F6:86:D7:E9:30:51:B4:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/x7mbec4cpv5N8U0_JFOsofDdp9k.asa
Signing time:             Wed 31 Dec 2025 10:37:17 +0000
ASPA not before:          Wed 31 Dec 2025 10:37:17 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            60003
Providers:                AS: 199789
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:73:fb:c2:07:fd:6d:14:37:ef:5f:46:29:f4:36:7e:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afe4a0d5fda600c5d5b7f618f686d7e93051b4d7
        Validity
            Not Before: Dec 31 10:37:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c7b99b79ce1ca6fe4df14d3f2453aca1f0dda7d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bd:67:09:b3:60:47:b5:86:f6:25:dd:59:00:
                    89:42:a9:62:a4:0a:26:c8:e0:f4:88:e8:cd:f4:68:
                    84:90:69:aa:a1:8a:cc:9d:85:30:42:a3:12:e8:65:
                    68:72:db:ad:65:a1:3f:e5:fe:70:fb:7e:2c:45:88:
                    43:b0:c2:e9:e7:bf:fc:fb:4e:96:cb:21:c7:f1:83:
                    7b:68:84:be:13:b4:e0:b0:12:75:cd:b7:84:eb:cc:
                    ab:cb:1e:0b:82:96:8f:d4:9e:d5:bf:b2:a2:85:96:
                    4a:52:8c:3b:4f:02:4a:f1:bc:a8:0e:21:5d:b9:4c:
                    b6:e3:b8:32:10:d4:6f:4a:fd:1f:ee:91:03:b1:7c:
                    84:40:d9:5e:12:2f:d5:a7:d9:2b:08:25:01:4b:fc:
                    c4:2e:6b:2a:30:5c:c6:f8:50:4f:c5:09:f7:c5:8e:
                    7d:46:1e:c4:48:97:ae:d7:d1:1e:20:b1:ce:a8:9e:
                    fd:07:67:31:86:94:c5:a6:bd:3e:c5:c4:34:49:59:
                    57:c0:02:87:e8:dd:98:95:da:fb:07:7b:55:53:80:
                    20:71:49:aa:18:bb:79:32:10:1b:28:85:ef:cf:f4:
                    68:11:e1:8f:62:0b:0b:ef:9b:0b:40:df:b9:60:11:
                    97:96:c4:e8:f8:3f:23:3f:a0:04:47:20:12:eb:98:
                    cc:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B9:9B:79:CE:1C:A6:FE:4D:F1:4D:3F:24:53:AC:A1:F0:DD:A7:D9
            X509v3 Authority Key Identifier:
                keyid:AF:E4:A0:D5:FD:A6:00:C5:D5:B7:F6:18:F6:86:D7:E9:30:51:B4:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/x7mbec4cpv5N8U0_JFOsofDdp9k.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60003

    Signature Algorithm: sha256WithRSAEncryption
         66:59:ad:91:0a:ea:ab:8f:15:50:e9:8e:1a:5c:fe:c3:c6:41:
         65:d1:cb:36:ce:e7:df:ca:5c:60:74:0b:ca:28:71:1e:a4:ca:
         8f:87:54:ca:d2:ee:49:9d:53:94:1d:02:9b:b1:95:9a:e9:5a:
         30:e3:70:d8:14:f0:c3:c9:cb:a2:d5:18:31:92:1e:6e:3f:92:
         6b:9d:e9:48:ec:a5:a5:8c:fa:81:d9:14:82:e9:d0:f2:45:29:
         7f:61:dd:c5:71:7b:ec:0e:b9:97:a0:8c:35:0d:5b:44:ad:0e:
         96:93:a7:5a:f8:cc:b2:41:2d:1a:a3:89:e4:7c:30:af:02:5f:
         42:d3:53:07:89:bd:74:62:2d:44:fa:57:c8:da:33:77:33:0f:
         a0:45:23:f7:ce:f3:ee:35:d2:d0:20:2a:e5:54:97:19:5e:50:
         41:61:82:25:c0:6f:90:9e:e1:59:38:84:ce:f4:92:5a:7d:ce:
         51:2b:66:0b:9e:b7:cf:f2:d3:b9:62:f8:b4:bd:60:7f:04:30:
         93:25:0c:15:ad:87:3e:9e:f9:b2:d7:68:65:77:00:8c:a2:e3:
         a8:b1:e6:1a:5d:6d:c1:4d:84:83:15:06:0f:3a:7b:b2:46:f8:
         5a:02:84:4c:d9:83:da:8f:44:99:9c:14:e9:3c:59:c1:a5:6f:
         99:35:0a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:40:32 2026 by rpki-client