This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/T6fpXr9wKGJ3aCznk32JPJaimhg.asa
File:                     T6fpXr9wKGJ3aCznk32JPJaimhg.asa (raw, json)
Hash identifier:          n722aK2AFEKdM2CPBPu9m4CBX/wUOMnKDrC8rZHOkMY=
Subject key identifier:   4F:A7:E9:5E:BF:70:28:62:77:68:2C:E7:93:7D:89:3C:96:A2:9A:18
Certificate issuer:       /CN=5c43bdc0bb54fb869ee83a2bd8bd87739893a42c
Certificate serial:       019B33AC0332FDC998769D7894F34A6FCC9E
Authority key identifier: 5C:43:BD:C0:BB:54:FB:86:9E:E8:3A:2B:D8:BD:87:73:98:93:A4:2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/T6fpXr9wKGJ3aCznk32JPJaimhg.asa
Signing time:             Thu 18 Dec 2025 22:54:29 +0000
ASPA not before:          Thu 18 Dec 2025 22:54:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            212485
Providers:                AS: 1299
                          AS: 6939
                          AS: 25472
                          AS: 198477
                          AS: 206735
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 07:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:33:ac:03:32:fd:c9:98:76:9d:78:94:f3:4a:6f:cc:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c43bdc0bb54fb869ee83a2bd8bd87739893a42c
        Validity
            Not Before: Dec 18 22:54:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4fa7e95ebf70286277682ce7937d893c96a29a18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0c:2d:e5:18:5a:d5:43:a3:fc:4d:ec:c7:d3:
                    ac:d4:3c:54:27:47:8a:63:17:55:0c:30:36:20:5c:
                    ef:34:a6:5e:40:3f:9f:c6:3d:48:7c:3e:09:50:5f:
                    3c:c7:e6:bf:06:3e:02:87:c3:1e:f7:e4:cc:34:61:
                    8b:b8:79:6a:3b:7f:8c:93:83:49:62:b4:49:46:2e:
                    31:63:2b:47:26:4a:c0:92:16:71:0e:dd:b2:bb:22:
                    c7:15:31:f2:44:42:e1:85:7b:13:3b:ec:32:de:a4:
                    50:d9:20:54:c2:dc:30:c2:bd:a2:59:f6:1b:2e:a0:
                    db:16:d2:d5:5d:ae:2b:8c:53:bb:d7:a2:a8:ea:98:
                    2a:0c:cc:81:28:38:15:68:d4:4d:74:9f:ec:9d:5b:
                    be:d0:80:b8:4c:96:2d:68:ed:a5:1a:d1:ca:23:fa:
                    4d:54:f6:ca:3b:ea:7c:5a:fe:ca:db:14:57:f7:be:
                    a3:bc:cd:ce:8e:0b:c1:46:9b:08:71:52:83:58:66:
                    9d:dd:29:de:a9:aa:24:ae:ed:9d:38:e2:ae:07:bb:
                    28:a8:3f:de:36:3f:85:ca:96:cc:71:8d:62:b2:7a:
                    29:1f:f2:f4:d3:1e:f8:5b:58:78:cd:0a:22:b8:40:
                    1c:36:6d:f3:92:aa:1f:23:e8:38:15:67:aa:60:f3:
                    7c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A7:E9:5E:BF:70:28:62:77:68:2C:E7:93:7D:89:3C:96:A2:9A:18
            X509v3 Authority Key Identifier:
                keyid:5C:43:BD:C0:BB:54:FB:86:9E:E8:3A:2B:D8:BD:87:73:98:93:A4:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/T6fpXr9wKGJ3aCznk32JPJaimhg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212485

    Signature Algorithm: sha256WithRSAEncryption
         96:b3:4c:fe:81:e8:04:76:f8:ab:83:07:57:ae:22:b1:6b:de:
         77:78:1c:1b:14:df:ed:24:87:6a:a7:1e:36:69:2b:e2:09:f9:
         fb:be:c4:96:77:15:57:01:34:80:e9:4b:40:6f:7c:3b:64:71:
         ef:7b:ed:ee:c4:fe:49:82:9a:ec:ea:f4:ee:32:39:1c:ae:37:
         c0:25:98:da:d1:27:45:e4:46:38:f0:e9:ca:b7:8a:61:5e:40:
         40:11:2e:bd:4c:85:4a:ca:69:f3:a8:96:09:7d:32:1c:01:5e:
         c1:85:c6:03:f5:6f:ca:71:7d:16:25:95:f1:ab:ee:31:8a:cd:
         ea:51:ac:4f:12:04:20:4d:eb:4f:06:49:a5:3b:25:18:b2:59:
         4e:bd:37:9c:bd:a9:57:2b:55:c5:4b:41:4f:a5:a2:70:1b:a4:
         51:21:b7:0e:cc:8e:e3:2e:d2:92:96:0e:9e:31:30:89:8b:0f:
         e6:ef:3f:0b:46:6a:56:78:6f:09:c6:91:b8:d7:0b:20:63:45:
         39:53:e3:ca:aa:58:a3:d9:d2:b6:4a:b5:35:0e:a7:2f:df:13:
         3b:13:e8:1e:c4:3f:c2:eb:72:d6:47:48:ea:8c:bb:be:58:02:
         01:ba:99:1e:93:36:16:88:47:62:b4:f5:2d:c2:a8:81:c1:98:
         89:c1:45:4a
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZszrAMy/cmYdp14lPNKb8yeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNDNiZGMwYmI1NGZiODY5ZWU4M2EyYmQ4YmQ4NzczOTg5
M2E0MmMwHhcNMjUxMjE4MjI1NDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZmE3ZTk1ZWJmNzAyODYyNzc2ODJjZTc5MzdkODkzYzk2YTI5YTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAwt5Rha1UOj/E3sx9Os1DxUJ0eK
YxdVDDA2IFzvNKZeQD+fxj1IfD4JUF88x+a/Bj4Ch8Me9+TMNGGLuHlqO3+Mk4NJ
YrRJRi4xYytHJkrAkhZxDt2yuyLHFTHyRELhhXsTO+wy3qRQ2SBUwtwwwr2iWfYb
LqDbFtLVXa4rjFO716Ko6pgqDMyBKDgVaNRNdJ/snVu+0IC4TJYtaO2lGtHKI/pN
VPbKO+p8Wv7K2xRX976jvM3OjgvBRpsIcVKDWGad3Sneqaokru2dOOKuB7soqD/e
Nj+FypbMcY1isnopH/L00x74W1h4zQoiuEAcNm3zkqofI+g4FWeqYPN8WQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFE+n6V6/cChid2gs55N9iTyWopoYMB8GA1UdIwQY
MBaAFFxDvcC7VPuGnug6K9i9h3OYk6QsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEVPOXdMdFUtNGFlNkRvcjJMMkhjNWlUcEN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9hYjZiN2YtNGYxOS00N2FkLTg4OTUt
NDg5NmIyMjhmMTg3LzEvVDZmcFhyOXdLR0ozYUN6bmszMkpQSmFpbWhnLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9hYjZiN2YtNGYxOS00N2FkLTg4OTUtNDg5NmIyMjhmMTg3
LzEvWEVPOXdMdFUtNGFlNkRvcjJMMkhjNWlUcEN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM+BTANBgkqhkiG
9w0BAQsFAAOCAQEAlrNM/oHoBHb4q4MHV64isWved3gcGxTf7SSHaqceNmkr4gn5
+77ElncVVwE0gOlLQG98O2Rx73vt7sT+SYKa7Or07jI5HK43wCWY2tEnReRGOPDp
yreKYV5AQBEuvUyFSspp86iWCX0yHAFewYXGA/VvynF9FiWV8avuMYrN6lGsTxIE
IE3rTwZJpTslGLJZTr03nL2pVytVxUtBT6WicBukUSG3DsyO4y7SkpYOnjEwiYsP
5u8/C0ZqVnhvCcaRuNcLIGNFOVPjyqpYo9nStkq1NQ6nL98TOxPoHsQ/wuty1kdI
6oy7vlgCAbqZHpM2FohHYrT1LcKogcGYicFFSg==
-----END CERTIFICATE-----
Generated at Fri Dec 19 13:10:03 2025 by rpki-client