This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/xPQUYz25Kw5OqjEMvXe5mrzD17U.asa
File:                     xPQUYz25Kw5OqjEMvXe5mrzD17U.asa (raw, json)
Hash identifier:          yVaACJvXdwB+QYqWE/blK7XRzmJJaal8sDFXluTDI0c=
Subject key identifier:   C4:F4:14:63:3D:B9:2B:0E:4E:AA:31:0C:BD:77:B9:9A:BC:C3:D7:B5
Certificate issuer:       /CN=772fb94a459d3b75ce8bfb8f12b4cf71982c6343
Certificate serial:       019B621126791D94C785F748FD4B83D1CED8
Authority key identifier: 77:2F:B9:4A:45:9D:3B:75:CE:8B:FB:8F:12:B4:CF:71:98:2C:63:43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dy-5SkWdO3XOi_uPErTPcZgsY0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/xPQUYz25Kw5OqjEMvXe5mrzD17U.asa
Signing time:             Sat 27 Dec 2025 23:07:29 +0000
ASPA not before:          Sat 27 Dec 2025 23:07:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            212084
Providers:                AS: 3399
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dy-5SkWdO3XOi_uPErTPcZgsY0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:62:11:26:79:1d:94:c7:85:f7:48:fd:4b:83:d1:ce:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=772fb94a459d3b75ce8bfb8f12b4cf71982c6343
        Validity
            Not Before: Dec 27 23:07:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c4f414633db92b0e4eaa310cbd77b99abcc3d7b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:eb:83:29:9f:d0:3e:48:50:19:aa:66:8a:ca:
                    e5:d1:b1:7f:e4:5d:4f:a1:ec:1a:12:5d:1c:89:7e:
                    e9:be:37:7d:73:9a:5d:41:51:ac:93:e5:31:d7:0b:
                    98:9a:ea:96:be:bd:73:46:0b:41:53:f3:58:c9:be:
                    93:52:cd:88:6f:07:a3:55:13:d4:46:75:d6:f3:9d:
                    2b:7f:69:7b:92:0b:f7:91:0f:57:91:82:52:e9:dd:
                    66:92:1a:ee:c2:a2:2c:d6:12:f0:0a:85:14:56:2c:
                    78:3e:7f:34:ed:25:e2:79:99:4e:be:c7:2f:42:5f:
                    8a:f4:ac:2c:f6:1f:e2:8d:50:f8:8c:76:99:66:64:
                    7a:50:da:8e:eb:b1:4f:67:06:2e:4b:a5:6b:be:2e:
                    69:51:14:3d:cb:5d:94:f7:b5:b2:5a:f2:3e:45:24:
                    11:ab:65:54:71:92:67:bd:7d:44:48:b1:b9:61:31:
                    ae:f3:6c:a5:08:cf:48:4c:c0:94:f3:c9:94:95:ad:
                    91:09:3d:65:cf:e9:c8:c6:09:c4:df:c5:3c:b2:ac:
                    c5:0a:f6:0c:c6:b0:c2:24:29:33:f0:8f:e7:19:d0:
                    11:79:37:c5:7b:d5:e2:8b:75:c9:84:09:33:5b:e3:
                    5f:51:ad:ec:4b:7a:12:65:50:a4:3e:fb:9c:00:df:
                    bc:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F4:14:63:3D:B9:2B:0E:4E:AA:31:0C:BD:77:B9:9A:BC:C3:D7:B5
            X509v3 Authority Key Identifier:
                keyid:77:2F:B9:4A:45:9D:3B:75:CE:8B:FB:8F:12:B4:CF:71:98:2C:63:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dy-5SkWdO3XOi_uPErTPcZgsY0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/xPQUYz25Kw5OqjEMvXe5mrzD17U.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212084

    Signature Algorithm: sha256WithRSAEncryption
         b0:f2:a7:8d:b8:5b:71:6d:56:94:18:d9:60:dc:40:03:db:7c:
         a9:78:37:b4:bc:8f:9f:0a:a2:1d:3f:4a:87:49:d8:a2:bd:5f:
         a4:7d:0a:86:91:d3:79:e9:df:b0:b7:77:06:91:c3:53:b6:e2:
         16:04:25:31:e2:43:62:44:08:44:19:3c:10:79:e8:e2:6a:9b:
         31:4f:6c:93:8e:89:71:05:0c:11:91:b9:b8:56:07:a0:20:9a:
         6a:fe:2d:83:d8:5e:e0:9f:40:00:2b:59:b4:1f:27:cb:cc:71:
         7a:c8:68:f0:09:02:d5:18:27:ed:fe:ec:26:0c:70:38:ab:49:
         27:ab:5b:dd:70:98:07:d4:68:c1:7a:6a:6f:ff:82:c3:c4:64:
         49:b3:b1:91:95:d9:cf:dc:00:03:1b:79:aa:61:41:09:1c:96:
         41:72:c5:bb:a6:ef:16:e7:0f:d3:5b:3e:95:75:0f:98:35:d2:
         a6:b0:f4:86:94:be:fb:12:bc:d2:58:4b:ee:f1:9f:bb:b7:22:
         55:40:e7:cc:7f:fb:f2:cc:29:8d:44:9b:77:b2:97:e7:f3:e9:
         1e:56:dd:4c:6c:0c:68:75:af:12:99:c6:bb:26:04:f8:b2:5a:
         3d:f7:0d:b4:26:f7:17:8f:ac:f7:cc:cc:db:b6:21:89:71:f5:
         81:53:aa:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:43:08 2026 by rpki-client