This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/ADv4rCmboNdJeRdSNFNoC66NFcI.asa
File:                     ADv4rCmboNdJeRdSNFNoC66NFcI.asa (raw, json)
Hash identifier:          skS6EdM3ozMmqfBsx8jRMuUXOPVHIzhMvtIsBscsmk8=
Subject key identifier:   00:3B:F8:AC:29:9B:A0:D7:49:79:17:52:34:53:68:0B:AE:8D:15:C2
Certificate issuer:       /CN=cccdf6516237d425e9ae3817ecb141f481773c12
Certificate serial:       019B5EA412EB67EF810A1D478CAA3680820F
Authority key identifier: CC:CD:F6:51:62:37:D4:25:E9:AE:38:17:EC:B1:41:F4:81:77:3C:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/ADv4rCmboNdJeRdSNFNoC66NFcI.asa
Signing time:             Sat 27 Dec 2025 07:09:29 +0000
ASPA not before:          Sat 27 Dec 2025 07:09:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            210649
Providers:                AS: 8455
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 18:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5e:a4:12:eb:67:ef:81:0a:1d:47:8c:aa:36:80:82:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cccdf6516237d425e9ae3817ecb141f481773c12
        Validity
            Not Before: Dec 27 07:09:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=003bf8ac299ba0d7497917523453680bae8d15c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:01:4e:ba:3c:f0:5f:d4:ce:14:30:da:ef:85:
                    9e:57:2c:a8:c0:27:1f:d1:5f:8a:00:b3:fe:35:3a:
                    9f:7a:2e:c7:3d:4e:d5:fe:0a:64:cd:6b:77:eb:b7:
                    94:fc:a8:a4:c1:81:ed:9a:17:d1:89:25:54:30:48:
                    4a:2e:4e:71:48:0b:74:ca:fb:6c:f7:bd:53:0f:fa:
                    14:ff:17:7f:47:91:36:3c:ca:d4:72:17:a0:90:63:
                    ef:88:76:ae:a6:46:0e:f3:7c:ac:b1:bb:2a:4d:78:
                    aa:db:5b:7c:b3:4f:5f:d8:f1:eb:ab:cb:7f:09:8c:
                    21:d1:da:a0:e1:2d:42:66:4b:64:07:81:61:5d:a2:
                    57:9a:3f:95:52:fb:d0:b9:f7:20:8e:74:4e:75:63:
                    bf:a3:3c:a9:8b:b1:ec:b3:fe:14:74:6b:e5:22:6f:
                    a2:52:cc:03:d5:4a:f6:9e:76:20:f1:94:01:89:12:
                    e1:11:b7:ea:2a:27:d7:cc:83:4c:6b:1e:3e:56:d9:
                    f0:d3:aa:d0:d8:94:bf:90:88:8c:ed:5a:7c:c2:98:
                    1e:72:4f:f3:c4:e6:cb:69:71:5d:e7:96:8e:3c:5b:
                    2f:45:ff:35:c4:a3:26:41:28:c0:f8:9a:b1:1d:9d:
                    97:5d:c4:52:42:7b:52:e0:0d:4b:c6:a1:23:d3:2a:
                    89:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:3B:F8:AC:29:9B:A0:D7:49:79:17:52:34:53:68:0B:AE:8D:15:C2
            X509v3 Authority Key Identifier:
                keyid:CC:CD:F6:51:62:37:D4:25:E9:AE:38:17:EC:B1:41:F4:81:77:3C:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/ADv4rCmboNdJeRdSNFNoC66NFcI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210649

    Signature Algorithm: sha256WithRSAEncryption
         42:18:de:1b:29:00:37:6e:c3:d8:8a:9d:58:f7:4c:73:cc:f2:
         31:07:35:3f:a6:40:30:2e:92:57:5a:de:75:fd:71:20:33:35:
         63:b3:b2:a5:42:93:e9:49:14:50:a6:c9:b0:6a:c1:d2:19:d2:
         87:4e:dd:d7:f2:e3:a4:ff:3c:66:fe:70:bf:20:26:71:2e:09:
         45:6f:d2:13:f4:73:e1:c4:f0:42:04:ff:a1:ad:66:7e:d9:cd:
         01:58:25:4b:35:d3:c9:df:d2:63:41:98:d6:2c:d0:3d:e9:fb:
         98:d1:9e:a0:a5:d7:83:c6:6d:e2:81:6a:6e:4d:0d:8e:62:fd:
         70:93:e1:63:ac:8b:fe:47:82:b5:58:af:6b:9f:59:60:df:6c:
         b5:4f:3d:db:bb:b9:1e:55:c5:a6:f6:9e:77:a2:2d:1e:ef:ac:
         8e:01:59:b4:0d:07:6f:fc:ce:48:e0:69:c1:5b:3d:2d:72:49:
         e6:34:8d:aa:c7:5d:70:2a:c2:39:02:62:eb:ec:b0:58:cb:bb:
         ba:f6:bb:f5:d4:01:a7:df:ac:6b:a2:a6:4b:20:5c:44:b3:ac:
         10:48:2a:27:59:08:08:6c:b8:cf:c3:55:d0:d2:f3:c7:38:5e:
         c4:27:51:cd:56:0b:1f:de:c4:a7:8e:c2:fc:4f:33:14:0a:8f:
         5b:98:69:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:41:46 2026 by rpki-client