This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/aULXxwpV3n01msELu6FKmFfUQt0.asa
File:                     aULXxwpV3n01msELu6FKmFfUQt0.asa (raw, json)
Hash identifier:          NByj/5BS6ETg8U2+SS44eCFMC2AU9TZ/aruJFrPVAYA=
Subject key identifier:   69:42:D7:C7:0A:55:DE:7D:35:9A:C1:0B:BB:A1:4A:98:57:D4:42:DD
Certificate issuer:       /CN=cddb6f10030e276f8316276f40b3d4a4184d94dd
Certificate serial:       019BE50B6F0B34AAF6C205837CAA784A77F4
Authority key identifier: CD:DB:6F:10:03:0E:27:6F:83:16:27:6F:40:B3:D4:A4:18:4D:94:DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/aULXxwpV3n01msELu6FKmFfUQt0.asa
Signing time:             Thu 22 Jan 2026 09:31:30 +0000
ASPA not before:          Thu 22 Jan 2026 09:31:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            60432
Providers:                AS: 64445
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:e5:0b:6f:0b:34:aa:f6:c2:05:83:7c:aa:78:4a:77:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cddb6f10030e276f8316276f40b3d4a4184d94dd
        Validity
            Not Before: Jan 22 09:31:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6942d7c70a55de7d359ac10bbba14a9857d442dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6f:14:3a:93:da:92:48:3d:c1:9c:40:27:4c:
                    bd:69:f0:d0:8e:35:8a:ae:37:67:ff:a8:5a:01:bd:
                    69:35:4e:7d:b3:9a:9c:e2:15:3c:e7:af:09:b3:0b:
                    dc:68:6e:16:32:17:75:bc:10:20:0a:b5:02:9d:c8:
                    cd:1d:65:57:24:03:dc:94:fc:7d:e1:7d:db:8d:4d:
                    53:03:9c:83:e1:53:fa:48:70:ec:86:a2:92:1e:a4:
                    ac:91:c3:cf:71:84:19:b3:04:dc:b3:49:c7:7f:48:
                    9d:dc:c5:5b:a7:4a:6f:6e:3c:76:58:9b:00:b5:c6:
                    19:35:0b:24:97:29:bf:7c:0c:28:f3:19:06:17:33:
                    36:78:09:47:1c:ff:bf:7e:58:05:b1:cd:e3:14:ac:
                    60:78:69:10:4b:94:aa:e7:27:d7:c8:a2:c3:78:f5:
                    11:c4:b6:a2:ab:60:9c:f1:fe:b0:e3:0b:b3:db:81:
                    22:c1:34:bb:d1:c6:9e:20:9f:4e:a8:21:15:2f:c9:
                    c1:ca:48:d4:12:ff:32:4a:c8:35:fa:6d:2d:50:b9:
                    6d:f3:af:5f:66:50:1a:8c:8b:36:98:e7:f8:37:dd:
                    14:91:72:09:b5:b2:6b:c9:13:5d:03:60:6e:94:89:
                    2d:f0:3c:3f:c2:02:a0:5a:ed:4e:c3:2a:7c:55:e1:
                    8a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:42:D7:C7:0A:55:DE:7D:35:9A:C1:0B:BB:A1:4A:98:57:D4:42:DD
            X509v3 Authority Key Identifier:
                keyid:CD:DB:6F:10:03:0E:27:6F:83:16:27:6F:40:B3:D4:A4:18:4D:94:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/aULXxwpV3n01msELu6FKmFfUQt0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60432

    Signature Algorithm: sha256WithRSAEncryption
         91:77:4a:28:b5:3f:c7:fa:0b:09:b2:f7:2c:63:8d:db:c0:a4:
         7c:a2:65:c3:36:30:4a:90:02:5a:80:6e:ba:38:63:8d:b1:18:
         f7:67:68:97:7c:04:5b:d5:49:e6:35:21:a6:87:77:ea:47:57:
         81:f3:3c:b9:2e:81:cc:1b:a9:6b:d7:a4:0e:38:9e:3d:9b:96:
         df:0e:73:02:13:0f:c2:24:50:8c:07:cf:b3:a3:91:5f:cb:c6:
         10:00:b1:3c:90:1f:4a:52:19:b4:4c:29:b0:c2:38:9d:30:83:
         5f:43:3b:62:7f:6c:61:79:17:ac:af:9e:9a:bf:06:27:ee:e8:
         22:9a:34:bb:8a:30:54:bd:00:41:03:bb:4b:04:f9:39:ab:21:
         91:87:b5:31:04:c8:c0:b3:a4:05:5d:69:ad:61:00:e6:c9:a5:
         89:69:87:3b:f0:54:cf:f4:61:47:29:a4:2c:80:8b:d7:fe:70:
         5d:c4:24:de:d0:f2:bb:cf:00:2b:36:29:99:18:74:12:d3:a8:
         e9:63:c7:8c:58:94:46:a2:c3:cb:db:94:31:c4:4e:ee:60:75:
         8f:f2:a7:0a:38:cb:a9:7d:ad:91:60:9b:ec:da:c8:65:30:25:
         94:ec:09:4c:85:bc:22:86:dd:8d:6b:68:d4:b2:0a:4f:20:03:
         00:e0:f7:33
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZvlC28LNKr2wgWDfKp4Snf0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZGI2ZjEwMDMwZTI3NmY4MzE2Mjc2ZjQwYjNkNGE0MTg0
ZDk0ZGQwHhcNMjYwMTIyMDkzMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTQyZDdjNzBhNTVkZTdkMzU5YWMxMGJiYmExNGE5ODU3ZDQ0MmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG8UOpPakkg9wZxAJ0y9afDQjjWK
rjdn/6haAb1pNU59s5qc4hU8568JswvcaG4WMhd1vBAgCrUCncjNHWVXJAPclPx9
4X3bjU1TA5yD4VP6SHDshqKSHqSskcPPcYQZswTcs0nHf0id3MVbp0pvbjx2WJsA
tcYZNQsklym/fAwo8xkGFzM2eAlHHP+/flgFsc3jFKxgeGkQS5Sq5yfXyKLDePUR
xLaiq2Cc8f6w4wuz24EiwTS70caeIJ9OqCEVL8nBykjUEv8ySsg1+m0tULlt869f
ZlAajIs2mOf4N90UkXIJtbJryRNdA2BulIkt8Dw/wgKgWu1Owyp8VeGKdQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFGlC18cKVd59NZrBC7uhSphX1ELdMB8GA1UdIwQY
MBaAFM3bbxADDidvgxYnb0Cz1KQYTZTdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemR0dkVBTU9KMi1ERmlkdlFMUFVwQmhObE4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iNWNiMTktYTI3YS00NGE3LWEzM2Ut
ODBiMmQyNWJmOWM4LzEvYVVMWHh3cFYzbjAxbXNFTHU2RkttRmZVUXQwLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9iNWNiMTktYTI3YS00NGE3LWEzM2UtODBiMmQyNWJmOWM4
LzEvemR0dkVBTU9KMi1ERmlkdlFMUFVwQmhObE4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDsEDANBgkqhkiG
9w0BAQsFAAOCAQEAkXdKKLU/x/oLCbL3LGON28CkfKJlwzYwSpACWoBuujhjjbEY
92dol3wEW9VJ5jUhpod36kdXgfM8uS6BzBupa9ekDjiePZuW3w5zAhMPwiRQjAfP
s6ORX8vGEACxPJAfSlIZtEwpsMI4nTCDX0M7Yn9sYXkXrK+emr8GJ+7oIpo0u4ow
VL0AQQO7SwT5OashkYe1MQTIwLOkBV1prWEA5smliWmHO/BUz/RhRymkLICL1/5w
XcQk3tDyu88AKzYpmRh0EtOo6WPHjFiURqLDy9uUMcRO7mB1j/KnCjjLqX2tkWCb
7NrIZTAllOwJTIW8IobdjWto1LIKTyADAOD3Mw==
-----END CERTIFICATE-----
Generated at Mon Feb 2 04:40:52 2026 by rpki-client