This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/wa0NxBcMuL80sC2mEk7CcQyedPA.asa
File:                     wa0NxBcMuL80sC2mEk7CcQyedPA.asa (raw, json)
Hash identifier:          7HL3OYKxAbAz2TeBPBTf/numqpWz73s26GNlTDqo8jc=
Subject key identifier:   C1:AD:0D:C4:17:0C:B8:BF:34:B0:2D:A6:12:4E:C2:71:0C:9E:74:F0
Certificate issuer:       /CN=8080643f1bac0ba44992175bafb6c5953c73de2c
Certificate serial:       019B3E000DDFEF0072CFB598CC34EEA78321
Authority key identifier: 80:80:64:3F:1B:AC:0B:A4:49:92:17:5B:AF:B6:C5:95:3C:73:DE:2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gIBkPxusC6RJkhdbr7bFlTxz3iw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/wa0NxBcMuL80sC2mEk7CcQyedPA.asa
Signing time:             Sat 20 Dec 2025 23:02:29 +0000
ASPA not before:          Sat 20 Dec 2025 23:02:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            61120
Providers:                AS: 16276
                          AS: 49468
                          AS: 57050
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gIBkPxusC6RJkhdbr7bFlTxz3iw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 05:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3e:00:0d:df:ef:00:72:cf:b5:98:cc:34:ee:a7:83:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8080643f1bac0ba44992175bafb6c5953c73de2c
        Validity
            Not Before: Dec 20 23:02:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c1ad0dc4170cb8bf34b02da6124ec2710c9e74f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:52:57:db:b7:6d:b8:0b:01:55:3e:c0:41:cf:
                    b5:95:19:66:61:07:30:a8:a7:97:8c:d9:5e:a1:ae:
                    b9:b0:0a:68:a6:31:1b:52:07:47:c5:23:bb:9b:89:
                    16:ad:e0:cd:71:2e:d3:f1:c5:f5:66:b1:21:3a:54:
                    14:9f:e1:49:7b:c4:a0:c7:a8:a1:7f:bd:6c:96:df:
                    b6:12:49:02:fc:e4:88:4f:f9:bc:41:7b:f5:2a:72:
                    53:bf:7d:ef:95:b6:46:a0:9b:b2:60:13:3f:85:ff:
                    df:34:bf:94:e3:25:bf:a4:83:77:2e:21:d7:c7:11:
                    35:cc:35:b4:ba:7f:7c:14:63:43:e8:43:4e:a3:e9:
                    de:28:66:f3:0e:ea:ee:ba:8a:aa:5c:13:c3:cd:18:
                    ab:d4:8a:e6:52:97:e6:d5:56:f3:d7:84:a6:97:e3:
                    81:05:c0:0e:c4:f8:df:8c:30:d5:eb:15:da:5f:24:
                    6e:22:01:b7:42:62:38:f9:15:ec:0c:b9:55:3c:20:
                    01:43:df:6c:07:8c:e9:dd:b4:fa:1a:4a:56:05:4d:
                    f1:58:98:6c:4d:17:e4:f8:29:4a:63:41:c8:bc:25:
                    4c:6d:e3:97:f1:6b:28:4d:dd:09:c8:47:f9:64:18:
                    ee:a1:bd:9c:36:57:5a:23:b5:62:c7:00:ea:db:1e:
                    52:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:AD:0D:C4:17:0C:B8:BF:34:B0:2D:A6:12:4E:C2:71:0C:9E:74:F0
            X509v3 Authority Key Identifier:
                keyid:80:80:64:3F:1B:AC:0B:A4:49:92:17:5B:AF:B6:C5:95:3C:73:DE:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gIBkPxusC6RJkhdbr7bFlTxz3iw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/wa0NxBcMuL80sC2mEk7CcQyedPA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61120

    Signature Algorithm: sha256WithRSAEncryption
         22:27:fc:7f:7c:d2:e8:4b:bf:3c:c8:eb:78:76:79:34:58:7d:
         97:d9:b2:a9:1f:05:d9:ca:e8:c9:41:83:dd:56:4f:b1:90:ae:
         d4:58:a1:ae:1d:25:60:2a:3f:c1:30:32:47:dd:7a:19:a6:bd:
         54:f0:20:47:a6:9a:04:e5:d4:2d:15:81:12:77:53:2c:96:59:
         65:98:89:97:2a:2e:ae:10:f6:80:0f:0e:6e:44:31:e1:8a:d4:
         4f:a5:3f:43:d5:6c:99:b4:42:90:da:86:87:6e:3c:83:88:8e:
         f3:85:8e:e1:df:64:7b:b8:e9:47:22:38:59:4e:7a:f5:1f:d3:
         6f:2c:9d:77:99:4f:82:c9:20:0a:d4:fd:2b:be:36:cc:13:f3:
         c7:7b:66:9b:75:16:ca:03:ba:7d:86:2e:c5:0a:a4:c2:89:fb:
         e2:b4:16:bc:2a:ce:43:22:69:76:7b:52:ad:07:d6:65:4e:55:
         1f:9c:3d:cf:dc:13:39:81:ec:67:76:71:7d:15:54:01:37:6a:
         d5:f2:a8:1d:7a:d6:d7:55:06:4b:ad:de:14:2d:b4:46:04:04:
         3d:81:e1:59:32:5c:4f:39:83:a7:ff:e1:17:b4:be:bd:cd:aa:
         10:0f:36:dc:bf:9a:42:2a:c2:17:50:fd:73:80:d6:c6:b2:8f:
         b7:37:62:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 10:43:24 2025 by rpki-client