This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/wLKTHNAi_SKjDTW74BcesnX-WQQ.asa
File:                     wLKTHNAi_SKjDTW74BcesnX-WQQ.asa (raw, json)
Hash identifier:          j48nzI6JGxErzvih/a7iFeEhyD9lYuYhcQYuQ7FCZgk=
Subject key identifier:   C0:B2:93:1C:D0:22:FD:22:A3:0D:35:BB:E0:17:1E:B2:75:FE:59:04
Certificate issuer:       /CN=2baee7ea482d62a671063eac83789af39f390b74
Certificate serial:       019B304BC15438F5CA426E12B4AFA532DDF0
Authority key identifier: 2B:AE:E7:EA:48:2D:62:A6:71:06:3E:AC:83:78:9A:F3:9F:39:0B:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/wLKTHNAi_SKjDTW74BcesnX-WQQ.asa
Signing time:             Thu 18 Dec 2025 07:10:29 +0000
ASPA not before:          Thu 18 Dec 2025 07:10:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            197885
Providers:                AS: 41051
                          AS: 209533
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 16:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:30:4b:c1:54:38:f5:ca:42:6e:12:b4:af:a5:32:dd:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2baee7ea482d62a671063eac83789af39f390b74
        Validity
            Not Before: Dec 18 07:10:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c0b2931cd022fd22a30d35bbe0171eb275fe5904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1b:c7:de:64:06:af:f7:01:0b:d6:c6:7c:55:
                    51:1f:3e:d4:1f:69:2f:26:cd:36:4f:83:78:5b:e5:
                    14:62:2d:fe:e9:3d:a7:23:dd:d7:4e:38:25:f6:b7:
                    22:b5:7f:50:d6:2d:dc:21:24:66:d8:d1:62:d8:a7:
                    d1:ae:77:51:fc:91:64:64:a4:4c:1d:70:c9:e8:0a:
                    ab:fd:02:2f:87:46:35:e7:84:15:86:30:0b:d0:04:
                    6d:8d:50:f6:62:d6:bb:b4:23:2c:46:1b:2d:c4:1c:
                    37:07:49:d1:aa:1a:3c:d3:df:fa:37:37:f5:3e:e7:
                    72:6d:67:7b:79:3a:a9:4b:b4:0e:d9:5e:3a:db:d3:
                    65:32:7b:cd:a8:72:37:ed:0c:20:6e:d5:77:15:bb:
                    cd:88:a6:53:db:9c:37:7f:bb:63:cd:d4:e4:39:1f:
                    9f:45:57:15:96:dc:04:bd:69:d0:0f:01:47:76:c3:
                    7a:db:09:d7:ff:c6:b1:bd:56:c6:d7:08:89:b3:0a:
                    c6:db:18:f1:b2:f5:ed:43:b1:b7:d0:96:e8:b3:c4:
                    31:db:7d:a4:37:6f:d5:0f:0b:2f:4a:fe:69:dc:cf:
                    dc:bc:06:70:e4:5c:ef:54:2e:f9:b0:d3:ce:af:0f:
                    c0:07:81:ee:f5:09:0e:05:33:38:89:a0:16:5f:05:
                    c8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B2:93:1C:D0:22:FD:22:A3:0D:35:BB:E0:17:1E:B2:75:FE:59:04
            X509v3 Authority Key Identifier:
                keyid:2B:AE:E7:EA:48:2D:62:A6:71:06:3E:AC:83:78:9A:F3:9F:39:0B:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/wLKTHNAi_SKjDTW74BcesnX-WQQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197885

    Signature Algorithm: sha256WithRSAEncryption
         8f:45:fa:2f:c4:ad:6d:d9:76:6e:b0:a4:a8:2f:02:09:4f:38:
         fc:da:31:51:b9:3a:ce:67:17:6d:1c:7e:58:13:75:da:e5:86:
         ff:25:ba:50:a2:a9:99:9e:ae:1f:a1:86:7f:8d:e3:76:2c:2b:
         d9:5f:e3:5d:14:aa:3f:72:c4:2c:bd:a0:d6:b3:59:ee:26:8a:
         44:74:07:e3:56:dd:2a:73:42:2c:5b:8a:4d:0c:87:1a:e6:25:
         6e:76:43:31:d7:bb:75:ad:e9:87:08:f3:9a:05:77:58:71:71:
         2f:4d:75:2c:d4:bf:11:8d:c6:cf:24:1c:08:a5:91:b1:51:2a:
         3f:52:ad:5b:5e:e3:3e:16:97:3d:1c:12:b1:04:4e:2a:a7:b4:
         fc:fa:f7:f3:69:42:1b:e7:8b:c1:5e:fe:77:66:d1:fb:df:0f:
         99:d4:4c:b2:2a:df:a2:d5:a9:81:bf:99:21:d5:05:88:1e:eb:
         c6:f6:79:60:4e:8a:7f:9b:10:3b:f9:65:b4:d3:77:7f:72:6d:
         58:b2:b3:8b:c0:98:17:0a:ba:81:18:ee:30:41:7e:c5:97:45:
         36:a8:7f:e9:f0:81:94:db:60:78:4e:79:e3:e8:00:19:c1:ac:
         0f:85:1f:e9:5b:43:02:c6:b0:05:bb:06:86:af:5a:5b:0d:1f:
         5e:85:b7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 01:40:03 2025 by rpki-client