This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/W-UYkYcFpRXJXOLdeRe7OrV0cZ0.asa
File:                     W-UYkYcFpRXJXOLdeRe7OrV0cZ0.asa (raw, json)
Hash identifier:          u3Eh32uzo3YgryhEMHYkmoOOlYuyFVQMTVeW1RRgVo8=
Subject key identifier:   5B:E5:18:91:87:05:A5:15:C9:5C:E2:DD:79:17:BB:3A:B5:74:71:9D
Certificate issuer:       /CN=f618619ae3c9b59d868bcdfcc7e73d813f8504e5
Certificate serial:       019B27F5AA752185A3068FCE4BC5082CB5EF
Authority key identifier: F6:18:61:9A:E3:C9:B5:9D:86:8B:CD:FC:C7:E7:3D:81:3F:85:04:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9hhhmuPJtZ2Gi838x-c9gT-FBOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/W-UYkYcFpRXJXOLdeRe7OrV0cZ0.asa
Signing time:             Tue 16 Dec 2025 16:19:29 +0000
ASPA not before:          Tue 16 Dec 2025 16:19:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            216333
Providers:                AS: 174
                          AS: 6939
                          AS: 50673
                          AS: 50917
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9hhhmuPJtZ2Gi838x-c9gT-FBOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9hhhmuPJtZ2Gi838x-c9gT-FBOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9hhhmuPJtZ2Gi838x-c9gT-FBOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 24 Dec 2025 10:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:27:f5:aa:75:21:85:a3:06:8f:ce:4b:c5:08:2c:b5:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f618619ae3c9b59d868bcdfcc7e73d813f8504e5
        Validity
            Not Before: Dec 16 16:19:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5be518918705a515c95ce2dd7917bb3ab574719d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c8:75:0e:37:88:5e:ed:7c:1a:15:16:99:ef:
                    87:79:fe:dc:78:e8:4d:6e:d4:ec:51:a1:ee:7f:5d:
                    a0:60:71:99:24:3b:c3:9d:b8:2e:ea:c8:47:c3:d8:
                    c5:7a:c2:0f:2d:03:d4:f8:c4:ee:1f:2d:9c:1d:d1:
                    ce:4c:66:20:5e:c8:67:d6:a1:33:a0:89:30:c7:c9:
                    22:ed:0b:d0:3d:e0:66:b1:aa:aa:3b:be:dd:1c:96:
                    7d:c1:21:3a:81:8e:4e:82:33:27:c1:6c:2e:c7:ab:
                    cc:a7:79:b1:f2:1d:ee:57:e5:4d:da:c7:9d:21:c5:
                    cc:14:86:40:01:a8:7b:16:15:58:a4:7a:29:a9:f2:
                    8d:21:b7:0a:73:40:c2:0e:18:14:b8:6e:f2:99:14:
                    12:7e:d0:b0:26:fd:15:af:b8:ff:fe:c4:f0:9a:45:
                    d6:f2:ee:fd:8f:80:2e:a8:93:e8:d4:3d:82:43:3c:
                    a3:38:5f:5b:05:60:94:e8:ec:9f:90:01:84:2d:43:
                    9b:8f:35:f6:b8:b7:28:f6:be:b7:35:5a:7c:0a:d0:
                    01:a4:9c:ee:46:2a:93:e6:3f:9f:be:73:89:c4:26:
                    86:2c:ce:a2:fc:ad:c8:f4:54:1b:2c:f6:01:aa:9a:
                    02:66:ea:ab:b6:a1:c2:e2:26:4b:5a:d1:24:65:96:
                    0d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E5:18:91:87:05:A5:15:C9:5C:E2:DD:79:17:BB:3A:B5:74:71:9D
            X509v3 Authority Key Identifier:
                keyid:F6:18:61:9A:E3:C9:B5:9D:86:8B:CD:FC:C7:E7:3D:81:3F:85:04:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9hhhmuPJtZ2Gi838x-c9gT-FBOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/W-UYkYcFpRXJXOLdeRe7OrV0cZ0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9hhhmuPJtZ2Gi838x-c9gT-FBOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216333

    Signature Algorithm: sha256WithRSAEncryption
         b2:79:ba:53:36:f3:2c:75:26:de:fc:3c:b0:20:57:b0:e7:14:
         ba:04:2e:04:23:de:b3:88:78:34:3a:55:f1:3e:62:d6:a5:be:
         6e:3f:e8:82:66:df:32:8c:18:dc:6f:e3:be:c6:7f:86:43:43:
         f7:74:86:3a:fb:b2:b2:c8:37:a6:20:6f:75:f0:f0:ac:47:22:
         d0:e4:d2:71:b3:75:58:5e:e1:54:fd:65:0a:b9:22:a1:30:11:
         fe:19:9e:02:16:b3:be:a7:82:5a:f2:56:ec:01:17:05:f9:37:
         e1:21:38:36:8c:b3:74:49:5b:9c:41:33:b9:38:f4:ec:8e:c4:
         95:35:f2:5e:88:0d:a9:47:84:47:68:38:51:b3:e4:9f:8d:7b:
         83:02:a4:b4:10:ba:ed:2e:ee:0a:d9:e8:33:ea:cd:f1:ef:ff:
         8c:b5:75:57:e0:f7:a2:ef:23:ab:84:0d:d5:fa:a3:9c:97:16:
         b0:1c:8d:d8:fb:ea:8d:b9:62:78:b6:db:08:8e:1e:0e:2b:9a:
         53:24:ab:6d:f4:2c:65:db:ec:d6:be:dc:3b:db:b4:db:32:26:
         40:1f:28:dd:18:04:0f:ec:56:b9:cf:19:f3:c3:be:30:51:c1:
         e7:01:e2:35:54:80:fe:cc:5a:47:db:24:62:7f:dc:40:c0:9f:
         a7:d9:55:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 18:29:16 2025 by rpki-client