This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/HVewmeGdvGR_CktJLKO96_JTgVg.asa
File:                     HVewmeGdvGR_CktJLKO96_JTgVg.asa (raw, json)
Hash identifier:          /lL1ZClWKYay5ehRMI+LCbGIg6653LdB1CDjXUY9AA8=
Subject key identifier:   1D:57:B0:99:E1:9D:BC:64:7F:0A:4B:49:2C:A3:BD:EB:F2:53:81:58
Certificate issuer:       /CN=8c1e720fd75dd601345b9876aea7f91ab446d47f
Certificate serial:       019B5E119720C7FDBDEDB6BEFAD1400E6D1D
Authority key identifier: 8C:1E:72:0F:D7:5D:D6:01:34:5B:98:76:AE:A7:F9:1A:B4:46:D4:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/HVewmeGdvGR_CktJLKO96_JTgVg.asa
Signing time:             Sat 27 Dec 2025 04:29:29 +0000
ASPA not before:          Sat 27 Dec 2025 04:29:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            200240
Providers:                AS: 42831
                          AS: 59796
                          AS: 398999
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 31 Dec 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5e:11:97:20:c7:fd:bd:ed:b6:be:fa:d1:40:0e:6d:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c1e720fd75dd601345b9876aea7f91ab446d47f
        Validity
            Not Before: Dec 27 04:29:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1d57b099e19dbc647f0a4b492ca3bdebf2538158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:28:44:e7:23:36:0a:81:61:1d:06:6d:ed:ee:
                    09:73:ab:e5:dd:2d:81:5c:02:33:f7:0d:70:2d:3c:
                    a9:18:8b:9f:a7:6a:9d:5d:b2:eb:a7:82:1b:68:c4:
                    c8:c2:1d:f1:47:ac:31:3d:1e:00:70:da:1a:02:7d:
                    d1:6f:4e:00:04:09:97:a0:70:d4:10:ff:a3:37:92:
                    f4:d3:2b:c7:69:4b:b7:2f:c1:f2:8b:b7:f7:d3:f8:
                    80:3f:a2:ff:97:85:41:41:12:eb:2a:3a:b6:b4:82:
                    0c:0b:53:39:f5:d4:ba:46:7b:77:b5:0e:34:dc:5c:
                    b2:bd:9b:d7:cc:c7:cf:b7:ee:8f:0a:88:e3:cd:17:
                    3f:5c:e0:8a:dc:05:a6:3c:1a:84:d3:dd:c5:f1:d7:
                    af:93:ed:e4:dc:81:ab:39:d2:6a:19:a7:79:a9:1d:
                    a9:7c:78:bd:4e:ae:de:58:6a:a0:c4:31:e1:ce:b2:
                    a8:c6:a3:87:21:5b:6f:be:5e:db:a4:7e:c3:47:2c:
                    97:46:e7:61:d5:4e:b1:68:94:e3:40:7f:99:aa:73:
                    61:8b:ac:37:c8:46:1f:00:ae:ed:63:b5:45:c0:6c:
                    98:4e:56:e1:9b:ea:39:69:0b:f0:d2:f9:aa:5c:44:
                    a0:93:fe:2a:6e:86:6c:52:27:24:b4:3a:4b:43:b6:
                    48:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:57:B0:99:E1:9D:BC:64:7F:0A:4B:49:2C:A3:BD:EB:F2:53:81:58
            X509v3 Authority Key Identifier:
                keyid:8C:1E:72:0F:D7:5D:D6:01:34:5B:98:76:AE:A7:F9:1A:B4:46:D4:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/HVewmeGdvGR_CktJLKO96_JTgVg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200240

    Signature Algorithm: sha256WithRSAEncryption
         48:6f:ad:e1:96:cb:fe:d3:16:40:47:ed:0c:ad:0e:b3:d7:fc:
         c3:1a:72:c8:c8:a0:f7:9e:78:48:66:f6:92:e8:39:1d:2f:32:
         ea:1c:94:bf:ad:ab:f6:d5:d0:ed:bf:53:7f:22:9b:d6:e5:e5:
         70:a7:95:42:72:58:d6:1e:c6:c2:e9:34:bf:85:39:16:43:03:
         16:6c:f4:e9:61:3e:f7:10:64:53:cd:7e:cb:91:3d:d1:7c:f1:
         4d:88:7a:43:ff:66:af:e5:97:a1:17:3c:29:50:a5:13:f0:af:
         de:17:bc:e3:84:e4:5e:bc:c6:8a:ff:05:b6:9a:d9:53:49:50:
         8e:15:c6:e5:a3:78:39:1d:84:92:64:99:21:e7:ca:9c:e2:55:
         55:f6:a2:58:af:c6:50:5a:2e:5a:f1:04:52:8d:e2:5a:cd:8a:
         b3:2e:88:3c:4e:5d:08:13:85:05:77:43:ba:c9:fc:53:00:59:
         ad:ca:bf:a3:7a:8b:66:eb:1f:ce:7a:fc:ef:4a:cf:0b:f3:bd:
         c6:ad:36:76:ff:55:dc:3a:75:f4:4a:08:db:ec:86:4d:78:7f:
         38:d2:4d:f9:89:98:7d:45:9e:11:43:f3:30:a4:ba:d4:cb:1d:
         78:01:9b:8c:f8:14:4e:9a:60:ac:06:32:21:03:f5:51:be:42:
         18:bf:1c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 09:37:43 2025 by rpki-client