This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/G0H1NZGAbtsyoA2e--eIMeks25w.asa
File:                     G0H1NZGAbtsyoA2e--eIMeks25w.asa (raw, json)
Hash identifier:          hXpme5X4li6UsZQl1l4A/uCi4ohrlAjpSmRIc/a8sgw=
Subject key identifier:   1B:41:F5:35:91:80:6E:DB:32:A0:0D:9E:FB:E7:88:31:E9:2C:DB:9C
Certificate issuer:       /CN=de5e6c2330911bc1dc8c83d411ef6b1208b3bbd6
Certificate serial:       019B2752B235125579F046C6FEE1D5E23564
Authority key identifier: DE:5E:6C:23:30:91:1B:C1:DC:8C:83:D4:11:EF:6B:12:08:B3:BB:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/G0H1NZGAbtsyoA2e--eIMeks25w.asa
Signing time:             Tue 16 Dec 2025 13:21:29 +0000
ASPA not before:          Tue 16 Dec 2025 13:21:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            215756
Providers:                AS: 42184
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 24 Dec 2025 15:46:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:27:52:b2:35:12:55:79:f0:46:c6:fe:e1:d5:e2:35:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de5e6c2330911bc1dc8c83d411ef6b1208b3bbd6
        Validity
            Not Before: Dec 16 13:21:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1b41f53591806edb32a00d9efbe78831e92cdb9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b0:b5:e1:7d:3c:6c:21:a3:38:76:f2:2c:61:
                    a9:29:f1:af:9d:4e:50:57:a5:a1:f8:19:3a:5b:ef:
                    e3:a4:9c:63:55:c0:9c:6a:5b:dd:85:d3:78:98:6d:
                    b4:aa:d1:43:c0:bf:f0:18:29:72:b0:b4:48:f0:fc:
                    39:47:90:1f:05:6c:32:d4:91:ef:8e:2c:c0:ed:f3:
                    bd:c1:13:d2:9f:f2:09:cb:84:31:b9:ca:8a:e6:cc:
                    0d:e4:43:8b:26:bd:3f:54:27:c2:d2:21:25:44:19:
                    85:d2:40:73:78:d5:fe:51:8e:49:1b:1e:30:c6:c3:
                    a9:f4:23:45:ae:8e:52:a0:22:c6:6f:1b:d6:41:0b:
                    d8:fb:a3:12:fd:73:34:73:4c:62:33:91:18:27:23:
                    86:99:9d:5b:42:bb:49:7b:48:b5:33:d5:f9:6e:bf:
                    01:15:82:3e:3f:9c:60:17:a7:a0:33:b8:00:9f:52:
                    ce:33:6a:83:14:26:f6:cf:4b:c8:e2:bd:ec:e1:9a:
                    83:0a:4f:da:34:c0:12:26:75:27:f4:75:ae:03:27:
                    08:c5:39:7f:07:cf:5b:07:ad:42:76:fb:1b:c6:5d:
                    86:13:bc:d4:94:5c:fa:93:61:86:e0:e3:f7:7a:e5:
                    f9:24:21:07:1e:82:a3:13:22:19:6d:76:98:94:6c:
                    8b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:41:F5:35:91:80:6E:DB:32:A0:0D:9E:FB:E7:88:31:E9:2C:DB:9C
            X509v3 Authority Key Identifier:
                keyid:DE:5E:6C:23:30:91:1B:C1:DC:8C:83:D4:11:EF:6B:12:08:B3:BB:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/G0H1NZGAbtsyoA2e--eIMeks25w.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215756

    Signature Algorithm: sha256WithRSAEncryption
         34:1e:13:61:41:a5:d2:8f:8f:9c:19:1b:fd:1f:eb:02:74:ea:
         0d:45:a3:86:20:43:f5:3c:20:74:07:1d:a9:3a:7e:ce:77:91:
         b7:15:66:66:e1:0c:b2:c7:29:ab:43:f4:0a:2d:de:9b:21:09:
         9b:aa:d0:65:6f:3d:e7:d4:a5:52:7d:b7:9d:54:1e:6b:1f:c6:
         6c:b1:9d:a6:5e:10:bc:de:c7:74:90:88:75:99:4e:d3:70:df:
         99:f7:d4:ba:84:f8:04:b0:97:81:b1:67:14:ac:bd:dd:15:26:
         c8:cc:3b:e2:84:35:e5:5a:5b:27:32:57:1e:12:fd:62:45:80:
         fa:1d:55:0a:e4:b2:2f:a6:0d:75:33:28:09:40:5b:74:36:d0:
         e9:a8:52:1f:35:b5:2f:e1:c6:e7:fa:be:a9:ae:fe:74:b5:35:
         d3:5f:d2:0f:67:fa:ba:c6:b9:09:37:dc:2b:e0:25:3d:ab:77:
         27:ab:fa:dd:26:37:22:de:ad:b0:87:77:e5:7a:46:e5:98:a9:
         e1:8b:82:cc:7e:9d:95:d9:6e:38:a1:ab:b2:8a:87:5b:f3:b3:
         62:26:b5:6c:d6:76:94:56:84:95:18:bd:6a:0b:a3:91:e2:9c:
         a7:fa:e7:88:93:74:68:72:36:a9:48:23:6b:b1:e5:1e:44:75:
         07:64:38:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 18:29:17 2025 by rpki-client