This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/XrsyhJgNUO0sCjMskJID68dkack.asa
File:                     XrsyhJgNUO0sCjMskJID68dkack.asa (raw, json)
Hash identifier:          e8Ve4gNOJ5qd29TIMwDD8LZbjGc8czCkaqt7UGyLIis=
Subject key identifier:   5E:BB:32:84:98:0D:50:ED:2C:0A:33:2C:90:92:03:EB:C7:64:69:C9
Certificate issuer:       /CN=b1c207536c234b8bc3ac983011431ba77439d637
Certificate serial:       019B37F210CD815427480D33EBA780172E40
Authority key identifier: B1:C2:07:53:6C:23:4B:8B:C3:AC:98:30:11:43:1B:A7:74:39:D6:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/scIHU2wjS4vDrJgwEUMbp3Q51jc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/XrsyhJgNUO0sCjMskJID68dkack.asa
Signing time:             Fri 19 Dec 2025 18:49:29 +0000
ASPA not before:          Fri 19 Dec 2025 18:49:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            207510
Providers:                AS: 29670
                          AS: 34927
                          AS: 58299
                          AS: 207160
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/scIHU2wjS4vDrJgwEUMbp3Q51jc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 04:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:37:f2:10:cd:81:54:27:48:0d:33:eb:a7:80:17:2e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c207536c234b8bc3ac983011431ba77439d637
        Validity
            Not Before: Dec 19 18:49:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5ebb3284980d50ed2c0a332c909203ebc76469c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:36:2e:38:e4:e1:10:d6:d3:c8:06:ab:ed:ae:
                    95:55:d5:e3:0c:01:1a:0e:49:c2:fb:0d:98:73:7d:
                    2b:2f:0c:e2:1c:1b:56:27:90:e1:08:cd:90:db:f3:
                    31:44:7a:15:84:b4:7a:ef:4d:f8:a2:44:b6:45:51:
                    43:f2:f8:9e:1a:5c:c5:71:2f:69:7d:9f:fe:3e:36:
                    ec:31:fa:4b:bb:6b:19:60:84:b5:7b:d2:2a:93:f9:
                    f6:b7:35:1f:7d:08:17:35:94:d0:05:8e:5c:f4:07:
                    59:fa:b6:4a:df:89:d2:41:41:f0:f2:68:2e:03:62:
                    be:44:47:77:40:38:9b:b1:07:40:3d:d1:72:5d:a8:
                    e1:37:19:c6:e7:31:39:88:6d:18:5c:31:eb:08:b5:
                    6d:05:bf:a9:20:52:5e:59:1c:c9:32:96:42:96:39:
                    c2:8d:a4:3b:57:99:af:c0:b9:46:01:b3:0b:9f:1a:
                    9f:6e:7e:43:92:b0:17:e1:8f:91:11:fa:35:34:b8:
                    1b:f6:89:49:77:94:91:8f:57:a8:98:c6:8b:df:13:
                    eb:a1:88:7a:ea:a9:ca:e9:da:41:79:74:7c:81:66:
                    10:e6:4f:4d:8a:83:4e:c0:b4:68:c1:ca:35:f9:4c:
                    84:e6:e2:43:d6:69:cb:1b:47:d6:91:74:96:3a:c1:
                    ef:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:BB:32:84:98:0D:50:ED:2C:0A:33:2C:90:92:03:EB:C7:64:69:C9
            X509v3 Authority Key Identifier:
                keyid:B1:C2:07:53:6C:23:4B:8B:C3:AC:98:30:11:43:1B:A7:74:39:D6:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scIHU2wjS4vDrJgwEUMbp3Q51jc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/XrsyhJgNUO0sCjMskJID68dkack.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207510

    Signature Algorithm: sha256WithRSAEncryption
         68:82:0d:a4:03:74:51:47:20:15:c1:27:fa:b7:63:06:d7:57:
         24:44:09:bb:fd:3f:fc:e4:07:ae:32:fa:76:f8:ba:87:fb:ca:
         ce:d8:82:d6:fd:e9:b7:bc:48:16:57:15:a8:7c:f1:ff:50:23:
         9c:e0:89:09:63:59:35:99:42:23:30:d1:9b:ed:13:78:0d:d1:
         73:4b:66:be:c0:30:6f:6b:b2:d2:e5:ca:5b:e1:71:38:6b:4a:
         67:21:c7:50:46:d9:30:58:8c:96:e7:0b:cc:3a:ea:48:3e:f6:
         30:ae:0e:33:f0:69:05:7f:ef:3b:92:fc:ba:3b:9e:e2:20:e2:
         8d:07:34:1f:32:d5:a1:3b:98:1f:07:e2:b7:46:c1:2b:96:77:
         05:73:15:0c:89:4c:2e:79:66:36:30:bc:f8:9c:8f:3d:98:69:
         e5:93:ff:0b:ab:e4:2e:c9:02:3e:6e:2f:23:1e:e5:db:4c:45:
         f0:eb:56:d0:d5:05:78:dc:54:7d:fc:24:85:5b:40:49:90:01:
         8a:6c:98:2a:26:6e:14:67:9d:e5:fa:d0:de:97:08:8f:ac:96:
         19:08:ab:d0:39:ce:98:53:30:7a:5f:0c:1c:64:fe:eb:31:ad:
         29:f5:06:16:90:39:50:ca:77:5e:14:f5:de:5d:7f:9b:ca:e4:
         ed:bf:88:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 13:45:22 2025 by rpki-client