This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/7B9uvfQ_aJQenakksxp6D80Ok-w.asa
File:                     7B9uvfQ_aJQenakksxp6D80Ok-w.asa (raw, json)
Hash identifier:          oWYADWT/3TvF7EG6FRo49pa8NtDyeDwX2YPni92EjWU=
Subject key identifier:   EC:1F:6E:BD:F4:3F:68:94:1E:9D:A9:24:B3:1A:7A:0F:CD:0E:93:EC
Certificate issuer:       /CN=ccac372f7a9b8171dcbfc1160caa22c8fdc68b7b
Certificate serial:       019B2B1EFC517121F270C7DE8FAD14F124EC
Authority key identifier: CC:AC:37:2F:7A:9B:81:71:DC:BF:C1:16:0C:AA:22:C8:FD:C6:8B:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/7B9uvfQ_aJQenakksxp6D80Ok-w.asa
Signing time:             Wed 17 Dec 2025 07:03:29 +0000
ASPA not before:          Wed 17 Dec 2025 07:03:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            208223
Providers:                AS: 6939
                          AS: 14447
                          AS: 17408
                          AS: 18041
                          AS: 20473
                          AS: 27523
                          AS: 44324
                          AS: 53356
                          AS: 53808
                          AS: 58057
                          AS: 59105
                          AS: 209533
                          AS: 212895
                          AS: 215828
                          AS: 216324
                          AS: 393577
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2b:1e:fc:51:71:21:f2:70:c7:de:8f:ad:14:f1:24:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccac372f7a9b8171dcbfc1160caa22c8fdc68b7b
        Validity
            Not Before: Dec 17 07:03:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ec1f6ebdf43f68941e9da924b31a7a0fcd0e93ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f9:b4:f9:fe:d0:9b:13:95:50:7f:4d:47:74:
                    a8:70:6a:be:57:01:5b:6e:76:21:94:e0:2b:2e:a2:
                    78:c0:cc:e6:c8:ae:a0:5e:36:02:0b:79:da:19:dc:
                    8e:42:8d:44:70:34:00:15:ce:2e:75:2f:c7:61:b1:
                    ab:ef:ca:76:a1:48:34:6f:8b:98:15:35:a9:2f:92:
                    8c:32:92:a5:dd:3a:a1:9d:62:d7:82:76:e9:63:51:
                    21:40:aa:3d:87:7e:bd:46:fe:b2:9d:c4:c0:32:74:
                    29:5a:a8:23:f4:37:98:99:b6:4a:27:56:60:46:68:
                    78:3f:32:72:57:ac:90:48:03:10:cb:b1:72:3f:aa:
                    6f:75:eb:f9:31:2c:67:25:86:11:96:db:56:51:81:
                    5d:62:d3:13:3e:b5:b8:9f:f9:c8:ff:36:0d:ae:9a:
                    cf:e1:93:a3:c9:38:2b:6f:6f:c7:b3:e4:26:98:6f:
                    8a:60:b9:c5:a8:94:dd:99:82:49:48:43:09:ae:c4:
                    20:ec:3b:a2:47:15:d4:b6:b0:68:4c:d2:ca:39:76:
                    80:2e:64:0d:77:c6:df:88:c8:02:a2:b1:00:97:40:
                    6f:75:64:d7:9c:72:7b:8c:0b:e8:2a:1f:50:69:46:
                    f1:b6:2f:ad:f1:40:16:87:de:6f:5f:83:b5:23:64:
                    2c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:1F:6E:BD:F4:3F:68:94:1E:9D:A9:24:B3:1A:7A:0F:CD:0E:93:EC
            X509v3 Authority Key Identifier:
                keyid:CC:AC:37:2F:7A:9B:81:71:DC:BF:C1:16:0C:AA:22:C8:FD:C6:8B:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/7B9uvfQ_aJQenakksxp6D80Ok-w.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208223

    Signature Algorithm: sha256WithRSAEncryption
         37:37:32:02:59:1f:85:b8:53:7b:1d:d8:47:79:d5:88:78:8a:
         35:cf:e2:06:18:3a:7f:03:9d:03:32:72:84:3b:e0:a8:5d:1f:
         3b:1e:dc:69:06:c9:8d:ce:cb:3c:f9:06:e9:37:7c:36:0a:05:
         ec:2a:12:f0:d8:a2:4e:af:06:5c:07:59:28:32:77:f8:a5:d4:
         d7:ef:37:a5:96:6d:f4:1a:42:b4:3c:6b:67:8e:87:58:74:e0:
         6d:f5:60:c4:8e:74:67:5e:e8:c5:30:40:2e:c6:6d:0a:fc:20:
         08:84:75:ec:37:6f:e7:c4:2b:4f:3c:58:61:50:ae:fe:66:fc:
         fb:0e:8b:6f:73:3b:00:1a:33:a4:e7:7f:4c:20:85:3b:8d:56:
         82:03:49:2b:93:60:ae:a1:87:6c:26:f4:7d:f6:1e:8b:b5:81:
         b4:f3:f0:73:b0:0e:9e:e9:cb:a3:ff:ea:68:b9:09:1c:5d:12:
         ce:6e:ea:ef:08:ce:01:c7:6d:54:b8:87:ac:d8:fa:58:bd:ed:
         de:83:3a:7d:44:51:a4:5a:6a:84:6e:ee:bb:e5:7e:c9:2b:9d:
         e5:2f:ff:07:fb:6b:bd:56:46:df:ef:43:64:aa:51:c7:55:88:
         f3:4e:f7:86:81:6c:c8:83:09:9c:17:14:b5:e5:68:4f:b9:7b:
         43:87:58:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 00:24:19 2025 by rpki-client