This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/rANm87WqORmafEWHghrrK-0l72M.asa
File:                     rANm87WqORmafEWHghrrK-0l72M.asa (raw, json)
Hash identifier:          Fgz6vPciEn1J0Q0dP4IkhgZ0dZebnzwKhwY9olb/BWo=
Subject key identifier:   AC:03:66:F3:B5:AA:39:19:9A:7C:45:87:82:1A:EB:2B:ED:25:EF:63
Certificate issuer:       /CN=bf49df577f0ee443188c029323457bbc5a0ead3b
Certificate serial:       019B2DF8A91CBC58A5080BEB3FA7356A3FE9
Authority key identifier: BF:49:DF:57:7F:0E:E4:43:18:8C:02:93:23:45:7B:BC:5A:0E:AD:3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v0nfV38O5EMYjAKTI0V7vFoOrTs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/rANm87WqORmafEWHghrrK-0l72M.asa
Signing time:             Wed 17 Dec 2025 20:20:29 +0000
ASPA not before:          Wed 17 Dec 2025 20:20:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            208323
Providers:                AS: 1764
                          AS: 47147
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v0nfV38O5EMYjAKTI0V7vFoOrTs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 04:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2d:f8:a9:1c:bc:58:a5:08:0b:eb:3f:a7:35:6a:3f:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf49df577f0ee443188c029323457bbc5a0ead3b
        Validity
            Not Before: Dec 17 20:20:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ac0366f3b5aa39199a7c4587821aeb2bed25ef63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e9:67:c1:a3:b8:b0:87:69:98:03:4f:a2:4b:
                    2e:77:4a:50:2a:3b:db:77:3a:ed:38:58:b4:3b:46:
                    6d:12:cd:04:25:d6:98:2a:55:e0:bf:77:73:e5:9d:
                    b3:dc:93:51:10:01:ee:b7:f7:44:2c:2a:76:5b:2f:
                    f4:b4:94:99:57:7e:2f:c6:89:e8:7c:cf:34:7e:61:
                    1b:3c:30:23:c8:65:b4:b5:1f:50:3d:62:e7:56:de:
                    63:04:15:a0:34:2b:3d:60:87:ab:34:d8:0f:cd:d6:
                    e1:47:a7:31:7b:97:e0:1c:97:51:72:88:c5:2b:26:
                    bd:70:79:fb:7b:49:b7:e3:54:ce:f5:41:c7:2a:ee:
                    25:84:80:c7:db:68:7e:1e:df:d9:05:9f:59:19:31:
                    e9:87:f3:b3:11:98:0d:af:11:9a:9e:e5:79:20:f9:
                    f6:42:c9:8a:bf:ca:d6:8e:a1:e6:30:21:f0:41:9b:
                    fe:1e:3a:7f:42:25:cf:45:71:b2:d8:6b:e4:39:93:
                    31:1e:fb:b4:28:b5:34:46:25:a1:8c:a6:54:2a:68:
                    fe:af:d2:74:9f:ff:31:db:93:b8:3b:1e:96:94:69:
                    36:4b:82:e7:1f:ff:d4:d0:0d:0e:71:43:e3:6c:e7:
                    bd:c8:e4:2b:e4:b6:e4:52:19:52:2b:1b:07:28:b9:
                    73:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:03:66:F3:B5:AA:39:19:9A:7C:45:87:82:1A:EB:2B:ED:25:EF:63
            X509v3 Authority Key Identifier:
                keyid:BF:49:DF:57:7F:0E:E4:43:18:8C:02:93:23:45:7B:BC:5A:0E:AD:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0nfV38O5EMYjAKTI0V7vFoOrTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/rANm87WqORmafEWHghrrK-0l72M.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208323

    Signature Algorithm: sha256WithRSAEncryption
         45:7d:36:9c:cb:39:09:d5:f7:0e:31:f3:3f:aa:f1:34:5c:04:
         59:f4:00:f2:71:cd:4a:47:4e:18:af:52:ca:dc:f6:45:63:d9:
         bf:05:62:5d:7e:76:e3:74:d2:6a:79:b5:3e:91:72:fc:2c:f8:
         ea:81:f5:71:39:00:1a:b7:9e:9e:ca:da:06:cf:98:59:5a:41:
         3b:f8:9b:b8:a1:02:01:a7:7d:88:b4:ec:a1:49:9b:18:5b:76:
         09:77:dc:68:39:e1:65:36:7d:15:4a:b4:e3:4f:45:15:f1:7e:
         a1:62:0d:a4:2f:2d:34:3d:f3:1c:a7:0e:c2:28:62:86:c4:93:
         30:6a:67:a5:80:45:2c:48:26:9f:b6:a1:b4:4f:32:4e:5d:33:
         2f:7c:26:d7:03:d8:cc:5a:64:04:47:86:00:e2:93:b2:63:70:
         4c:90:02:10:5b:2c:72:38:94:df:06:37:0d:15:00:ce:ae:c8:
         20:20:38:71:dc:d9:f8:73:7e:29:82:09:1f:de:ad:3c:99:c5:
         95:53:2d:0b:95:f7:d2:bf:c0:7d:f3:5f:c8:3e:42:35:b0:1f:
         13:24:8a:d3:e7:7a:d5:d9:23:e1:1e:5b:5f:a8:66:5f:93:75:
         94:01:d6:b8:ea:26:a1:34:72:bd:26:2a:b1:64:19:d8:c2:64:
         2d:a5:1b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 13:45:26 2025 by rpki-client