This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/1-kDUYI7kuVmqQlf1mvxZtUR-Mpg.asa
File:                     1-kDUYI7kuVmqQlf1mvxZtUR-Mpg.asa (raw, json)
Hash identifier:          sXvSLo124AUM8vV6Hyy9bXbz/uQqmbFGdfAl+2Zq9Js=
Subject key identifier:   FA:40:D4:60:8E:E4:B9:59:AA:42:57:F5:9A:FC:59:B5:44:7E:32:98
Certificate issuer:       /CN=e6aaf798a06c15795c6fec70798398beb0f4d66e
Certificate serial:       019B3BB449DC4D96DB1845629040A9B6361F
Authority key identifier: E6:AA:F7:98:A0:6C:15:79:5C:6F:EC:70:79:83:98:BE:B0:F4:D6:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/1-kDUYI7kuVmqQlf1mvxZtUR-Mpg.asa
Signing time:             Sat 20 Dec 2025 12:20:29 +0000
ASPA not before:          Sat 20 Dec 2025 12:20:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            39531
Providers:                AS: 5483
                          AS: 6204
                          AS: 9002
                          AS: 12302
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 21:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3b:b4:49:dc:4d:96:db:18:45:62:90:40:a9:b6:36:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6aaf798a06c15795c6fec70798398beb0f4d66e
        Validity
            Not Before: Dec 20 12:20:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=fa40d4608ee4b959aa4257f59afc59b5447e3298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d3:81:1c:00:06:ab:b3:02:cb:ff:61:ee:83:
                    9c:e8:73:17:02:a4:a5:78:05:3c:82:58:a2:d1:a8:
                    91:80:69:26:0e:a5:72:d0:2b:03:c6:11:17:47:d8:
                    a3:c3:48:a3:d6:3e:f8:e7:d3:06:c4:73:a5:0e:40:
                    33:02:5c:a5:e4:a5:32:83:cd:5e:f9:73:44:f7:f1:
                    19:f9:c0:7d:da:aa:5a:05:33:42:fc:71:84:4d:c9:
                    01:bc:9b:85:86:f5:3e:80:be:79:ad:97:5e:82:2f:
                    70:4f:0d:7b:2b:36:fc:13:6c:4d:7f:59:6c:2f:b6:
                    c3:14:79:0c:8b:cc:40:e0:6a:cc:5e:c5:e2:7a:b3:
                    3a:ce:07:ad:96:4c:79:c8:a7:ec:88:1d:c2:77:07:
                    9a:e6:d9:21:b1:6b:62:a4:1a:53:bc:c9:da:5f:7b:
                    f3:e7:f1:43:c8:b5:a3:a3:2a:da:34:83:6c:f6:bf:
                    e9:86:57:5d:e3:df:ac:40:f2:e4:1e:c8:2f:3e:72:
                    70:d5:9e:93:84:8a:d5:13:ac:ee:c2:7d:3f:fc:ed:
                    fe:df:a5:e7:3a:be:0b:6e:35:de:a5:29:64:4e:5b:
                    8c:d9:f7:b1:35:c2:2a:f2:2b:b1:8f:1e:aa:d2:98:
                    bb:5f:2c:9b:d9:04:3a:86:fe:77:07:fa:22:1c:e8:
                    43:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:40:D4:60:8E:E4:B9:59:AA:42:57:F5:9A:FC:59:B5:44:7E:32:98
            X509v3 Authority Key Identifier:
                keyid:E6:AA:F7:98:A0:6C:15:79:5C:6F:EC:70:79:83:98:BE:B0:F4:D6:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/1-kDUYI7kuVmqQlf1mvxZtUR-Mpg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39531

    Signature Algorithm: sha256WithRSAEncryption
         a1:05:39:81:c4:f2:30:6e:dd:d5:0a:68:d2:c3:ba:d5:01:99:
         72:05:19:da:14:7a:33:2d:63:53:97:09:05:d2:0d:64:43:72:
         d5:f8:f8:e8:09:c6:b7:f1:e0:0a:fb:2e:59:03:79:34:00:c4:
         4f:73:76:e2:7e:bd:84:bd:72:17:6e:1b:4c:c9:81:db:f0:14:
         4d:c8:d5:b0:6f:1d:e7:51:21:3d:34:a3:79:9a:f6:c1:c9:4d:
         f0:28:5b:d0:d6:f7:ec:e2:0b:7d:85:98:16:04:e9:2d:3f:66:
         a0:21:38:73:b9:10:41:f8:8b:da:2d:a1:f7:4b:aa:75:af:61:
         6a:02:65:18:3f:21:ca:60:48:64:2d:e9:2c:ef:27:2e:e9:11:
         7e:bd:2b:b8:24:33:69:ec:1b:5f:56:e7:31:e3:6f:88:29:66:
         2d:c3:1a:8d:ba:d7:23:2a:43:0a:90:53:5a:a1:35:fa:2c:22:
         e9:fb:ae:48:57:18:60:44:32:cc:c0:f8:74:7a:b0:6c:f6:9f:
         52:77:3e:4e:81:fa:d9:83:c0:ba:ef:b2:7b:54:b1:ab:c9:55:
         e6:60:84:92:3e:92:08:9a:7f:6d:fb:c3:d1:4d:ab:24:37:0d:
         05:8a:f9:e2:1d:8b:b3:f7:8c:f4:14:54:d4:b1:c1:1b:7d:7f:
         e6:1e:4f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 06:41:42 2025 by rpki-client