This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/ChXWstjRWA_OODNRO9MDbRfgOQU.asa
File:                     ChXWstjRWA_OODNRO9MDbRfgOQU.asa (raw, json)
Hash identifier:          +k73MShgqLwwtEUsqO+3IrwBNnY2nL4l+Ep35pG4oXI=
Subject key identifier:   0A:15:D6:B2:D8:D1:58:0F:CE:38:33:51:3B:D3:03:6D:17:E0:39:05
Certificate issuer:       /CN=574e25a16e5d3aa110ac5e8335f88f63e54b42f1
Certificate serial:       019B6A3CF19D420F81D384579F2E750FF994
Authority key identifier: 57:4E:25:A1:6E:5D:3A:A1:10:AC:5E:83:35:F8:8F:63:E5:4B:42:F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/ChXWstjRWA_OODNRO9MDbRfgOQU.asa
Signing time:             Mon 29 Dec 2025 13:12:17 +0000
ASPA not before:          Mon 29 Dec 2025 13:12:17 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            202214
Providers:                AS: 29075
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Jan 2026 21:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:6a:3c:f1:9d:42:0f:81:d3:84:57:9f:2e:75:0f:f9:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=574e25a16e5d3aa110ac5e8335f88f63e54b42f1
        Validity
            Not Before: Dec 29 13:12:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0a15d6b2d8d1580fce3833513bd3036d17e03905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0f:30:5e:67:bc:31:c8:68:aa:a7:d9:8d:49:
                    62:c8:fc:6e:ec:09:e2:fa:4e:20:42:a5:48:a2:54:
                    eb:90:a7:86:b5:6c:9e:69:14:70:43:9a:50:f9:be:
                    f6:23:fd:bc:cf:06:a5:6e:84:17:b1:ff:43:22:43:
                    4e:09:a4:84:09:ae:43:d5:cb:df:d8:5e:f5:c8:49:
                    f8:de:f7:ac:ce:a6:e8:b5:f5:76:82:b2:41:9b:15:
                    83:fd:e3:b4:ed:b2:19:57:51:e9:a4:15:48:6b:ad:
                    e2:55:9c:b0:f4:e7:47:3f:61:bf:7a:d7:0b:35:0d:
                    0a:fb:f0:70:d9:b5:55:9b:0c:a7:12:a0:42:91:4e:
                    67:1b:1d:65:a5:5c:29:71:cd:1a:5b:20:4f:44:a3:
                    10:75:f7:46:28:ba:61:6e:7a:c9:4c:6f:b3:c8:ee:
                    76:3e:72:c6:17:c6:eb:62:d1:4c:63:a3:f0:49:67:
                    e9:c3:fc:1a:61:02:9b:48:bf:06:aa:f2:3c:0e:81:
                    83:3b:79:1d:e3:14:27:50:62:56:96:e9:b2:00:0c:
                    83:48:69:0d:e8:62:19:6a:c7:8c:bc:20:5a:05:c3:
                    d3:7d:de:93:bc:da:c9:5f:55:98:ea:06:cc:b1:50:
                    2f:cf:11:89:f3:e6:58:3c:c3:38:40:43:d0:3e:4b:
                    c8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:15:D6:B2:D8:D1:58:0F:CE:38:33:51:3B:D3:03:6D:17:E0:39:05
            X509v3 Authority Key Identifier:
                keyid:57:4E:25:A1:6E:5D:3A:A1:10:AC:5E:83:35:F8:8F:63:E5:4B:42:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/ChXWstjRWA_OODNRO9MDbRfgOQU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202214

    Signature Algorithm: sha256WithRSAEncryption
         11:c9:51:db:0f:51:e3:83:64:44:e2:9f:d7:71:18:2c:7f:7c:
         2a:31:32:ff:58:e7:1d:88:39:60:6f:b5:24:d7:b8:11:1a:de:
         51:82:f0:d4:e8:6d:10:04:df:42:55:4a:21:6d:ff:f0:e5:72:
         5a:97:ea:0b:1f:43:59:af:10:a0:9e:2b:40:2e:fe:a6:e6:42:
         3a:bb:80:d0:1c:94:d5:ad:1b:dd:6d:fd:09:13:4b:95:9b:ee:
         91:d5:48:2e:f9:6b:10:e2:1d:82:ad:e4:4c:e2:37:ba:31:cf:
         22:19:3c:db:c5:57:c4:ff:d1:4a:94:c8:35:5b:b2:ff:32:29:
         36:07:46:67:42:45:03:0f:3e:d6:73:35:45:a0:17:5c:99:f2:
         52:fa:b3:1a:14:8b:e4:c5:68:f4:4e:12:bf:bb:65:9f:0d:79:
         14:b9:a8:7e:5e:a6:26:69:ef:50:a6:c2:38:9e:5f:04:2f:32:
         59:96:5b:2d:55:42:80:57:69:1a:f6:3d:f4:71:74:8b:b8:5f:
         62:9b:eb:3c:77:4d:53:92:56:0a:5c:46:e7:fc:24:1a:be:51:
         a4:21:34:6d:ba:f9:db:37:f0:b4:b4:d3:d5:d1:b5:54:7e:ce:
         63:5e:61:22:66:31:0c:21:30:2b:f2:70:c1:13:24:8c:33:9f:
         ce:31:0f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 04:00:43 2026 by rpki-client