This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/FRuPa3TQLmOFKS43Th1eCNTwaoI.asa
File:                     FRuPa3TQLmOFKS43Th1eCNTwaoI.asa (raw, json)
Hash identifier:          27T9GCi2bfzmEH7qtY+uT56lMZiqysQt1tGrtXQaUjY=
Subject key identifier:   15:1B:8F:6B:74:D0:2E:63:85:29:2E:37:4E:1D:5E:08:D4:F0:6A:82
Certificate issuer:       /CN=b12532e29f22fa231dc6fc8e530efb1c76119e0a
Certificate serial:       019B285138200870B77C9EFF078CB79A4E1E
Authority key identifier: B1:25:32:E2:9F:22:FA:23:1D:C6:FC:8E:53:0E:FB:1C:76:11:9E:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/FRuPa3TQLmOFKS43Th1eCNTwaoI.asa
Signing time:             Tue 16 Dec 2025 17:59:29 +0000
ASPA not before:          Tue 16 Dec 2025 17:59:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            212001
Providers:                AS: 6939
                          AS: 45735
                          AS: 47311
                          AS: 58495
                          AS: 152368
                          AS: 152394
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 11:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:28:51:38:20:08:70:b7:7c:9e:ff:07:8c:b7:9a:4e:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b12532e29f22fa231dc6fc8e530efb1c76119e0a
        Validity
            Not Before: Dec 16 17:59:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=151b8f6b74d02e6385292e374e1d5e08d4f06a82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8a:f9:8b:8a:9d:e5:ff:c2:29:5c:24:a3:ed:
                    bc:fa:ca:0a:23:be:3a:19:83:d6:78:fd:d4:f9:0e:
                    dd:5a:05:94:d3:40:0e:15:d3:b7:0b:05:a1:99:60:
                    59:6a:ca:e5:f8:1d:ba:21:83:18:13:50:14:6d:f1:
                    61:7c:d6:55:fd:5d:43:bc:f0:e7:72:6c:33:b5:ba:
                    ba:f7:52:3a:6b:ac:45:41:71:e3:8d:ba:a7:a3:50:
                    08:8b:7d:6b:17:02:cb:34:0a:fc:18:c9:24:a4:5b:
                    53:b2:21:0b:ad:18:78:26:2a:89:a6:74:ba:06:b8:
                    fb:e8:ab:2b:22:15:21:c5:01:6a:32:92:83:c6:18:
                    9d:1d:f6:25:3d:4a:24:99:06:b0:f8:f9:2c:95:3a:
                    9b:05:df:92:97:fa:89:d2:32:4f:bd:7f:78:84:2b:
                    81:7f:80:40:48:d1:43:cf:3d:bd:b3:47:a6:02:98:
                    bf:ee:10:3f:26:55:7d:9a:1a:dc:cf:2c:8c:b5:57:
                    44:56:2a:2e:16:98:68:e4:3c:e9:78:96:23:1f:15:
                    2c:4c:d1:e3:96:00:28:80:b1:f4:f4:7e:cb:14:6b:
                    0a:3c:b8:41:b7:85:ab:ee:78:27:9d:5e:f0:bf:e3:
                    11:b2:5c:41:47:f8:1b:ca:e0:23:17:38:46:f7:c6:
                    d2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:1B:8F:6B:74:D0:2E:63:85:29:2E:37:4E:1D:5E:08:D4:F0:6A:82
            X509v3 Authority Key Identifier:
                keyid:B1:25:32:E2:9F:22:FA:23:1D:C6:FC:8E:53:0E:FB:1C:76:11:9E:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/FRuPa3TQLmOFKS43Th1eCNTwaoI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212001

    Signature Algorithm: sha256WithRSAEncryption
         01:3f:01:5f:76:86:1d:ff:d3:91:bb:a2:2d:e4:77:1e:b8:bc:
         bc:3a:bb:1d:2b:fc:03:3b:1a:64:9f:aa:ee:d9:0f:6d:01:9f:
         dc:dc:7a:a9:16:23:28:6f:b0:1b:c6:bf:0c:af:4d:c1:90:54:
         ab:56:90:50:15:05:b1:1d:ef:5c:01:91:a4:c2:d9:47:d4:a4:
         6d:33:b2:75:1b:97:67:1c:37:d8:fb:a7:e4:aa:95:3c:20:9f:
         09:6e:25:4f:1a:a2:d8:08:26:97:db:08:3e:4b:c5:a3:15:1e:
         af:76:54:b4:e1:83:60:3a:29:d6:ac:01:d8:23:02:9c:c7:84:
         e3:11:27:f7:46:f8:62:27:ee:2b:81:7e:13:c2:99:d7:3a:65:
         aa:d4:51:36:96:19:26:83:ec:bc:25:b0:c3:b3:0f:e8:8c:1a:
         31:29:08:a9:c0:22:1e:13:2b:68:e7:35:77:64:13:a9:c5:dd:
         09:89:9e:e0:49:ae:d3:8f:8c:85:05:8b:a6:0e:57:88:9a:64:
         d9:a2:30:98:1d:59:bf:43:6b:d8:46:7f:6b:6a:ff:32:4f:75:
         b0:2a:9d:09:d0:83:79:af:96:61:fb:9a:40:c2:e9:7d:56:ce:
         9c:56:97:92:10:bc:8b:92:34:0c:25:fc:48:5c:6a:f9:4f:ab:
         b5:9f:69:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:42:46 2025 by rpki-client