This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/maIlT2DilxhpvXDvDKP5lewC5Jg.asa
File:                     maIlT2DilxhpvXDvDKP5lewC5Jg.asa (raw, json)
Hash identifier:          kPqttGLIZcEb1QIFFS840yNbuoYOd9uwdsD7XHdRl3w=
Subject key identifier:   99:A2:25:4F:60:E2:97:18:69:BD:70:EF:0C:A3:F9:95:EC:02:E4:98
Certificate issuer:       /CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Certificate serial:       019B60484D0ADCDF7A1EC9B9DDDBA71E20E3
Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/maIlT2DilxhpvXDvDKP5lewC5Jg.asa
Signing time:             Sat 27 Dec 2025 14:48:29 +0000
ASPA not before:          Sat 27 Dec 2025 14:48:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            62113
Providers:                AS: 205235
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Jan 2026 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:60:48:4d:0a:dc:df:7a:1e:c9:b9:dd:db:a7:1e:20:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b
        Validity
            Not Before: Dec 27 14:48:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=99a2254f60e2971869bd70ef0ca3f995ec02e498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f7:d3:c6:85:fd:7a:4f:48:54:bd:25:0d:84:
                    b1:cd:0e:23:d8:bd:bc:24:3f:c2:76:e3:86:1c:b2:
                    f8:5b:67:0c:53:84:6a:2b:cf:21:1e:51:4b:a8:10:
                    13:46:49:01:29:32:f5:3e:d1:4b:8c:f8:3a:0c:39:
                    9c:13:df:c0:ad:28:ef:0f:03:87:95:27:e3:27:25:
                    2a:97:9e:a1:93:4d:34:8a:fc:d4:ac:bc:3b:34:72:
                    99:50:ef:f2:10:89:b4:c8:0d:c1:c4:ab:3a:03:15:
                    99:cf:d5:0e:f2:e0:55:e4:a0:42:1a:4e:40:1e:88:
                    6b:f2:7a:65:ce:03:44:7f:ba:e5:17:aa:16:b0:55:
                    66:54:0b:5d:15:ff:07:f2:72:c9:39:18:36:40:32:
                    12:1a:f3:a2:22:14:cf:12:6e:19:35:06:f2:27:07:
                    ee:01:e2:93:e7:3f:33:64:8c:2d:e5:66:51:ab:19:
                    7f:26:df:63:88:ff:89:aa:3a:da:98:be:4b:e1:57:
                    b3:ea:cc:3c:64:f5:96:8c:d5:f1:9a:ce:e8:57:ec:
                    41:d8:d0:5b:69:45:44:d5:39:0d:32:3f:8b:0e:3f:
                    ce:f7:23:5b:62:a5:85:10:c6:f4:d0:9b:0e:b7:53:
                    e6:7d:54:2a:66:aa:dd:78:84:b6:b8:1a:a1:6b:f3:
                    ca:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A2:25:4F:60:E2:97:18:69:BD:70:EF:0C:A3:F9:95:EC:02:E4:98
            X509v3 Authority Key Identifier:
                keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/maIlT2DilxhpvXDvDKP5lewC5Jg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62113

    Signature Algorithm: sha256WithRSAEncryption
         8b:60:37:22:09:f7:2f:ca:3e:ee:e3:c0:cf:1d:36:2c:2c:77:
         4b:c0:63:bc:98:a0:75:57:b1:c9:f7:37:c4:dc:b8:10:37:c6:
         d2:67:d6:a3:ce:e4:c6:92:ae:eb:15:a4:21:d1:3c:c3:8c:7a:
         f0:ea:c9:10:49:ad:60:b0:f9:e1:c7:28:ce:70:a2:51:20:ee:
         05:a2:b4:ad:1f:2d:01:a7:95:3e:59:ca:f4:50:36:07:7f:c0:
         bc:93:2b:ae:20:31:d0:c4:9c:94:28:ba:24:5b:ed:f2:68:d8:
         ab:25:2d:f8:bf:cc:66:9a:c8:75:b8:37:c7:7a:eb:0a:84:0a:
         8b:7b:55:eb:f4:84:83:47:43:c8:b9:bf:03:0c:21:17:0c:08:
         0f:2a:aa:ac:69:66:d4:48:cb:2f:79:d1:7d:82:09:ad:14:70:
         ef:d6:45:70:31:22:7c:c4:6f:25:ab:a4:ad:8c:b7:34:6e:61:
         64:31:5e:c4:c0:c0:73:e1:ad:73:58:ef:4f:5d:27:05:5f:55:
         0e:7e:e8:ec:1e:1d:8f:fb:00:a0:90:e7:cb:5e:8c:09:7f:6c:
         e4:21:2a:8c:ec:0a:5e:62:5d:00:30:30:81:48:71:38:09:6f:
         36:f1:96:6d:d2:33:25:36:6f:3b:38:38:7a:52:22:5c:f9:9c:
         c4:2f:ba:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:38:24 2026 by rpki-client