This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/LgALOI5_I6jb53Ow_J_nnO3aXdQ.asa
File:                     LgALOI5_I6jb53Ow_J_nnO3aXdQ.asa (raw, json)
Hash identifier:          eU6LOPHHMrKuq0WuI7L7NZjJ1j5BudGRJxH8SR2SSVs=
Subject key identifier:   2E:00:0B:38:8E:7F:23:A8:DB:E7:73:B0:FC:9F:E7:9C:ED:DA:5D:D4
Certificate issuer:       /CN=70ba446b275f1fb0778242c0d63362a59aacf353
Certificate serial:       019B3B4DBF6C8A8DA964C521A8F752D343C5
Authority key identifier: 70:BA:44:6B:27:5F:1F:B0:77:82:42:C0:D6:33:62:A5:9A:AC:F3:53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cLpEaydfH7B3gkLA1jNipZqs81M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/LgALOI5_I6jb53Ow_J_nnO3aXdQ.asa
Signing time:             Sat 20 Dec 2025 10:28:29 +0000
ASPA not before:          Sat 20 Dec 2025 10:28:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            205340
Providers:                AS: 34984
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cLpEaydfH7B3gkLA1jNipZqs81M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 20:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3b:4d:bf:6c:8a:8d:a9:64:c5:21:a8:f7:52:d3:43:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70ba446b275f1fb0778242c0d63362a59aacf353
        Validity
            Not Before: Dec 20 10:28:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2e000b388e7f23a8dbe773b0fc9fe79cedda5dd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cf:f5:ec:6f:72:cd:21:3c:87:e0:08:38:ec:
                    8e:f8:1d:92:b9:f7:66:85:05:6c:c1:5f:1f:9f:32:
                    b3:c5:d0:47:36:07:b7:2d:de:bd:87:35:a2:73:98:
                    09:e0:92:d1:e3:7b:3b:d9:93:0f:73:62:ff:ff:44:
                    66:22:13:2f:45:cb:d7:b3:11:66:d0:44:64:fe:7e:
                    5b:58:55:88:0a:51:49:14:8f:27:74:ff:be:99:3f:
                    f8:96:e7:d0:d5:56:e9:71:dd:14:8f:c3:97:6c:62:
                    13:56:24:42:d7:4b:9f:a5:17:4f:9d:a0:cc:e0:ec:
                    dc:46:8e:3d:bb:2c:e0:41:22:3a:e1:ea:c6:55:2b:
                    75:30:a2:a1:f4:c3:d0:7e:bb:0e:57:cf:35:33:53:
                    47:29:64:06:8f:09:30:06:61:44:54:46:5e:f3:92:
                    eb:0e:89:13:69:e6:02:67:3e:24:76:66:c3:4e:22:
                    8a:62:f3:49:b3:15:31:fd:26:4e:ea:5b:b6:ca:a6:
                    c5:b2:ff:54:5a:e1:30:42:9a:48:13:b6:83:40:34:
                    03:81:80:a9:02:8e:80:0c:0f:85:9c:90:7b:03:25:
                    b8:3b:af:f7:e8:50:87:47:6a:d3:a8:aa:b8:06:22:
                    13:d9:d1:50:b7:dc:e4:c0:3a:98:0d:83:e5:4d:05:
                    d1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:00:0B:38:8E:7F:23:A8:DB:E7:73:B0:FC:9F:E7:9C:ED:DA:5D:D4
            X509v3 Authority Key Identifier:
                keyid:70:BA:44:6B:27:5F:1F:B0:77:82:42:C0:D6:33:62:A5:9A:AC:F3:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLpEaydfH7B3gkLA1jNipZqs81M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/LgALOI5_I6jb53Ow_J_nnO3aXdQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205340

    Signature Algorithm: sha256WithRSAEncryption
         c7:30:47:8a:08:01:41:8b:6e:75:49:21:2d:9f:1a:3e:39:9e:
         d4:d5:dd:d2:93:3e:af:e4:a2:80:74:3d:ab:3d:6c:00:21:86:
         5f:43:9d:fb:7e:13:bd:96:19:70:9d:f5:b3:32:65:33:72:90:
         aa:e7:e5:1e:c8:5c:98:5c:e0:f9:a0:d9:46:1c:1e:18:c4:c8:
         ce:50:df:7b:97:4e:a2:3c:3f:37:0e:82:38:2d:c3:fb:59:db:
         68:59:23:2a:b5:06:e2:23:91:38:7e:8c:57:06:3f:f6:ac:9d:
         99:b4:6a:b5:8a:8c:d9:3b:f4:0a:75:1e:38:fc:cc:c0:1c:2d:
         a9:53:6d:24:cf:3f:ae:ca:b6:96:db:d1:1b:5c:04:6f:f6:e6:
         f4:46:72:93:fa:79:90:82:e8:7d:75:8a:8e:3d:b2:6d:5e:b4:
         33:10:f2:f3:2e:3b:6b:ad:fa:34:18:a1:c1:88:0e:20:06:6d:
         66:e6:3d:45:20:04:0c:55:41:9d:7c:1e:74:e9:96:f0:ce:37:
         07:55:24:fb:bf:c0:de:36:c2:90:1f:62:27:2d:a9:e8:c5:0d:
         58:97:8a:ea:d0:cc:0f:e1:7e:63:54:bf:70:1b:8c:e8:85:2d:
         d4:92:f6:d8:be:e9:dd:72:94:3b:2d:fa:5e:85:b5:61:95:ee:
         08:f3:1e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 06:01:20 2025 by rpki-client