This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/KrMAKHUoQ7DCojxr2JV7WevtfuU.asa
File:                     KrMAKHUoQ7DCojxr2JV7WevtfuU.asa (raw, json)
Hash identifier:          6gOFRqSNT9IfTn2CyMN0Yl8x2WVaFnGFx6aC2n5aVLI=
Subject key identifier:   2A:B3:00:28:75:28:43:B0:C2:A2:3C:6B:D8:95:7B:59:EB:ED:7E:E5
Certificate issuer:       /CN=ed82f323359382d801ed0b93ec1bfa030de63622
Certificate serial:       019B2C4B779D7E638C0FA5F47A9A73CF2560
Authority key identifier: ED:82:F3:23:35:93:82:D8:01:ED:0B:93:EC:1B:FA:03:0D:E6:36:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/KrMAKHUoQ7DCojxr2JV7WevtfuU.asa
Signing time:             Wed 17 Dec 2025 12:31:41 +0000
ASPA not before:          Wed 17 Dec 2025 12:31:41 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            211366
Providers:                AS: 9049
                          AS: 62142
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 19:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2c:4b:77:9d:7e:63:8c:0f:a5:f4:7a:9a:73:cf:25:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed82f323359382d801ed0b93ec1bfa030de63622
        Validity
            Not Before: Dec 17 12:31:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2ab30028752843b0c2a23c6bd8957b59ebed7ee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2b:8e:f8:86:3a:c9:d8:4b:21:be:da:97:0a:
                    e1:96:22:8f:2a:d6:06:3b:9d:d1:e7:00:a9:7f:94:
                    8e:e0:5f:ec:b9:01:7b:6f:2f:3a:4c:f9:63:3d:31:
                    8c:e4:2f:5d:db:70:2c:7a:c5:73:05:8b:1f:b5:c5:
                    65:18:03:1c:f1:67:e9:ab:15:48:a2:ca:52:7c:de:
                    84:95:a7:43:d6:a2:51:08:39:f8:b0:63:b0:fc:e3:
                    ad:bc:37:af:91:71:e3:1c:57:71:2c:46:12:11:21:
                    06:41:57:65:68:55:20:88:42:1d:c6:db:ad:14:55:
                    11:8b:1b:23:15:b6:72:f6:fc:9d:15:bd:05:37:51:
                    42:84:19:89:7f:c2:9a:47:3c:44:f0:52:1a:76:dd:
                    27:4a:46:5e:29:d0:68:05:c6:25:e3:0c:57:4b:e5:
                    73:4f:d3:e3:6c:e5:9f:55:6d:ee:b1:ef:17:07:8c:
                    8b:29:b2:18:57:0c:b9:27:2b:36:f1:7a:29:d1:b2:
                    b9:b7:2a:a9:56:dc:c6:2a:19:64:99:c2:0e:a4:40:
                    0f:b9:85:ec:4f:e5:37:4e:fb:f9:54:88:a9:d3:b7:
                    f9:55:5d:09:75:18:2c:3f:b7:5c:8f:8f:da:ad:25:
                    51:1c:8c:16:b3:0f:d1:86:a0:cb:99:c4:48:07:d5:
                    47:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:B3:00:28:75:28:43:B0:C2:A2:3C:6B:D8:95:7B:59:EB:ED:7E:E5
            X509v3 Authority Key Identifier:
                keyid:ED:82:F3:23:35:93:82:D8:01:ED:0B:93:EC:1B:FA:03:0D:E6:36:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/KrMAKHUoQ7DCojxr2JV7WevtfuU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211366

    Signature Algorithm: sha256WithRSAEncryption
         bd:e3:ba:51:eb:61:b7:a3:3f:2e:0f:e0:d8:a2:96:1b:2c:ee:
         81:7d:e7:e5:43:2f:e9:92:02:02:e0:13:1a:16:94:d4:a2:be:
         36:70:96:7b:ed:66:db:04:19:ca:a6:cf:70:6e:ec:a3:25:18:
         d6:53:b6:b9:ae:99:de:01:0f:50:a5:8d:46:3d:f1:61:bf:2e:
         7c:71:42:65:94:b2:b2:ff:ad:ed:05:ac:b7:48:6a:bf:fb:79:
         69:31:91:45:5b:c1:db:52:09:5f:34:a1:4a:f2:74:16:85:1e:
         f9:10:74:f5:54:9b:c8:d3:73:cd:80:4b:0d:cf:da:e6:a2:4c:
         9b:a6:9c:f5:9b:e1:da:b4:7f:82:d4:47:6a:d7:c6:45:d7:5f:
         83:14:8e:b3:fb:4e:df:f1:f2:eb:68:31:e8:67:43:94:86:db:
         87:b4:db:f8:26:4a:cd:9c:c4:76:db:81:81:6e:f8:bc:ee:2a:
         1b:d6:2d:18:99:aa:49:59:fd:89:25:f6:72:30:4b:3f:17:49:
         9a:3e:48:75:31:6f:76:40:f9:89:44:d7:6b:9b:64:7f:61:d6:
         8b:fc:8d:f5:fe:3e:fd:48:e2:b4:7d:8e:a2:d8:63:a1:19:be:
         bb:7a:58:ce:41:08:bc:fe:18:a5:5c:e6:7c:c5:7d:96:e8:05:
         9d:dd:6a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 03:47:10 2025 by rpki-client