This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/YVpYa83TD7oGn7X_LXUUtSI-ptg.asa
File:                     YVpYa83TD7oGn7X_LXUUtSI-ptg.asa (raw, json)
Hash identifier:          O3vV+GOncjyLoTdN6mJYitrleGSMhll91b2ImouHYPs=
Subject key identifier:   61:5A:58:6B:CD:D3:0F:BA:06:9F:B5:FF:2D:75:14:B5:22:3E:A6:D8
Certificate issuer:       /CN=2d2f9339fbb8cb33c522751c530f3a20a753547c
Certificate serial:       019BD5BB514AB8D2AB8E1D39AEF0001B8D9B
Authority key identifier: 2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/YVpYa83TD7oGn7X_LXUUtSI-ptg.asa
Signing time:             Mon 19 Jan 2026 10:09:41 +0000
ASPA not before:          Mon 19 Jan 2026 10:09:41 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200449
Providers:                AS: 174
                          AS: 1299
                          AS: 2914
                          AS: 3356
                          AS: 3491
                          AS: 5511
                          AS: 6453
                          AS: 8966
                          AS: 9002
                          AS: 9583
                          AS: 197068
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 19:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d5:bb:51:4a:b8:d2:ab:8e:1d:39:ae:f0:00:1b:8d:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2f9339fbb8cb33c522751c530f3a20a753547c
        Validity
            Not Before: Jan 19 10:09:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=615a586bcdd30fba069fb5ff2d7514b5223ea6d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:99:78:c0:be:6d:68:28:85:d4:7e:ad:9d:56:
                    71:62:6b:7b:6f:e7:50:ae:77:92:cc:e8:1b:7d:66:
                    4b:e0:5e:0d:99:35:4b:91:06:11:08:15:92:56:19:
                    b1:8a:7c:43:dd:f0:3d:3b:b4:64:ff:26:8c:6f:9b:
                    91:3c:40:77:a2:24:df:4e:3a:1d:e0:0c:be:1b:c2:
                    f4:23:c7:26:bd:31:0c:8b:6f:21:ba:08:96:87:03:
                    25:fe:b9:a0:ff:de:de:7d:60:67:7d:7d:cd:88:a9:
                    29:2d:af:25:f6:a3:4f:48:f7:dd:12:be:d9:53:9b:
                    4e:c2:c0:ce:0d:ef:dc:a0:a2:e4:bf:91:9d:52:81:
                    96:be:f9:69:af:78:a9:92:b3:ce:ce:67:9f:35:b0:
                    b6:64:88:f6:37:85:21:61:69:d2:d6:44:0f:a8:1a:
                    92:e9:be:8c:28:46:72:5f:41:08:25:f2:73:80:77:
                    22:fe:55:dd:fa:e7:09:cc:c8:21:a5:e5:41:bf:35:
                    86:4c:11:18:9e:ec:7b:74:cd:ec:03:84:f8:42:f7:
                    dc:9e:8c:46:be:ab:bd:2f:e6:d2:b2:45:c9:d6:b7:
                    ba:46:b1:28:14:9d:f4:32:b6:9d:48:03:35:83:be:
                    41:90:25:e0:40:60:d5:09:79:99:95:7a:19:89:04:
                    f9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:5A:58:6B:CD:D3:0F:BA:06:9F:B5:FF:2D:75:14:B5:22:3E:A6:D8
            X509v3 Authority Key Identifier:
                keyid:2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/YVpYa83TD7oGn7X_LXUUtSI-ptg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200449

    Signature Algorithm: sha256WithRSAEncryption
         21:bc:ab:21:c1:4f:a2:5e:b0:72:0d:f4:a4:d5:7f:26:a9:97:
         1e:92:e3:25:36:5b:80:f0:82:79:ea:bc:bf:16:cf:1d:08:cd:
         2d:3b:16:fd:1b:65:c3:02:e1:9c:ac:a7:39:0f:69:f9:86:4b:
         04:1b:d6:96:77:f1:72:a1:87:37:22:dc:c6:76:14:49:44:a2:
         e8:21:f7:1c:7f:45:4e:53:a3:38:17:37:45:c6:9c:d9:67:a9:
         b3:01:82:4e:32:ae:af:81:54:8f:26:92:fa:dc:1c:00:40:74:
         0b:f1:5b:e2:53:81:c8:94:9c:0a:be:6f:3f:f8:2b:14:80:2b:
         87:61:95:26:29:a5:02:89:80:50:4b:b9:56:69:bd:36:c1:4a:
         8f:87:e6:db:d9:fd:de:2c:29:c2:50:e0:3e:8f:34:17:54:75:
         bb:be:09:55:0e:5f:49:ad:6c:d0:b2:f2:61:c9:2e:4a:fe:bf:
         1c:20:8d:0b:12:9a:c1:77:bb:0d:0d:5b:ee:9b:53:70:d5:6b:
         cd:9e:53:ff:7d:3e:98:92:65:cf:45:cb:21:f1:e8:05:c0:a5:
         63:6f:5d:4c:de:b5:45:27:9e:62:57:4e:70:1a:81:ce:e4:4d:
         06:79:45:cd:3d:9d:8f:2d:67:19:a6:77:de:24:16:1e:47:87:
         f6:39:2e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:19:28 2026 by rpki-client