This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/LSYKZL6bL-kdhHy7Rekdkn-v5FM.asa
File:                     LSYKZL6bL-kdhHy7Rekdkn-v5FM.asa (raw, json)
Hash identifier:          +N5sGX/uOLbypJ4AbC7ZYsPhCOcK9Y9mwfmo1tGT698=
Subject key identifier:   2D:26:0A:64:BE:9B:2F:E9:1D:84:7C:BB:45:E9:1D:92:7F:AF:E4:53
Certificate issuer:       /CN=03c80157b56426ce3a5f43c89feb1d437c77cbce
Certificate serial:       019AEF494D81C1B3A88C8A34FC4675E85D3F
Authority key identifier: 03:C8:01:57:B5:64:26:CE:3A:5F:43:C8:9F:EB:1D:43:7C:77:CB:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8gBV7VkJs46X0PIn-sdQ3x3y84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/LSYKZL6bL-kdhHy7Rekdkn-v5FM.asa
Signing time:             Fri 05 Dec 2025 16:12:29 +0000
ASPA not before:          Fri 05 Dec 2025 16:12:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            203135
Providers:                AS: 43366
                          AS: 209390
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A8gBV7VkJs46X0PIn-sdQ3x3y84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:ef:49:4d:81:c1:b3:a8:8c:8a:34:fc:46:75:e8:5d:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03c80157b56426ce3a5f43c89feb1d437c77cbce
        Validity
            Not Before: Dec  5 16:12:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2d260a64be9b2fe91d847cbb45e91d927fafe453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:50:0c:1f:55:2f:8b:13:e8:84:e9:52:94:69:
                    c5:35:0c:d6:c7:ea:5c:25:b3:e5:31:97:29:b5:4e:
                    0a:a5:b0:de:d0:e2:16:3b:1e:d5:7f:57:68:b7:13:
                    39:c1:c6:64:17:6e:e9:70:c0:a5:41:52:c2:04:71:
                    11:f2:63:7a:0f:94:a3:e8:5d:57:c3:a9:ea:0a:be:
                    bf:5a:3e:26:85:b9:c3:53:e0:0c:f3:36:58:7e:3d:
                    01:90:7c:3c:a9:c7:48:0d:a8:6e:aa:ef:5c:7b:fa:
                    f7:3b:b2:e2:9a:61:d0:9a:11:84:79:66:02:13:a0:
                    db:1f:ce:0d:96:e3:46:d9:0e:2f:c4:03:e1:90:61:
                    58:ed:98:e3:77:6e:3c:06:8a:40:8a:c6:cd:ff:9b:
                    98:f4:95:6c:30:b2:f7:ea:40:ec:03:0e:ff:f7:9f:
                    87:fb:2c:f6:ad:8d:ad:28:b1:bf:4a:0b:cc:01:b9:
                    d6:60:60:2c:52:ae:fb:93:1b:fd:0b:12:87:98:28:
                    f7:80:44:47:5a:8a:e8:15:bd:fe:3f:de:32:4c:55:
                    5b:eb:c8:ef:16:6d:5a:0b:d4:e2:aa:d0:48:5b:4c:
                    e1:6b:f0:00:b7:82:11:e0:c9:41:c4:bf:aa:db:8c:
                    e3:88:9a:29:4f:b2:4b:b0:47:cd:db:f9:29:c2:c0:
                    6d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:26:0A:64:BE:9B:2F:E9:1D:84:7C:BB:45:E9:1D:92:7F:AF:E4:53
            X509v3 Authority Key Identifier:
                keyid:03:C8:01:57:B5:64:26:CE:3A:5F:43:C8:9F:EB:1D:43:7C:77:CB:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8gBV7VkJs46X0PIn-sdQ3x3y84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/LSYKZL6bL-kdhHy7Rekdkn-v5FM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203135

    Signature Algorithm: sha256WithRSAEncryption
         44:48:ce:05:32:36:c6:97:4e:4a:57:6d:29:ca:37:b6:9b:57:
         f1:4a:e5:f5:3f:0d:ee:9f:3f:e7:55:20:7b:33:93:bf:14:49:
         a6:82:f8:2c:df:92:c2:53:26:37:9c:96:5f:53:ed:00:1d:a8:
         ec:98:26:3d:c7:c6:f9:f2:24:98:81:d2:35:98:e5:a1:7a:78:
         5c:b1:5d:c1:79:47:30:68:33:87:09:9c:a6:6d:6f:1d:11:fe:
         ab:5c:3f:70:20:be:30:03:e8:d6:95:d1:87:b6:1e:9a:bb:9d:
         c3:81:c9:e3:39:e0:af:4f:94:78:98:30:6f:70:43:e0:82:e6:
         ce:12:1f:54:4c:42:f8:e5:c0:f3:1c:cd:70:f5:98:78:19:db:
         e4:62:35:2c:cf:68:8e:25:10:13:f2:72:26:51:4e:32:c7:9b:
         90:a9:e6:30:44:53:b2:0d:08:70:59:8d:e0:c0:7e:e3:27:98:
         f0:a4:12:d1:4c:a0:d4:07:ed:d8:af:5f:36:57:72:b0:8e:6a:
         3d:ea:66:5b:74:ae:ad:71:94:95:78:d8:c4:34:78:cf:16:5e:
         35:1e:8d:14:df:dd:0f:cd:3b:f7:72:87:94:da:d0:9b:8d:5a:
         c7:20:e6:69:e8:3b:5c:e7:9e:bc:d1:a9:1d:6e:b3:d0:19:e9:
         b6:21:6a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:11:31 2025 by rpki-client