This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/jyhNKA-sqNdbKhKjDCM2oFmxAKA.asa
File:                     jyhNKA-sqNdbKhKjDCM2oFmxAKA.asa (raw, json)
Hash identifier:          +kK89jyXB9T4Lltl2vWeU7yjctVLp1sfe0s6KqTiyYE=
Subject key identifier:   8F:28:4D:28:0F:AC:A8:D7:5B:2A:12:A3:0C:23:36:A0:59:B1:00:A0
Certificate issuer:       /CN=ca001b948595bce24913f811aff71e3cce45d656
Certificate serial:       019B2C227468A54C5A9364720B59FB8B34DA
Authority key identifier: CA:00:1B:94:85:95:BC:E2:49:13:F8:11:AF:F7:1E:3C:CE:45:D6:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/jyhNKA-sqNdbKhKjDCM2oFmxAKA.asa
Signing time:             Wed 17 Dec 2025 11:46:53 +0000
ASPA not before:          Wed 17 Dec 2025 11:46:53 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            198524
Providers:                AS: 174
                          AS: 6939
                          AS: 12778
                          AS: 21283
                          AS: 44306
                          AS: 56635
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2c:22:74:68:a5:4c:5a:93:64:72:0b:59:fb:8b:34:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca001b948595bce24913f811aff71e3cce45d656
        Validity
            Not Before: Dec 17 11:46:53 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8f284d280faca8d75b2a12a30c2336a059b100a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a6:f5:ac:17:c1:8e:8f:7d:ec:b8:db:82:6d:
                    77:db:e9:b5:ea:65:36:63:d4:dd:0c:dc:a2:77:d9:
                    79:20:4b:28:b5:7a:85:0a:08:af:d6:c8:4e:a9:55:
                    82:25:1b:37:88:6e:e5:c7:9e:64:71:7f:12:5a:1a:
                    83:93:b0:d3:c6:e3:a6:c0:c8:64:bf:42:52:52:6d:
                    34:52:a1:72:08:20:6d:9b:6b:e8:09:b4:d1:5f:c7:
                    a8:63:11:ed:25:cf:79:01:69:4c:a2:d2:49:c7:21:
                    46:17:aa:fb:fa:78:ac:81:c6:64:e0:bf:a3:c2:40:
                    3c:e6:18:b5:5a:b6:b7:4a:94:f1:a5:50:ff:75:c8:
                    37:94:6a:fb:26:cf:b0:ac:ce:43:00:be:13:8e:62:
                    28:ed:0e:fb:46:dc:cb:2c:b1:f0:16:fe:92:46:41:
                    2f:4a:d1:50:ab:b8:58:b5:f7:1b:77:79:12:17:a7:
                    25:40:97:49:87:0f:d2:6c:f2:54:7f:06:08:12:be:
                    26:f0:27:e2:42:61:f7:38:a9:4b:1b:b4:c3:73:d5:
                    01:7d:80:b2:9c:b1:b6:7c:00:a4:54:43:f0:e5:88:
                    2f:ea:dd:f5:f4:88:43:05:04:bd:f7:53:34:0c:a0:
                    ed:75:2c:9f:0e:45:aa:41:19:7f:7c:17:7a:db:c6:
                    de:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:28:4D:28:0F:AC:A8:D7:5B:2A:12:A3:0C:23:36:A0:59:B1:00:A0
            X509v3 Authority Key Identifier:
                keyid:CA:00:1B:94:85:95:BC:E2:49:13:F8:11:AF:F7:1E:3C:CE:45:D6:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/jyhNKA-sqNdbKhKjDCM2oFmxAKA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198524

    Signature Algorithm: sha256WithRSAEncryption
         32:ad:5a:c8:6e:9b:f8:15:99:f7:e7:35:3e:c0:61:1c:0c:91:
         26:cb:c2:0b:1b:7d:37:37:d0:f7:2e:64:f6:da:82:34:d5:06:
         e0:61:b1:68:b3:15:36:ac:be:af:46:d7:15:c3:36:8f:29:bf:
         78:3b:15:c6:65:f2:29:bd:86:4a:58:14:3e:79:fc:ec:e0:15:
         8f:10:9a:73:e7:8c:cb:4f:d1:a7:2c:84:4d:eb:2e:23:31:1c:
         92:dd:f9:36:e9:0a:0a:5c:2d:e8:90:a4:3b:5d:2d:28:eb:8e:
         d6:94:8d:df:ec:33:36:f7:7f:b6:4a:63:0a:b5:b2:ff:d7:1e:
         84:28:30:ba:01:03:c5:48:7b:04:e2:48:20:d4:31:b7:be:b7:
         78:7a:fb:90:72:7f:d3:56:10:09:d9:90:20:29:e5:7c:0a:e9:
         14:6a:f1:c5:92:43:c2:70:4d:23:bb:f7:be:8f:7d:ed:12:5b:
         d8:6d:5b:32:b9:57:b1:ea:9c:11:20:de:aa:32:b4:2b:b3:b6:
         b2:fa:d7:86:4c:ae:23:0e:64:b0:0b:1e:ec:70:e1:19:94:ff:
         55:72:38:20:6c:e1:05:f4:74:46:9b:d4:b2:49:5a:b9:aa:91:
         f2:a8:cc:b3:c1:37:b9:58:95:ee:27:7c:c7:d8:02:e8:9e:c3:
         27:06:ba:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:17:54 2025 by rpki-client