This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/YpBXBhkoKA6B8vn-SSW0uagBSZg.asa
File:                     YpBXBhkoKA6B8vn-SSW0uagBSZg.asa (raw, json)
Hash identifier:          6NDwm9dk0C3RTxSSU90zrNxDOX6XaM6xxTgSgc87I9Q=
Subject key identifier:   62:90:57:06:19:28:28:0E:81:F2:F9:FE:49:25:B4:B9:A8:01:49:98
Certificate issuer:       /CN=aa27f512b0a10265df2b346f143a645c382742be
Certificate serial:       019B2BB531524A217493E49E24F51602E373
Authority key identifier: AA:27:F5:12:B0:A1:02:65:DF:2B:34:6F:14:3A:64:5C:38:27:42:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qif1ErChAmXfKzRvFDpkXDgnQr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/YpBXBhkoKA6B8vn-SSW0uagBSZg.asa
Signing time:             Wed 17 Dec 2025 09:47:33 +0000
ASPA not before:          Wed 17 Dec 2025 09:47:33 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            198160
Providers:                AS: 51202
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qif1ErChAmXfKzRvFDpkXDgnQr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 12:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2b:b5:31:52:4a:21:74:93:e4:9e:24:f5:16:02:e3:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa27f512b0a10265df2b346f143a645c382742be
        Validity
            Not Before: Dec 17 09:47:33 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=629057061928280e81f2f9fe4925b4b9a8014998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e3:66:ab:80:b8:ab:c0:ec:a3:d2:9c:b9:ce:
                    ab:7f:f6:85:4e:78:e4:74:58:6a:3e:0b:2c:32:35:
                    66:bf:cd:c6:2e:72:d1:56:da:7c:69:ea:fe:62:d6:
                    24:4d:18:6b:05:ac:ee:20:ce:23:41:0f:ea:53:e7:
                    6f:ff:b2:5a:9b:8f:2a:48:52:21:9f:30:56:5a:52:
                    54:96:24:ed:fa:5d:27:c0:0c:9b:c3:d1:78:d2:f9:
                    90:ac:b2:3e:61:69:f4:a8:48:df:e9:4d:86:2f:02:
                    62:47:8a:40:78:e4:f0:37:6f:12:4b:81:f4:2b:13:
                    0a:26:39:b6:19:5c:e8:44:91:1f:29:f3:d8:36:ea:
                    d9:33:25:b5:5f:1f:bd:a3:c8:ca:58:3d:19:09:7a:
                    a5:cd:8a:b9:d0:35:41:12:f7:db:64:cc:4e:ae:44:
                    d4:a7:51:8f:3b:f2:8a:2c:9c:1f:69:85:fe:94:1a:
                    f5:38:ae:c7:7c:3a:b9:24:d7:a5:06:8f:fb:b4:f5:
                    7e:c0:7b:8c:72:27:08:9c:79:50:24:2b:23:93:0a:
                    d7:54:f7:af:69:d9:7b:4e:17:e8:78:f8:78:c0:50:
                    61:e7:53:b3:6e:ee:47:bf:64:69:67:86:ef:71:13:
                    f9:d6:40:cb:30:d9:f4:6b:52:24:ad:89:8e:55:78:
                    d1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:90:57:06:19:28:28:0E:81:F2:F9:FE:49:25:B4:B9:A8:01:49:98
            X509v3 Authority Key Identifier:
                keyid:AA:27:F5:12:B0:A1:02:65:DF:2B:34:6F:14:3A:64:5C:38:27:42:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qif1ErChAmXfKzRvFDpkXDgnQr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/YpBXBhkoKA6B8vn-SSW0uagBSZg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198160

    Signature Algorithm: sha256WithRSAEncryption
         4f:7c:0f:38:f6:9b:4b:df:e6:05:8d:f6:7b:93:11:e4:30:a7:
         fd:05:a1:3b:a3:b8:33:50:63:57:5f:27:17:30:64:55:75:3b:
         6c:f1:8c:74:f8:7f:b5:ef:ec:31:9c:67:d5:62:ed:4d:e8:30:
         24:bf:ac:ac:3d:4e:01:f5:ca:03:28:ab:f5:c4:d3:bd:29:cb:
         27:63:50:a9:e7:e6:1e:c0:67:83:3c:c2:09:8f:1b:23:28:1b:
         12:c7:6d:80:ad:54:5f:45:51:06:d4:4f:2b:72:17:3c:6f:f6:
         54:51:59:12:7e:32:ec:00:cc:cb:30:41:e7:c1:40:90:9f:ec:
         b1:40:46:66:95:b5:ca:b5:93:32:d6:2f:29:51:fe:d3:7a:65:
         31:9a:66:4a:cc:13:3a:c2:93:66:a8:a5:72:20:30:8e:75:6e:
         23:2f:9b:94:d0:02:16:47:96:83:67:c2:74:ec:16:08:62:a4:
         c4:de:a9:16:b3:df:98:2b:99:aa:dc:af:72:3a:90:2e:b0:67:
         01:6c:f1:24:f8:b6:b3:c2:2c:26:87:12:25:e3:91:11:39:81:
         37:6c:9c:8b:f6:7f:89:23:ce:19:c5:de:a9:90:42:2a:aa:f8:
         ce:09:86:77:57:78:94:f2:aa:92:a6:e5:c9:7e:dd:42:17:bf:
         e6:46:6e:2c
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZsrtTFSSiF0k+SeJPUWAuNzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMjdmNTEyYjBhMTAyNjVkZjJiMzQ2ZjE0M2E2NDVjMzgy
NzQyYmUwHhcNMjUxMjE3MDk0NzMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjkwNTcwNjE5MjgyODBlODFmMmY5ZmU0OTI1YjRiOWE4MDE0OTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+Nmq4C4q8Dso9Kcuc6rf/aFTnjk
dFhqPgssMjVmv83GLnLRVtp8aer+YtYkTRhrBazuIM4jQQ/qU+dv/7Jam48qSFIh
nzBWWlJUliTt+l0nwAybw9F40vmQrLI+YWn0qEjf6U2GLwJiR4pAeOTwN28SS4H0
KxMKJjm2GVzoRJEfKfPYNurZMyW1Xx+9o8jKWD0ZCXqlzYq50DVBEvfbZMxOrkTU
p1GPO/KKLJwfaYX+lBr1OK7HfDq5JNelBo/7tPV+wHuMcicInHlQJCsjkwrXVPev
adl7ThfoePh4wFBh51Ozbu5Hv2RpZ4bvcRP51kDLMNn0a1IkrYmOVXjRxQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFGKQVwYZKCgOgfL5/kkltLmoAUmYMB8GA1UdIwQY
MBaAFKon9RKwoQJl3ys0bxQ6ZFw4J0K+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWlmMUVyQ2hBbVhmS3pSdkZEcGtYRGduUXI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9kODM0NWQtNDI2ZS00OWMzLWIwYjAt
ZmI3ZmJiMWM1OGZlLzEvWXBCWEJoa29LQTZCOHZuLVNTVzB1YWdCU1pnLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9kODM0NWQtNDI2ZS00OWMzLWIwYjAtZmI3ZmJiMWM1OGZl
LzEvcWlmMUVyQ2hBbVhmS3pSdkZEcGtYRGduUXI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMGEDANBgkqhkiG
9w0BAQsFAAOCAQEAT3wPOPabS9/mBY32e5MR5DCn/QWhO6O4M1BjV18nFzBkVXU7
bPGMdPh/te/sMZxn1WLtTegwJL+srD1OAfXKAyir9cTTvSnLJ2NQqefmHsBngzzC
CY8bIygbEsdtgK1UX0VRBtRPK3IXPG/2VFFZEn4y7ADMyzBB58FAkJ/ssUBGZpW1
yrWTMtYvKVH+03plMZpmSswTOsKTZqilciAwjnVuIy+blNACFkeWg2fCdOwWCGKk
xN6pFrPfmCuZqtyvcjqQLrBnAWzxJPi2s8IsJocSJeORETmBN2yci/Z/iSPOGcXe
qZBCKqr4zgmGd1d4lPKqkqblyX7dQhe/5kZuLA==
-----END CERTIFICATE-----
Generated at Thu Dec 18 17:55:14 2025 by rpki-client