This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/YyAx7tsQaDzwUQhUK4SUq2Kv0_Y.asa
File:                     YyAx7tsQaDzwUQhUK4SUq2Kv0_Y.asa (raw, json)
Hash identifier:          p0rTH6ORfh06A6wvmXAMnM0iQhvB4sQPgYC9LxZYzxc=
Subject key identifier:   63:20:31:EE:DB:10:68:3C:F0:51:08:54:2B:84:94:AB:62:AF:D3:F6
Certificate issuer:       /CN=db03a2aecca8b2befa6daf828c8db90e29cfb167
Certificate serial:       019B50CDE62BCAC2460C756F82D2E301C052
Authority key identifier: DB:03:A2:AE:CC:A8:B2:BE:FA:6D:AF:82:8C:8D:B9:0E:29:CF:B1:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/YyAx7tsQaDzwUQhUK4SUq2Kv0_Y.asa
Signing time:             Wed 24 Dec 2025 14:40:29 +0000
ASPA not before:          Wed 24 Dec 2025 14:40:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            215842
Providers:                AS: 6939
                          AS: 8283
                          AS: 34927
                          AS: 41051
                          AS: 50869
                          AS: 202585
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:50:cd:e6:2b:ca:c2:46:0c:75:6f:82:d2:e3:01:c0:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db03a2aecca8b2befa6daf828c8db90e29cfb167
        Validity
            Not Before: Dec 24 14:40:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=632031eedb10683cf05108542b8494ab62afd3f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:51:cc:5f:50:94:ba:23:26:d8:43:23:49:e8:
                    11:65:e5:26:0f:5e:20:1f:0c:b0:7c:5a:6b:68:83:
                    af:82:63:6b:33:55:50:89:81:29:a9:15:55:4d:42:
                    9e:99:2c:14:e4:15:86:03:49:fb:89:26:ba:68:6e:
                    c1:3b:92:23:86:83:32:58:84:5e:aa:35:c4:34:0a:
                    fd:ab:37:44:54:51:e7:73:a4:cc:43:1d:e7:47:9d:
                    4f:dc:ca:67:90:fc:15:b8:4a:9f:7a:f0:44:8e:f2:
                    d0:45:aa:7a:74:fa:56:42:8e:17:2c:e3:7b:b4:e0:
                    86:67:67:40:fe:bf:6b:be:8c:a0:e9:8b:a6:0f:34:
                    5b:ea:6a:1c:57:59:64:39:4e:09:1e:5d:66:79:05:
                    03:66:44:3e:73:f1:9e:0f:fe:3c:39:1a:67:75:c7:
                    fb:d0:25:5d:00:eb:df:2a:67:66:6e:61:d1:08:94:
                    c7:90:a6:3e:8c:13:be:16:57:ff:94:fb:b6:6f:68:
                    26:0d:e1:13:75:44:d2:12:bc:fe:24:2d:28:4d:e6:
                    c2:25:ea:68:ed:9c:18:9c:ae:74:a3:d7:a5:b1:a0:
                    64:20:16:99:74:8d:6c:68:f6:f6:48:75:73:84:58:
                    81:fa:8c:4b:39:df:46:b9:cd:f9:1b:79:59:6a:8a:
                    f6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:20:31:EE:DB:10:68:3C:F0:51:08:54:2B:84:94:AB:62:AF:D3:F6
            X509v3 Authority Key Identifier:
                keyid:DB:03:A2:AE:CC:A8:B2:BE:FA:6D:AF:82:8C:8D:B9:0E:29:CF:B1:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/YyAx7tsQaDzwUQhUK4SUq2Kv0_Y.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215842

    Signature Algorithm: sha256WithRSAEncryption
         93:80:ee:86:6c:a8:f2:f7:83:92:7d:a8:8d:4c:60:7e:71:31:
         70:8b:fc:ed:9b:b2:4d:f0:ba:20:b5:7d:ad:de:51:3d:ca:07:
         a2:2e:11:11:18:40:d4:dc:56:e6:fd:bb:d5:04:c1:57:f8:22:
         2e:ca:a1:91:d8:31:14:30:4f:2f:54:9c:b2:93:0d:87:dd:86:
         b1:88:4d:76:00:e6:63:ec:d9:48:78:61:72:7a:92:5b:7d:55:
         2b:71:0d:3f:0c:b1:c0:69:6e:9a:bc:74:36:b0:e5:27:de:7a:
         56:a5:20:75:1f:2a:5a:36:00:e3:63:d6:9b:84:1f:fe:eb:1d:
         4a:51:ba:98:5b:e4:cf:de:f8:2b:14:20:e8:7b:a3:f7:b7:09:
         58:b2:d6:cd:c5:81:24:a0:7b:72:94:fc:1c:b1:b5:fc:e6:f8:
         b0:ee:ea:88:cb:00:81:69:53:87:ad:4d:6b:68:60:d4:08:a8:
         0b:6f:43:a2:51:d7:c9:90:90:de:6d:05:78:76:41:dd:0c:36:
         f6:1a:d9:f4:e3:6b:1f:86:de:12:f2:f8:d0:e4:42:bf:81:20:
         b3:8e:f8:29:ae:ea:ec:9d:d2:d3:1a:f6:f1:50:ec:43:7f:f9:
         18:b2:80:80:e6:1b:09:33:3f:e1:64:cf:5c:fc:6d:e9:9f:a5:
         5f:10:73:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:17:15 2026 by rpki-client