This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/pCYoOUA_GU3vHlgU42eFOwSyh0U.asa
File:                     pCYoOUA_GU3vHlgU42eFOwSyh0U.asa (raw, json)
Hash identifier:          OsOdGJVLaXIFW9OwWg5T7HCMxkgJW8fcL3Q3oFi6KjQ=
Subject key identifier:   A4:26:28:39:40:3F:19:4D:EF:1E:58:14:E3:67:85:3B:04:B2:87:45
Certificate issuer:       /CN=8faccbac71477b940e5cd4103e3eee61db615915
Certificate serial:       019B618F24B0B058E24B341248CB8D827A81
Authority key identifier: 8F:AC:CB:AC:71:47:7B:94:0E:5C:D4:10:3E:3E:EE:61:DB:61:59:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j6zLrHFHe5QOXNQQPj7uYdthWRU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/pCYoOUA_GU3vHlgU42eFOwSyh0U.asa
Signing time:             Sat 27 Dec 2025 20:45:29 +0000
ASPA not before:          Sat 27 Dec 2025 20:45:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            214618
Providers:                AS: 174
                          AS: 6939
                          AS: 13335
                          AS: 16509
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j6zLrHFHe5QOXNQQPj7uYdthWRU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:61:8f:24:b0:b0:58:e2:4b:34:12:48:cb:8d:82:7a:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8faccbac71477b940e5cd4103e3eee61db615915
        Validity
            Not Before: Dec 27 20:45:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a4262839403f194def1e5814e367853b04b28745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5e:06:fa:59:01:6d:2c:87:9f:6a:d8:52:ac:
                    e6:11:bd:92:3f:95:a7:33:75:6a:95:97:b7:9d:93:
                    5e:5b:4a:c2:50:71:2f:49:a4:af:a4:db:c9:bb:27:
                    4d:ca:3f:d2:ed:a1:be:2b:fd:8c:b1:85:f0:b4:83:
                    23:82:a1:c0:10:82:6d:df:d7:5b:c5:64:f1:ab:17:
                    91:02:e0:c8:e4:5b:0c:bb:8b:38:b0:44:bb:c0:fd:
                    62:19:62:67:5e:75:19:76:b0:d6:d9:e6:ba:18:49:
                    d7:fd:59:c9:3b:f9:5a:74:44:bd:e4:a6:25:db:a1:
                    cd:c7:bb:bc:59:06:e1:66:de:b7:da:a0:88:82:60:
                    e3:1f:cb:af:51:46:58:73:4c:1b:db:5b:d8:cb:d7:
                    e4:45:24:b3:d5:4e:85:a6:19:e9:e6:81:eb:f6:51:
                    7d:bd:31:52:88:e5:f8:f6:c3:2a:e2:ce:1f:9e:3b:
                    c2:5a:ca:34:f9:c5:c6:f6:41:11:a8:74:a7:06:94:
                    49:a7:14:a4:83:d4:3d:38:3d:48:75:15:ee:ef:f3:
                    95:cb:dd:5b:9b:e4:2c:4b:80:f8:e1:37:4c:8c:19:
                    4f:f7:a9:00:df:91:10:48:e7:86:df:d6:51:1e:8f:
                    f7:06:93:98:4b:6b:af:e0:2b:a6:a2:8f:a0:81:03:
                    d9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:26:28:39:40:3F:19:4D:EF:1E:58:14:E3:67:85:3B:04:B2:87:45
            X509v3 Authority Key Identifier:
                keyid:8F:AC:CB:AC:71:47:7B:94:0E:5C:D4:10:3E:3E:EE:61:DB:61:59:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6zLrHFHe5QOXNQQPj7uYdthWRU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/pCYoOUA_GU3vHlgU42eFOwSyh0U.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214618

    Signature Algorithm: sha256WithRSAEncryption
         9b:4f:47:a1:5b:8f:48:84:b9:e7:cc:2c:07:78:7e:51:7a:23:
         b6:76:8a:15:b7:6f:62:38:69:7d:e9:89:fa:50:65:e7:b6:fd:
         1e:26:69:4c:5b:46:b6:37:88:40:34:be:62:9b:88:a2:5c:4d:
         9a:76:9b:bc:a6:b6:ee:37:4d:65:43:90:9d:bf:b7:4d:97:80:
         61:d1:37:e2:a8:af:2c:64:db:36:02:26:32:95:af:9d:07:3b:
         ed:2b:14:96:68:3f:ba:86:5d:63:6a:d8:b8:4e:a5:d9:8e:a2:
         4c:3c:0b:f2:97:e4:18:df:cc:d9:2c:d7:55:f3:8c:25:2c:16:
         a9:95:56:d3:c1:ab:5b:95:f6:31:c1:20:ee:1e:bf:71:3e:f3:
         7f:73:c5:e9:e4:f2:62:88:08:9a:8b:4d:7c:41:c7:0a:a3:bb:
         64:47:37:34:fa:db:40:d4:25:83:ec:f0:9a:69:d5:ce:21:96:
         c5:ac:f9:7b:28:27:88:60:64:b1:24:be:59:02:9c:27:51:44:
         95:86:4a:58:e0:0d:65:cc:8a:f0:3c:61:23:a1:29:e6:4c:aa:
         d3:db:07:8c:2a:c5:8c:68:e0:80:2d:4f:a7:e4:fd:cf:01:52:
         86:f5:0a:f7:28:09:3c:02:bc:19:dd:21:c4:84:f2:42:74:7d:
         e3:82:20:f7
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZthjySwsFjiSzQSSMuNgnqBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmYWNjYmFjNzE0NzdiOTQwZTVjZDQxMDNlM2VlZTYxZGI2
MTU5MTUwHhcNMjUxMjI3MjA0NTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDI2MjgzOTQwM2YxOTRkZWYxZTU4MTRlMzY3ODUzYjA0YjI4NzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoF4G+lkBbSyHn2rYUqzmEb2SP5Wn
M3VqlZe3nZNeW0rCUHEvSaSvpNvJuydNyj/S7aG+K/2MsYXwtIMjgqHAEIJt39db
xWTxqxeRAuDI5FsMu4s4sES7wP1iGWJnXnUZdrDW2ea6GEnX/VnJO/ladES95KYl
26HNx7u8WQbhZt632qCIgmDjH8uvUUZYc0wb21vYy9fkRSSz1U6Fphnp5oHr9lF9
vTFSiOX49sMq4s4fnjvCWso0+cXG9kERqHSnBpRJpxSkg9Q9OD1IdRXu7/OVy91b
m+QsS4D44TdMjBlP96kA35EQSOeG39ZRHo/3BpOYS2uv4Cumoo+ggQPZ5QIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFKQmKDlAPxlN7x5YFONnhTsEsodFMB8GA1UdIwQY
MBaAFI+sy6xxR3uUDlzUED4+7mHbYVkVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajZ6THJIRkhlNVFPWE5RUVBqN3VZZHRoV1JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8wMTdlZWYtYzQ5ZS00N2E3LTllZDMt
MDk4ZGIzYTI0ZmYwLzEvcENZb09VQV9HVTN2SGxnVTQyZUZPd1N5aDBVLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS8wMTdlZWYtYzQ5ZS00N2E3LTllZDMtMDk4ZGIzYTI0ZmYw
LzEvajZ6THJIRkhlNVFPWE5RUVBqN3VZZHRoV1JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNGWjANBgkqhkiG
9w0BAQsFAAOCAQEAm09HoVuPSIS558wsB3h+UXojtnaKFbdvYjhpfemJ+lBl57b9
HiZpTFtGtjeIQDS+YpuIolxNmnabvKa27jdNZUOQnb+3TZeAYdE34qivLGTbNgIm
MpWvnQc77SsUlmg/uoZdY2rYuE6l2Y6iTDwL8pfkGN/M2SzXVfOMJSwWqZVW08Gr
W5X2McEg7h6/cT7zf3PF6eTyYogImotNfEHHCqO7ZEc3NPrbQNQlg+zwmmnVziGW
xaz5eygniGBksSS+WQKcJ1FElYZKWOANZcyK8DxhI6Ep5kyq09sHjCrFjGjggC1P
p+T9zwFShvUK9ygJPAK8Gd0hxITyQnR944Ig9w==
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:00:41 2026 by rpki-client