This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/tY4sfWyl-B6edZnbfqS5nS-IIv0.asa
File:                     tY4sfWyl-B6edZnbfqS5nS-IIv0.asa (raw, json)
Hash identifier:          YBYJQpmviGXQzwnOV8znSXyELVmQ68/wa0NM6FbOLAc=
Subject key identifier:   B5:8E:2C:7D:6C:A5:F8:1E:9E:75:99:DB:7E:A4:B9:9D:2F:88:22:FD
Certificate issuer:       /CN=dee623e2aff7b03afeb94260348c1633b54d9056
Certificate serial:       019BA2EE71947531404747DFE11BA9501E64
Authority key identifier: DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/tY4sfWyl-B6edZnbfqS5nS-IIv0.asa
Signing time:             Fri 09 Jan 2026 13:24:54 +0000
ASPA not before:          Fri 09 Jan 2026 13:24:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            202354
Providers:                AS: 203735
                          AS: 208324
                          AS: 210021
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:a2:ee:71:94:75:31:40:47:47:df:e1:1b:a9:50:1e:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dee623e2aff7b03afeb94260348c1633b54d9056
        Validity
            Not Before: Jan  9 13:24:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b58e2c7d6ca5f81e9e7599db7ea4b99d2f8822fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:41:e6:de:f6:af:39:b6:dc:1f:58:ee:aa:2a:
                    dc:05:5e:cf:e5:44:97:29:61:dd:ec:42:81:81:ee:
                    86:c2:d6:9c:b0:4a:8c:7a:d0:aa:60:0a:fc:84:89:
                    df:d4:a7:56:bb:98:be:56:14:90:cd:33:a4:3d:6a:
                    97:15:10:fe:cb:b8:25:43:f5:43:db:ed:e6:4f:0a:
                    c5:b7:15:8b:86:83:b9:e1:fc:2f:4d:91:ed:af:c8:
                    db:00:48:5f:ea:91:9c:7b:ad:2d:b8:38:cd:28:84:
                    d9:cc:e3:56:ad:dc:ae:76:dc:ae:0f:ce:f9:45:10:
                    97:fc:ad:cd:81:8b:74:b4:65:e0:09:6f:bd:6b:c5:
                    5f:a5:f2:db:92:5e:61:35:6c:95:1b:5f:e7:54:8a:
                    af:07:6c:43:d0:77:42:65:94:a7:60:7f:11:9a:93:
                    cd:21:53:4e:a2:f1:38:7e:5c:ad:ef:33:62:21:de:
                    5b:49:f2:47:0b:41:fe:49:90:3a:41:2d:07:12:df:
                    50:19:23:bc:eb:4d:f1:ea:81:52:aa:43:e2:01:00:
                    ee:08:f5:2d:aa:9d:b9:9e:e8:8b:67:dd:34:94:28:
                    42:b5:a2:b6:2e:49:22:90:a0:d1:dd:60:65:73:38:
                    ad:1f:3a:04:26:54:4d:91:a7:cc:af:49:e9:76:11:
                    a1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:8E:2C:7D:6C:A5:F8:1E:9E:75:99:DB:7E:A4:B9:9D:2F:88:22:FD
            X509v3 Authority Key Identifier:
                keyid:DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/tY4sfWyl-B6edZnbfqS5nS-IIv0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202354

    Signature Algorithm: sha256WithRSAEncryption
         7e:ee:7e:3e:8f:a9:a7:6b:dc:fa:01:ba:b8:2c:f0:d1:04:4c:
         e2:05:ed:2d:0c:35:45:d0:e0:92:45:e4:b3:c3:99:b4:61:9e:
         18:8f:af:3b:36:23:7c:7b:16:f6:f5:e0:ef:c6:be:e0:5b:30:
         30:65:18:a8:5d:ca:08:43:01:b7:7f:69:79:bb:2d:c3:83:08:
         85:31:6d:f4:7a:fa:ac:25:67:f8:78:5d:44:80:0c:89:a7:98:
         d2:b9:68:91:8e:4f:5d:60:aa:51:31:91:8f:76:1f:88:b7:6f:
         13:b2:ec:e0:4c:6f:d7:d5:f1:7d:fe:46:9c:e7:de:8a:82:f9:
         f2:26:3e:8f:1c:49:40:76:f3:ad:7e:f9:17:86:5b:c7:11:84:
         d3:2d:39:9e:dd:93:7b:93:5e:95:b1:9b:42:6a:11:f8:55:b5:
         d7:25:4d:a1:03:78:7a:41:81:82:f2:f1:a4:77:7c:a3:44:a7:
         b8:2a:92:39:9f:ad:12:f2:bb:db:53:f7:70:ae:b3:71:55:1f:
         3d:fb:26:d3:58:65:b9:2d:97:f3:2d:04:05:1b:12:7c:63:d7:
         ab:5c:91:c2:95:af:28:96:8a:71:23:36:2b:6a:07:ed:94:cd:
         68:46:e4:f1:29:af:77:db:88:33:3a:b4:74:c0:0c:4f:f1:91:
         aa:e2:3e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:19:46 2026 by rpki-client