This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b63a01-7e7b-4a5f-9683-1cd9926c5495/1/y7HPoPOKJt4_BEiMkLGZ9Q4eEJM.asa
File:                     y7HPoPOKJt4_BEiMkLGZ9Q4eEJM.asa (raw, json)
Hash identifier:          w9rApASglHDBpx/DYcJualDyoNDP/7m3UoJGYbB33JQ=
Subject key identifier:   CB:B1:CF:A0:F3:8A:26:DE:3F:04:48:8C:90:B1:99:F5:0E:1E:10:93
Certificate issuer:       /CN=5b44a1b1a09ca9ea50e5a5bd5b777bdfb5f3565b
Certificate serial:       019BB9837702665CFB78999E01A1DC9AABE3
Authority key identifier: 5B:44:A1:B1:A0:9C:A9:EA:50:E5:A5:BD:5B:77:7B:DF:B5:F3:56:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W0ShsaCcqepQ5aW9W3d737XzVls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/b63a01-7e7b-4a5f-9683-1cd9926c5495/1/y7HPoPOKJt4_BEiMkLGZ9Q4eEJM.asa
Signing time:             Tue 13 Jan 2026 22:39:19 +0000
ASPA not before:          Tue 13 Jan 2026 22:39:19 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            212634
Providers:                AS: 44592
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/b63a01-7e7b-4a5f-9683-1cd9926c5495/1/W0ShsaCcqepQ5aW9W3d737XzVls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/b63a01-7e7b-4a5f-9683-1cd9926c5495/1/W0ShsaCcqepQ5aW9W3d737XzVls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W0ShsaCcqepQ5aW9W3d737XzVls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Jan 2026 07:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:b9:83:77:02:66:5c:fb:78:99:9e:01:a1:dc:9a:ab:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b44a1b1a09ca9ea50e5a5bd5b777bdfb5f3565b
        Validity
            Not Before: Jan 13 22:39:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=cbb1cfa0f38a26de3f04488c90b199f50e1e1093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4c:01:09:33:41:3b:6d:c7:c8:51:22:5d:bf:
                    25:9e:2d:f9:71:0b:d0:53:38:c5:e7:0d:b1:d5:37:
                    7e:c0:cf:08:83:cc:f9:9e:3b:e6:28:35:2a:d8:69:
                    2b:1f:f4:b2:a8:8b:15:a2:ed:63:dc:f3:4a:f4:28:
                    68:5e:2c:75:cf:dd:c2:f7:4a:4d:02:bb:e8:7f:2c:
                    bc:fc:81:7a:e7:f9:48:dc:d2:ec:13:ad:20:bc:3f:
                    26:42:5e:ba:d4:40:25:cb:b6:09:61:fc:8b:98:d5:
                    cd:49:1c:03:26:77:49:25:6e:6b:20:cd:61:99:32:
                    5f:ea:70:5d:35:90:8a:6f:14:f0:c9:a0:ec:15:0e:
                    76:24:ce:d7:93:84:1d:ed:fb:47:f1:16:23:f4:23:
                    28:b3:b8:0b:4b:32:a1:c0:0a:48:f1:39:22:f5:75:
                    12:62:8f:8d:55:ca:b0:f0:e3:ec:34:81:05:31:8c:
                    d1:7d:03:1f:16:2e:f6:45:ef:3c:fc:19:7a:88:fb:
                    14:90:30:e8:0c:c2:d2:a9:2b:3d:c7:99:2e:2c:79:
                    fc:8c:c9:e3:b0:da:e7:5d:8b:62:ac:59:96:c1:c3:
                    e0:25:c3:dd:9e:dd:53:84:8a:42:4f:63:00:14:47:
                    b2:17:62:88:94:a8:39:3f:be:58:af:a9:9c:cb:46:
                    f6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B1:CF:A0:F3:8A:26:DE:3F:04:48:8C:90:B1:99:F5:0E:1E:10:93
            X509v3 Authority Key Identifier:
                keyid:5B:44:A1:B1:A0:9C:A9:EA:50:E5:A5:BD:5B:77:7B:DF:B5:F3:56:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0ShsaCcqepQ5aW9W3d737XzVls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b63a01-7e7b-4a5f-9683-1cd9926c5495/1/y7HPoPOKJt4_BEiMkLGZ9Q4eEJM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b63a01-7e7b-4a5f-9683-1cd9926c5495/1/W0ShsaCcqepQ5aW9W3d737XzVls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212634

    Signature Algorithm: sha256WithRSAEncryption
         51:7f:31:a2:14:90:8d:21:05:a4:78:69:c0:59:97:85:a6:17:
         ff:d3:81:55:43:74:41:fa:97:32:55:b9:f9:3d:8f:4d:49:02:
         d0:ea:da:df:98:48:47:7f:06:7a:90:c3:14:a6:f1:98:82:d5:
         17:7c:f9:a7:ec:a5:62:46:ac:a5:6a:35:92:20:4e:19:f1:c6:
         04:b2:04:0c:85:ae:13:1a:8f:42:d8:ac:e3:5f:7b:2c:13:0d:
         76:4f:99:18:5b:63:35:96:2f:19:2d:7b:f6:ee:11:26:01:94:
         97:ab:e6:6f:7a:5f:a6:23:02:dc:4f:74:d3:3b:e1:00:31:13:
         9a:66:e2:95:f1:19:77:0e:b8:aa:dd:b4:b3:9a:9c:16:89:2e:
         7f:93:16:98:3d:a6:6c:5b:2c:46:4f:57:fe:ed:af:49:4c:49:
         a0:44:b5:79:63:a0:76:23:89:8a:9d:dd:c4:86:76:3c:2d:8b:
         09:8f:90:9c:f8:7c:fd:e7:b9:0b:8c:23:4f:f2:b6:c1:10:5c:
         10:f6:19:77:e1:ab:e3:5d:06:45:fb:0e:2c:27:b6:65:6f:7d:
         56:64:e3:dd:ec:0b:50:e1:35:66:e2:f6:c1:8d:2a:bc:dd:9a:
         a9:4f:89:f4:21:4d:c6:32:8a:7b:f3:0a:3a:84:2e:f0:c1:04:
         24:64:f3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 17:45:28 2026 by rpki-client