This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/YdkB7DJ0vzC2DF1bGjsVkqImbJY.asa
File:                     YdkB7DJ0vzC2DF1bGjsVkqImbJY.asa (raw, json)
Hash identifier:          N2GRq0IColjaIvdhm3nHxdbYRQhr4pwGW38LFrYugKs=
Subject key identifier:   61:D9:01:EC:32:74:BF:30:B6:0C:5D:5B:1A:3B:15:92:A2:26:6C:96
Certificate issuer:       /CN=6e4213ef7550aadef91793dc9d14be87471e4c12
Certificate serial:       019C23308D898487E83B2933128098099533
Authority key identifier: 6E:42:13:EF:75:50:AA:DE:F9:17:93:DC:9D:14:BE:87:47:1E:4C:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bkIT73VQqt75F5PcnRS-h0ceTBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/YdkB7DJ0vzC2DF1bGjsVkqImbJY.asa
Signing time:             Tue 03 Feb 2026 11:08:30 +0000
ASPA not before:          Tue 03 Feb 2026 11:08:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            204830
Providers:                AS: 34872
                          AS: 44103
                          AS: 214723
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bkIT73VQqt75F5PcnRS-h0ceTBI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:23:30:8d:89:84:87:e8:3b:29:33:12:80:98:09:95:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e4213ef7550aadef91793dc9d14be87471e4c12
        Validity
            Not Before: Feb  3 11:08:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=61d901ec3274bf30b60c5d5b1a3b1592a2266c96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b9:d1:c2:80:31:25:7b:0b:80:ee:09:84:08:
                    55:69:0e:bb:41:28:f8:57:a6:af:f7:57:b3:42:ac:
                    35:62:ba:e4:4d:18:cf:78:21:85:68:65:17:03:43:
                    af:2f:a8:c1:c2:06:ea:34:ad:1e:43:09:0d:09:af:
                    27:45:7a:93:4d:8e:53:b9:24:51:8d:0a:62:ae:1a:
                    2a:2f:81:58:4a:8b:b4:f3:65:6f:eb:2c:f2:13:c6:
                    06:85:01:da:1e:ca:7a:ce:22:7a:5c:56:da:e0:04:
                    fd:62:fa:bd:bd:59:04:7e:05:3e:b8:b0:bf:b6:d7:
                    8a:cd:f4:6e:b4:fe:60:83:6d:10:96:a5:d2:c6:d1:
                    31:0a:cd:89:4f:80:8e:95:2d:36:aa:6b:0e:81:ea:
                    f9:b2:97:4a:c3:b9:91:c7:74:05:57:fe:73:c5:47:
                    d9:d1:08:0c:15:d9:99:ab:2c:03:9d:0b:b1:96:43:
                    d3:61:c1:71:c0:60:81:9f:a1:3a:f0:32:8f:5d:c8:
                    9c:9c:1f:59:91:b4:22:11:e9:22:5a:11:7e:13:ad:
                    77:bd:b4:e1:10:61:0c:24:b5:06:0d:7c:6e:16:fe:
                    01:93:8c:8b:03:56:8c:b5:f5:0c:8b:f7:e5:62:81:
                    71:3a:2b:1e:ae:bc:c4:74:5c:4f:04:9f:d2:7b:6c:
                    79:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D9:01:EC:32:74:BF:30:B6:0C:5D:5B:1A:3B:15:92:A2:26:6C:96
            X509v3 Authority Key Identifier:
                keyid:6E:42:13:EF:75:50:AA:DE:F9:17:93:DC:9D:14:BE:87:47:1E:4C:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkIT73VQqt75F5PcnRS-h0ceTBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/YdkB7DJ0vzC2DF1bGjsVkqImbJY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204830

    Signature Algorithm: sha256WithRSAEncryption
         9e:de:44:a0:8a:a0:6b:c0:e9:e2:2c:1b:3c:f0:67:bc:8d:fb:
         8e:40:ac:ef:3d:e2:43:b7:4b:73:c0:64:fb:47:ea:11:76:ae:
         58:4f:9f:ff:89:e0:e6:da:b8:66:9a:4f:41:77:32:bd:dd:ce:
         22:d4:6e:88:88:7d:d4:ea:e1:ca:2d:9e:f7:e4:58:2d:05:a2:
         88:24:fa:af:71:8c:e8:20:18:41:53:58:75:f4:f0:a5:1e:e0:
         92:aa:ae:f4:ad:1a:f8:d1:93:ae:88:29:58:0b:f4:a2:13:7f:
         30:60:e2:8c:5a:73:37:88:14:a4:7e:1f:f8:8c:54:9d:5a:b2:
         1c:5f:50:84:ef:46:b7:4a:93:56:0c:8d:7e:ff:a5:21:c7:bc:
         e5:85:5e:f7:bf:ab:90:c0:6c:41:90:fd:86:09:5b:45:c4:28:
         b3:d9:fc:af:03:40:4d:76:a0:96:25:f5:a7:f0:a1:2c:6e:b0:
         be:d4:41:f0:7b:0a:ff:a4:d5:23:74:02:58:35:e9:aa:d0:a4:
         41:90:45:35:ae:bf:14:77:0f:95:8c:e7:c6:d3:e5:66:7b:49:
         af:7e:13:3d:19:1b:0b:ed:96:47:30:26:1e:76:58:03:d7:3d:
         54:9e:8b:78:fc:21:09:ae:bd:88:16:7f:b3:de:96:4f:b0:ea:
         e4:e6:dd:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:50:52 2026 by rpki-client