This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/AyLKfRccIqVZSZfeJQ1-KG_YPTU.asa
File:                     AyLKfRccIqVZSZfeJQ1-KG_YPTU.asa (raw, json)
Hash identifier:          utC08LUwBVA4cVQBYh5JTq1FqYPeFvwHosHL7fDW+sI=
Subject key identifier:   03:22:CA:7D:17:1C:22:A5:59:49:97:DE:25:0D:7E:28:6F:D8:3D:35
Certificate issuer:       /CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Certificate serial:       019BA21836894CE49974AEAFCAAD8F01355E
Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/AyLKfRccIqVZSZfeJQ1-KG_YPTU.asa
Signing time:             Fri 09 Jan 2026 09:30:54 +0000
ASPA not before:          Fri 09 Jan 2026 09:30:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            201713
Providers:                AS: 206119
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:a2:18:36:89:4c:e4:99:74:ae:af:ca:ad:8f:01:35:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79
        Validity
            Not Before: Jan  9 09:30:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0322ca7d171c22a5594997de250d7e286fd83d35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:65:35:09:fd:d5:00:8d:c6:ee:ae:22:43:2a:
                    92:f1:6d:20:ab:f7:2c:e7:23:29:09:d1:3d:b9:8f:
                    90:27:17:9c:56:a3:f8:49:2b:5a:ea:65:39:15:cf:
                    47:dd:77:6e:82:11:c5:6b:9d:b5:a2:98:5c:7b:6a:
                    9d:b8:58:bf:69:e8:cc:fa:fc:5b:34:ec:eb:30:62:
                    cb:84:09:da:1f:4f:4a:fd:d3:41:d5:0b:bf:a0:4f:
                    77:f5:14:f1:42:fb:92:1c:cf:32:3d:67:f7:da:43:
                    ff:33:73:58:8e:82:64:75:26:e5:aa:ae:30:ac:b9:
                    96:56:57:92:0a:45:62:5c:ab:75:61:b1:ae:7c:e8:
                    a3:b5:2c:2c:a5:4c:e4:00:c5:d2:d6:12:4e:19:52:
                    28:35:ff:07:84:66:27:04:ad:83:9d:6b:a4:c6:6f:
                    62:ac:db:51:41:40:09:0b:ce:f8:26:14:6a:09:c1:
                    82:cc:e2:02:94:15:1c:87:45:85:2d:9e:aa:34:69:
                    9b:e7:80:39:8d:30:2a:f8:2c:ce:8c:97:66:34:01:
                    ea:0d:91:e2:66:85:4c:a3:5d:e7:c4:a5:3c:c0:7b:
                    81:42:0b:3d:33:32:5d:ea:2a:19:e7:79:65:5a:a7:
                    69:6c:11:36:e2:22:db:56:e7:0f:a3:a7:58:80:f1:
                    63:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:22:CA:7D:17:1C:22:A5:59:49:97:DE:25:0D:7E:28:6F:D8:3D:35
            X509v3 Authority Key Identifier:
                keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/AyLKfRccIqVZSZfeJQ1-KG_YPTU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201713

    Signature Algorithm: sha256WithRSAEncryption
         95:9b:a8:92:09:2c:cc:6a:8d:54:b0:0c:ec:0b:ac:38:5b:fa:
         74:39:dc:62:10:bf:33:de:49:43:e4:5f:4c:12:d6:da:9e:44:
         59:cb:bb:8a:72:cf:e5:66:6e:a9:4f:8d:b1:d6:ca:db:c3:15:
         16:a4:98:6c:dd:ab:93:c1:54:d5:b3:75:ee:52:d9:40:25:98:
         ef:8e:b0:d6:66:73:df:da:7e:e6:36:b2:0a:56:43:40:95:e0:
         91:6f:6a:28:79:41:5f:38:92:fe:25:2b:7e:44:e5:36:ac:f8:
         63:50:67:c3:bc:c6:b5:cd:c3:44:9c:02:c0:c1:b8:48:4e:35:
         19:fe:b3:27:34:23:b4:30:09:6c:4c:81:b0:19:11:02:8e:90:
         b9:a3:7a:59:70:b3:c7:21:2b:eb:c8:8f:fb:d0:b5:25:9c:b7:
         12:ad:90:e6:43:bc:84:59:77:b0:ab:3c:3e:a4:be:e7:5a:9b:
         17:e8:cf:6f:35:dc:ac:61:ef:8a:df:bd:c3:e9:cc:a3:37:d5:
         51:a7:11:4c:bb:32:ae:17:af:49:88:25:c5:b5:b9:32:b0:2a:
         7d:54:7b:a5:4f:de:0b:d9:a1:9d:d2:0d:b8:b9:26:86:05:e0:
         f3:ab:66:7d:bd:0d:44:45:03:1b:c2:7e:90:9d:d1:6b:08:1e:
         d7:fc:c2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:43:14 2026 by rpki-client