This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/YWQCWSs8yZA8QY3t_PyQQKGtK3k.asa
File:                     YWQCWSs8yZA8QY3t_PyQQKGtK3k.asa (raw, json)
Hash identifier:          S3rytmqhbZUvqszHeJsXQK+zRV9JSgSBvpP4kCVStOY=
Subject key identifier:   61:64:02:59:2B:3C:C9:90:3C:41:8D:ED:FC:FC:90:40:A1:AD:2B:79
Certificate issuer:       /CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Certificate serial:       019B9FE55FA3666752274B8341A88CC85822
Authority key identifier: F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/YWQCWSs8yZA8QY3t_PyQQKGtK3k.asa
Signing time:             Thu 08 Jan 2026 23:16:08 +0000
ASPA not before:          Thu 08 Jan 2026 23:16:08 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            30893
Providers:                AS: 50989
                          AS: 202395
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 05:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:9f:e5:5f:a3:66:67:52:27:4b:83:41:a8:8c:c8:58:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
        Validity
            Not Before: Jan  8 23:16:08 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=616402592b3cc9903c418dedfcfc9040a1ad2b79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:bb:56:d2:35:f2:ab:96:8d:e2:78:98:09:b0:
                    08:71:f0:20:52:f0:21:a8:d7:54:39:3e:f0:69:8b:
                    0b:a0:29:b6:81:e4:45:b0:a6:32:95:2d:b3:23:ed:
                    0a:8a:71:a8:72:29:89:66:50:cf:55:57:08:da:a6:
                    4d:83:34:cb:c7:b4:fa:08:2b:82:14:bb:28:77:ba:
                    2d:e8:38:ab:da:15:22:21:fc:c0:cc:70:3c:08:86:
                    1b:b1:f5:8b:e5:4e:23:7f:60:4e:e5:9f:32:00:d1:
                    2f:ab:91:2e:fc:7d:a1:95:aa:27:1f:0a:c0:d3:31:
                    3a:5f:ec:cf:99:6a:25:f4:a2:07:e6:7c:ef:cc:a6:
                    ed:6a:9b:b8:9b:be:35:84:e6:2d:cf:68:a4:64:9a:
                    73:29:e8:72:9a:4e:76:47:04:1f:16:d8:8d:44:02:
                    56:43:90:cf:fa:d4:17:9e:7d:fd:f1:d8:b1:8a:93:
                    79:eb:b6:0b:7a:01:07:42:ed:4e:4f:08:66:d2:1d:
                    53:0c:23:27:db:eb:e1:a4:3e:a2:bb:94:f9:b3:9e:
                    63:a1:a2:ad:61:ea:30:f9:0e:fe:7b:68:12:45:b2:
                    54:1b:d6:39:7a:fb:bb:48:25:a3:46:51:83:f8:b8:
                    44:47:26:d3:5b:31:7d:96:c7:c8:4a:65:d5:b3:bf:
                    97:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:64:02:59:2B:3C:C9:90:3C:41:8D:ED:FC:FC:90:40:A1:AD:2B:79
            X509v3 Authority Key Identifier:
                keyid:F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/YWQCWSs8yZA8QY3t_PyQQKGtK3k.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  30893

    Signature Algorithm: sha256WithRSAEncryption
         81:7a:c3:37:b9:13:d2:c8:3b:4f:7c:23:64:5a:13:f8:46:2a:
         05:08:64:98:68:65:2d:61:c9:af:d6:40:bd:09:2d:c6:7c:ba:
         ae:d6:51:31:fc:69:7c:5c:8f:69:43:63:d0:de:3d:92:96:f7:
         c0:e0:e5:7b:75:29:f2:75:34:6d:fc:39:c0:e3:52:a6:df:16:
         b9:52:aa:ae:a8:1a:36:ee:86:c5:76:4c:fc:91:f8:c0:d2:56:
         b9:50:58:71:31:4a:4b:60:26:72:cc:09:16:1a:de:61:71:e6:
         c7:df:3a:da:f7:89:82:d3:ca:16:5a:ff:6d:34:3a:5e:86:f5:
         3c:03:5f:71:4d:c3:d8:c4:9d:f0:42:fb:d2:8f:f2:cd:10:74:
         05:72:15:d1:4d:e4:c4:4c:de:ff:05:52:3e:58:d6:d8:48:55:
         70:a4:d8:1f:be:68:ca:1e:c5:25:91:0d:c4:ea:7f:c4:32:6b:
         6b:66:19:16:51:fb:5b:5b:d1:50:f7:fa:b0:73:85:f0:74:a8:
         12:59:17:3e:55:98:43:67:4e:06:6c:9f:14:b6:0b:0b:37:c9:
         d1:3e:17:8d:63:83:8a:33:56:9b:e6:ac:c6:6b:e1:59:eb:02:
         f7:67:2a:54:e7:73:3e:be:cf:fd:61:67:85:35:ad:04:3d:50:
         5e:3d:ed:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 15:34:00 2026 by rpki-client