This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/dly5iShNSA-WBgsaBqhmAYfZHJo.asa
File:                     dly5iShNSA-WBgsaBqhmAYfZHJo.asa (raw, json)
Hash identifier:          u0P5X8ye7+QjYOPWzbvFWEwFYuS06TIwdIKk97ayXJQ=
Subject key identifier:   76:5C:B9:89:28:4D:48:0F:96:06:0B:1A:06:A8:66:01:87:D9:1C:9A
Certificate issuer:       /CN=11a3864558bf42892bf9e5359bdb13f03b2527a9
Certificate serial:       019BC5A059FBA320EDC4070A2BA0EB28B4E9
Authority key identifier: 11:A3:86:45:58:BF:42:89:2B:F9:E5:35:9B:DB:13:F0:3B:25:27:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EaOGRVi_Qokr-eU1m9sT8DslJ6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/dly5iShNSA-WBgsaBqhmAYfZHJo.asa
Signing time:             Fri 16 Jan 2026 07:06:18 +0000
ASPA not before:          Fri 16 Jan 2026 07:06:18 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            6823
Providers:                AS: 174
                          AS: 1200
                          AS: 3223
                          AS: 6204
                          AS: 6205
                          AS: 6695
                          AS: 9002
                          AS: 9121
                          AS: 12735
                          AS: 15924
                          AS: 20715
                          AS: 34565
                          AS: 44901
                          AS: 56393
                          AS: 59796
                          AS: 204457
                          AS: 211877
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EaOGRVi_Qokr-eU1m9sT8DslJ6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:c5:a0:59:fb:a3:20:ed:c4:07:0a:2b:a0:eb:28:b4:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11a3864558bf42892bf9e5359bdb13f03b2527a9
        Validity
            Not Before: Jan 16 07:06:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=765cb989284d480f96060b1a06a8660187d91c9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:42:40:3e:ae:ed:6f:57:12:4f:7c:9c:5c:8b:
                    ee:8d:5e:1e:4b:d4:1b:0e:4c:27:25:10:4e:1a:e1:
                    e4:2e:36:56:0d:e2:43:92:0b:1a:bc:69:f2:4f:b0:
                    3b:04:87:a3:ad:fc:29:dc:e6:0f:fd:2b:0d:b2:05:
                    55:75:08:dc:a9:6a:90:29:de:56:cc:d5:45:32:10:
                    47:68:1c:91:bf:09:f4:86:5f:1e:28:c6:bb:50:42:
                    9e:bd:23:86:1b:78:df:f0:a5:f0:55:07:a8:4b:e7:
                    4d:37:6b:a6:30:a7:14:9e:b7:22:27:96:71:13:ca:
                    1f:a5:9c:62:27:33:ed:85:f2:01:cc:1b:af:b4:a0:
                    c8:c2:d1:5d:70:fa:49:09:64:81:d8:e3:22:c0:81:
                    e5:48:7d:e8:8f:ad:34:93:ab:77:4e:e8:3d:82:e5:
                    16:99:e9:bc:35:ce:a2:8d:2a:6f:a8:58:18:f7:5d:
                    0d:6a:14:42:76:2b:b9:58:6d:dc:ad:7c:4a:7a:0e:
                    a5:08:66:43:0b:87:b5:f7:ba:46:c6:3c:06:e6:c3:
                    5d:65:f5:90:e4:c6:fa:86:a0:57:e0:00:25:ce:c9:
                    4e:a1:74:30:50:12:13:5c:df:21:ed:58:01:79:55:
                    69:74:d3:bf:94:77:a7:0f:2b:23:1b:c1:6b:99:1c:
                    87:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:5C:B9:89:28:4D:48:0F:96:06:0B:1A:06:A8:66:01:87:D9:1C:9A
            X509v3 Authority Key Identifier:
                keyid:11:A3:86:45:58:BF:42:89:2B:F9:E5:35:9B:DB:13:F0:3B:25:27:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaOGRVi_Qokr-eU1m9sT8DslJ6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/dly5iShNSA-WBgsaBqhmAYfZHJo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6823

    Signature Algorithm: sha256WithRSAEncryption
         68:43:42:cf:b3:94:69:c3:43:41:eb:5c:3e:0c:b7:ef:8c:26:
         c6:d4:3c:d4:5c:f5:1a:21:ed:6d:a2:8e:71:e0:39:37:1a:ac:
         fb:dc:d2:d5:b4:38:dc:6b:91:62:d2:f2:a7:26:78:3a:e5:ed:
         dc:16:46:60:82:ab:48:e2:cb:e3:0d:fc:a7:3b:2c:59:45:8e:
         1f:ff:e6:04:22:f2:01:cc:48:27:35:1f:92:4e:0b:a2:6e:23:
         16:ac:5c:be:09:0b:e2:db:37:bc:e4:e1:70:75:18:2c:cf:2f:
         b6:7e:ca:7a:e2:08:f0:18:6b:94:03:7a:1f:17:28:d5:45:d0:
         0a:ee:bb:7d:87:a9:02:65:e2:54:f8:f8:03:18:84:1a:90:d9:
         e7:0c:f2:ed:f3:b2:96:ba:58:64:5f:d0:b5:86:3d:df:3f:56:
         f7:35:d1:c1:17:14:59:32:98:50:25:18:66:bb:81:34:ea:3b:
         34:e5:d0:26:ca:d1:dc:d6:2e:b2:27:24:00:28:11:40:ab:f3:
         12:e9:4a:d4:69:e5:eb:c9:77:f1:88:0e:59:ff:20:76:ea:29:
         e7:bd:00:32:e8:19:7e:07:8f:af:36:00:94:10:db:e1:e6:a5:
         c9:7c:19:f4:27:05:02:c2:c2:04:3d:bb:52:6b:02:a7:21:37:
         e9:57:89:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 14:04:33 2026 by rpki-client