This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/ygtEKAvCPKS208hGgxgvNBoaYpA.asa
File:                     ygtEKAvCPKS208hGgxgvNBoaYpA.asa (raw, json)
Hash identifier:          PRA1qTJjgc8ZVUJi9mvFCAL+qKXJHkWZ1Nr5Ustka0M=
Subject key identifier:   CA:0B:44:28:0B:C2:3C:A4:B6:D3:C8:46:83:18:2F:34:1A:1A:62:90
Certificate issuer:       /CN=e1977859d071f7150837b2acb4353ff33efd831c
Certificate serial:       019BE8C1BFD4ED33FFBFE0409D48662CF8ED
Authority key identifier: E1:97:78:59:D0:71:F7:15:08:37:B2:AC:B4:35:3F:F3:3E:FD:83:1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Zd4WdBx9xUIN7KstDU_8z79gxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/ygtEKAvCPKS208hGgxgvNBoaYpA.asa
Signing time:             Fri 23 Jan 2026 02:49:30 +0000
ASPA not before:          Fri 23 Jan 2026 02:49:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            215219
Providers:                AS: 0
                          AS: 6939
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Zd4WdBx9xUIN7KstDU_8z79gxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:e8:c1:bf:d4:ed:33:ff:bf:e0:40:9d:48:66:2c:f8:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1977859d071f7150837b2acb4353ff33efd831c
        Validity
            Not Before: Jan 23 02:49:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ca0b44280bc23ca4b6d3c84683182f341a1a6290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:07:64:a4:29:8e:21:d8:c9:8a:ae:00:76:d5:
                    e8:f4:5f:5d:2f:dd:62:e6:56:c5:72:7d:19:75:a2:
                    fe:d3:da:ba:f1:39:5d:b2:4d:48:44:c0:bb:2f:c5:
                    ef:e0:5b:c1:88:6e:97:5c:30:9e:be:52:95:23:ee:
                    6b:c7:eb:99:d8:26:83:0e:1d:63:fe:40:52:42:e6:
                    72:b1:15:c2:e4:a2:1b:5c:ea:66:af:43:07:c6:06:
                    60:64:9e:8f:ac:e5:86:2e:27:9f:47:bc:9b:a9:d8:
                    21:a6:fc:39:2a:f8:df:a5:40:5a:22:0f:d6:a8:a4:
                    1d:49:3a:0c:94:9e:70:41:9a:93:65:58:bd:52:b5:
                    c1:83:67:d5:db:a4:90:af:57:41:92:ba:90:8c:88:
                    c6:bc:6e:65:5f:71:c1:01:24:8d:fb:86:d5:4b:b7:
                    34:33:39:2d:7f:dc:20:a7:12:66:28:d1:39:63:e6:
                    a8:f8:30:82:f9:af:4e:d8:20:ce:24:5c:33:c1:7f:
                    9f:8d:d7:07:a1:b7:ce:92:4b:1c:08:67:db:95:56:
                    84:1f:c9:ef:96:75:25:ff:63:41:3b:b8:83:91:ae:
                    49:d2:f4:60:54:74:24:02:9a:a6:59:3e:7e:ae:e3:
                    e3:b0:32:52:1c:f3:fd:26:9d:30:77:de:20:dd:ff:
                    cf:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:0B:44:28:0B:C2:3C:A4:B6:D3:C8:46:83:18:2F:34:1A:1A:62:90
            X509v3 Authority Key Identifier:
                keyid:E1:97:78:59:D0:71:F7:15:08:37:B2:AC:B4:35:3F:F3:3E:FD:83:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zd4WdBx9xUIN7KstDU_8z79gxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/ygtEKAvCPKS208hGgxgvNBoaYpA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215219

    Signature Algorithm: sha256WithRSAEncryption
         71:f9:d4:19:d5:f5:43:16:c7:55:44:79:e0:88:dc:cc:39:9f:
         af:a3:4d:59:ae:2d:c9:c5:1b:86:e0:c0:23:1d:2a:ea:1a:73:
         98:b0:66:9b:7c:ec:f8:88:ff:c7:cb:5d:94:70:30:7d:88:d8:
         d4:39:3f:54:28:ae:79:c0:f1:2c:2e:cf:fc:09:45:91:64:2b:
         5d:a5:21:8d:0e:12:c7:92:55:99:f5:ad:04:73:ed:00:01:96:
         65:98:f8:ee:ae:22:ca:d8:57:51:0c:8b:f9:40:16:18:2e:f8:
         6a:84:c6:b3:df:f0:1f:74:87:c6:09:1f:c4:2d:1e:3e:dd:58:
         81:aa:6a:40:ff:bf:6c:f5:d6:6b:c7:bf:bd:51:69:5e:d4:53:
         00:be:87:0f:e1:f5:e5:67:54:b6:fa:10:55:9e:7c:08:80:ba:
         c3:c3:1a:5c:7e:8f:ae:91:0c:af:f3:9c:bd:3c:61:7f:6c:4c:
         d2:da:4b:bd:66:8b:4d:34:a1:ab:19:04:93:3e:67:f6:46:9b:
         a1:5d:66:6a:53:78:ed:3f:e7:40:f6:31:4b:ac:f3:e4:46:a2:
         2a:2f:68:20:15:a8:96:5a:8a:1a:e0:c7:df:6a:39:3d:63:cd:
         d6:2a:9c:7f:d2:03:5d:9b:89:c0:37:d6:af:df:7a:11:77:0e:
         c8:71:1f:9f
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZvowb/U7TP/v+BAnUhmLPjtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxOTc3ODU5ZDA3MWY3MTUwODM3YjJhY2I0MzUzZmYzM2Vm
ZDgzMWMwHhcNMjYwMTIzMDI0OTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTBiNDQyODBiYzIzY2E0YjZkM2M4NDY4MzE4MmYzNDFhMWE2MjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwdkpCmOIdjJiq4AdtXo9F9dL91i
5lbFcn0ZdaL+09q68Tldsk1IRMC7L8Xv4FvBiG6XXDCevlKVI+5rx+uZ2CaDDh1j
/kBSQuZysRXC5KIbXOpmr0MHxgZgZJ6PrOWGLiefR7ybqdghpvw5KvjfpUBaIg/W
qKQdSToMlJ5wQZqTZVi9UrXBg2fV26SQr1dBkrqQjIjGvG5lX3HBASSN+4bVS7c0
Mzktf9wgpxJmKNE5Y+ao+DCC+a9O2CDOJFwzwX+fjdcHobfOkkscCGfblVaEH8nv
lnUl/2NBO7iDka5J0vRgVHQkApqmWT5+ruPjsDJSHPP9Jp0wd94g3f/PzQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFMoLRCgLwjykttPIRoMYLzQaGmKQMB8GA1UdIwQY
MBaAFOGXeFnQcfcVCDeyrLQ1P/M+/YMcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFpkNFdkQng5eFVJTjdLc3REVV84ejc5Z3h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85ZDdjZDctZWU2My00ODg2LThmZTEt
YjVjZTZiNmZkNGQxLzEveWd0RUtBdkNQS1MyMDhoR2d4Z3ZOQm9hWXBBLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni85ZDdjZDctZWU2My00ODg2LThmZTEtYjVjZTZiNmZkNGQx
LzEvNFpkNFdkQng5eFVJTjdLc3REVV84ejc5Z3h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNIszANBgkqhkiG
9w0BAQsFAAOCAQEAcfnUGdX1QxbHVUR54IjczDmfr6NNWa4tycUbhuDAIx0q6hpz
mLBmm3zs+Ij/x8tdlHAwfYjY1Dk/VCiuecDxLC7P/AlFkWQrXaUhjQ4Sx5JVmfWt
BHPtAAGWZZj47q4iythXUQyL+UAWGC74aoTGs9/wH3SHxgkfxC0ePt1YgapqQP+/
bPXWa8e/vVFpXtRTAL6HD+H15WdUtvoQVZ58CIC6w8MaXH6PrpEMr/OcvTxhf2xM
0tpLvWaLTTShqxkEkz5n9kaboV1malN47T/nQPYxS6zz5EaiKi9oIBWollqKGuDH
32o5PWPN1iqcf9IDXZuJwDfWr996EXcOyHEfnw==
-----END CERTIFICATE-----
Generated at Mon Feb 2 04:42:03 2026 by rpki-client