This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/IS2YUSaSM7g3zrdWKlVJ5K8E2Y0.asa
File:                     IS2YUSaSM7g3zrdWKlVJ5K8E2Y0.asa (raw, json)
Hash identifier:          M3L8LodfErRThxrQMS3jQCWjzNRa40VCbb+9EdLD1CM=
Subject key identifier:   21:2D:98:51:26:92:33:B8:37:CE:B7:56:2A:55:49:E4:AF:04:D9:8D
Certificate issuer:       /CN=4cad0397487799e2118ff4cbcf8f159747f35891
Certificate serial:       019C01277A5CDB212B0ADC6C606DF64607E6
Authority key identifier: 4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/IS2YUSaSM7g3zrdWKlVJ5K8E2Y0.asa
Signing time:             Tue 27 Jan 2026 20:31:30 +0000
ASPA not before:          Tue 27 Jan 2026 20:31:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            12859
Providers:                AS: 1299
                          AS: 2914
                          AS: 200020
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:01:27:7a:5c:db:21:2b:0a:dc:6c:60:6d:f6:46:07:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cad0397487799e2118ff4cbcf8f159747f35891
        Validity
            Not Before: Jan 27 20:31:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=212d9851269233b837ceb7562a5549e4af04d98d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b3:89:7b:3e:e4:3a:8c:77:c7:8e:c4:63:51:
                    cd:f5:81:f4:44:44:5f:2a:c8:17:c9:47:c9:81:14:
                    21:17:f5:02:4f:b6:a8:70:5b:30:64:1a:e6:59:6c:
                    15:83:11:7f:66:bb:5d:64:22:8b:36:50:b7:5f:31:
                    66:46:dd:64:bb:cf:4a:04:f5:31:40:f5:69:b9:ae:
                    59:5f:d1:d3:79:c3:ed:06:27:6a:78:90:4b:6c:83:
                    b0:03:56:15:c3:9a:41:ae:41:c6:75:c5:02:0c:7a:
                    07:45:d3:4c:0a:76:7d:9f:ca:62:93:c3:ba:de:2c:
                    57:19:45:3a:62:fd:67:f2:70:5a:c2:68:87:fc:f3:
                    43:b1:46:99:32:08:bb:36:b0:5e:70:47:fa:e2:a0:
                    36:3f:59:21:84:d5:a6:d9:5c:55:ed:f0:fa:2c:54:
                    1b:c4:52:54:36:49:ba:27:51:3c:b5:04:54:86:a2:
                    1c:72:bf:5e:9a:fc:a3:ad:ec:ef:1f:99:4a:d2:6c:
                    08:33:a7:6a:7e:37:57:5c:bc:c9:56:ab:f1:52:52:
                    23:bd:3f:71:52:2f:0a:40:52:ff:14:e0:7f:32:e8:
                    e8:08:dd:fb:ce:91:18:ec:90:21:72:6a:8f:e9:17:
                    f4:80:66:8e:8f:d0:8f:c2:fb:c7:8e:75:17:86:a3:
                    77:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:2D:98:51:26:92:33:B8:37:CE:B7:56:2A:55:49:E4:AF:04:D9:8D
            X509v3 Authority Key Identifier:
                keyid:4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/IS2YUSaSM7g3zrdWKlVJ5K8E2Y0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  12859

    Signature Algorithm: sha256WithRSAEncryption
         76:b6:ff:ce:d7:91:be:52:08:b8:f8:3f:ca:18:04:e3:77:76:
         b3:e4:14:01:56:c9:b7:23:20:18:98:da:92:05:b3:6f:02:eb:
         0a:0f:d5:93:cb:03:20:41:ae:df:ed:b6:2b:5e:ef:56:9c:53:
         c2:7b:5e:93:cd:49:8d:2e:b9:c6:a3:19:34:77:fc:f9:67:90:
         11:29:1e:3a:17:6c:b8:8f:7f:de:a2:2f:39:b2:39:ce:89:23:
         bc:9c:f9:b1:41:76:33:7c:b9:2f:e6:aa:bb:2b:63:bf:7e:2b:
         01:30:a7:e5:7c:dc:c6:fb:b8:83:7e:93:7c:bf:dd:c7:e3:a6:
         75:bf:16:1f:fd:64:2c:9b:3d:f5:a5:ab:ea:44:5e:56:42:e5:
         5a:09:9b:d4:2c:6a:75:f1:f4:22:c6:e1:60:49:0d:a3:2d:fa:
         94:58:40:11:d5:77:b4:70:34:6f:99:38:b3:08:b9:1d:86:33:
         1a:16:ec:cf:48:b4:01:e6:a6:7e:99:8d:55:f9:2d:2b:50:67:
         f2:c1:63:40:52:e7:b9:c5:ae:c7:56:92:d2:f9:25:ad:ae:f6:
         dd:a8:62:53:e4:e9:b7:f0:76:ff:b5:87:06:1f:1d:58:d2:48:
         74:d7:34:89:3e:ca:f1:4c:c3:aa:d0:2c:5e:39:c0:20:22:f2:
         57:f0:48:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:42:57 2026 by rpki-client