This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/yxEYcpdgjVKCdkhJy8rF5iMQGO4.asa
File:                     yxEYcpdgjVKCdkhJy8rF5iMQGO4.asa (raw, json)
Hash identifier:          AovG2uwZXKqTd4wXZfurQVyhjiGtTgIMeSk6zw0Qycc=
Subject key identifier:   CB:11:18:72:97:60:8D:52:82:76:48:49:CB:CA:C5:E6:23:10:18:EE
Certificate issuer:       /CN=e80ec31635f4d91bb11312ba0a3465c18f233f68
Certificate serial:       019AD1C4D3C81BD234DB6E809DB9A782140C
Authority key identifier: E8:0E:C3:16:35:F4:D9:1B:B1:13:12:BA:0A:34:65:C1:8F:23:3F:68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/yxEYcpdgjVKCdkhJy8rF5iMQGO4.asa
Signing time:             Sat 29 Nov 2025 22:38:48 +0000
ASPA not before:          Sat 29 Nov 2025 22:38:48 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            204104
Providers:                AS: 41881
                          AS: 42337
                          AS: 43754
                          AS: 62403
                          AS: 205647
                          AS: 211904
Validation:               Failed, certificate revoked on Wed 03 Dec 2025 15:35:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:d1:c4:d3:c8:1b:d2:34:db:6e:80:9d:b9:a7:82:14:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e80ec31635f4d91bb11312ba0a3465c18f233f68
        Validity
            Not Before: Nov 29 22:38:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=cb11187297608d5282764849cbcac5e6231018ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:18:fd:a9:a8:04:ca:27:06:26:bc:13:ea:00:
                    e3:cf:58:21:7d:63:1c:6e:d6:d9:4c:95:33:ec:13:
                    58:f1:8f:11:3c:36:ad:41:50:b3:64:ec:97:95:43:
                    d9:29:2a:e5:de:5c:2c:e2:3b:6d:cc:92:76:fc:2b:
                    5b:be:52:28:73:42:58:95:21:b1:a7:2a:7b:0c:56:
                    2f:bf:6f:14:45:66:51:c6:35:85:83:58:59:14:dc:
                    7e:0c:c7:9e:c7:ee:a2:99:67:e4:66:65:b7:86:8d:
                    17:21:0f:6e:52:9e:04:04:8b:5d:3d:c9:21:ad:88:
                    4e:5c:f0:73:bc:a7:c0:f2:99:0a:89:b4:a3:47:2c:
                    9c:b9:e9:64:68:25:d9:52:30:41:c3:3b:c4:ee:e6:
                    b4:50:4d:b8:d1:b3:27:87:fc:0b:5c:22:a9:e4:0a:
                    11:2f:ac:94:4e:ce:1f:93:76:58:62:46:db:fd:09:
                    91:5f:53:7e:9d:30:1a:8b:bd:52:d3:bc:a4:c9:79:
                    12:da:6c:7e:a7:86:45:47:19:11:4e:0d:64:94:c7:
                    59:88:cf:db:7c:03:6a:76:7b:95:9f:31:ef:ba:f2:
                    7a:15:d0:9f:cf:3c:dd:2b:84:07:d4:18:bc:f0:0b:
                    20:31:2b:ef:66:8f:8e:60:ec:47:db:6f:c4:b2:71:
                    7e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:11:18:72:97:60:8D:52:82:76:48:49:CB:CA:C5:E6:23:10:18:EE
            X509v3 Authority Key Identifier:
                keyid:E8:0E:C3:16:35:F4:D9:1B:B1:13:12:BA:0A:34:65:C1:8F:23:3F:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/yxEYcpdgjVKCdkhJy8rF5iMQGO4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204104

    Signature Algorithm: sha256WithRSAEncryption
         86:64:06:43:d4:d2:62:ac:e6:8b:17:cc:4f:b1:83:ba:c8:05:
         95:43:34:39:99:60:49:5d:7f:88:4a:3f:91:70:65:4f:bf:9d:
         62:bb:ce:73:03:bc:93:3e:8c:68:0f:3d:af:dd:fc:f3:74:f7:
         b6:a0:c0:df:ac:b3:18:0d:2f:4c:53:f0:76:17:e8:af:3d:29:
         e1:2d:d5:fb:62:06:e3:ee:eb:0f:89:e8:c8:af:37:f1:71:0b:
         f5:ba:aa:63:64:91:0f:f7:45:63:6a:27:bf:0f:59:33:b1:6b:
         19:62:43:37:7a:36:cd:e7:4d:bf:ad:93:6e:f8:e5:f8:c8:d3:
         7a:dc:03:cd:35:ef:ec:ba:4f:d8:5d:49:1a:36:0d:7a:4f:bd:
         1d:a1:26:9a:55:34:20:03:1b:41:91:01:c2:c1:42:bc:a9:1c:
         5b:c1:76:97:37:a8:7a:7f:11:11:27:84:15:5d:38:12:9e:c9:
         82:1f:bb:65:c2:2d:42:cd:6e:2b:8e:1a:30:56:51:99:63:4b:
         a3:8e:fb:50:e3:7d:f6:37:02:c2:9a:ac:6d:fd:da:ae:8a:3c:
         c1:99:20:ad:2b:94:dc:4e:64:98:d3:5d:70:b2:83:04:8a:60:
         19:60:6a:fd:59:45:8a:84:31:1b:d2:86:2f:44:a1:55:e4:c1:
         90:86:24:7e
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZrRxNPIG9I0226AnbmnghQMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4MGVjMzE2MzVmNGQ5MWJiMTEzMTJiYTBhMzQ2NWMxOGYy
MzNmNjgwHhcNMjUxMTI5MjIzODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjExMTg3Mjk3NjA4ZDUyODI3NjQ4NDljYmNhYzVlNjIzMTAxOGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRj9qagEyicGJrwT6gDjz1ghfWMc
btbZTJUz7BNY8Y8RPDatQVCzZOyXlUPZKSrl3lws4jttzJJ2/CtbvlIoc0JYlSGx
pyp7DFYvv28URWZRxjWFg1hZFNx+DMeex+6imWfkZmW3ho0XIQ9uUp4EBItdPckh
rYhOXPBzvKfA8pkKibSjRyycuelkaCXZUjBBwzvE7ua0UE240bMnh/wLXCKp5AoR
L6yUTs4fk3ZYYkbb/QmRX1N+nTAai71S07ykyXkS2mx+p4ZFRxkRTg1klMdZiM/b
fANqdnuVnzHvuvJ6FdCfzzzdK4QH1Bi88AsgMSvvZo+OYOxH22/EsnF+xQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFMsRGHKXYI1SgnZIScvKxeYjEBjuMB8GA1UdIwQY
MBaAFOgOwxY19NkbsRMSugo0ZcGPIz9oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkE3REZqWDAyUnV4RXhLNkNqUmx3WThqUDJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8xMzA3MmYtMTc4ZC00ZjBjLTlmZmIt
NGRiZTEwYzNhNzFmLzEveXhFWWNwZGdqVktDZGtoSnk4ckY1aU1RR080LmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8xMzA3MmYtMTc4ZC00ZjBjLTlmZmItNGRiZTEwYzNhNzFm
LzEvNkE3REZqWDAyUnV4RXhLNkNqUmx3WThqUDJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMdSDANBgkqhkiG
9w0BAQsFAAOCAQEAhmQGQ9TSYqzmixfMT7GDusgFlUM0OZlgSV1/iEo/kXBlT7+d
YrvOcwO8kz6MaA89r93883T3tqDA36yzGA0vTFPwdhforz0p4S3V+2IG4+7rD4no
yK838XEL9bqqY2SRD/dFY2onvw9ZM7FrGWJDN3o2zedNv62Tbvjl+MjTetwDzTXv
7LpP2F1JGjYNek+9HaEmmlU0IAMbQZEBwsFCvKkcW8F2lzeoen8RESeEFV04Ep7J
gh+7ZcItQs1uK44aMFZRmWNLo477UON99jcCwpqsbf3aroo8wZkgrSuU3E5kmNNd
cLKDBIpgGWBq/VlFioQxG9KGL0ShVeTBkIYkfg==
-----END CERTIFICATE-----
Generated at Fri Dec 12 22:41:24 2025 by rpki-client