This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/Jf2ybRPxCJRBz81M0sPHI9fL5Xc.asa
File:                     Jf2ybRPxCJRBz81M0sPHI9fL5Xc.asa (raw, json)
Hash identifier:          ccXR+qhmYk9GcwGl/n5URNgWvh69G6GfXIkJnkUXeww=
Subject key identifier:   25:FD:B2:6D:13:F1:08:94:41:CF:CD:4C:D2:C3:C7:23:D7:CB:E5:77
Certificate issuer:       /CN=61d39d74b17e691dd1b05221c6098caf5ee93a36
Certificate serial:       019C04756C359CEEF3A2CFE73FD3039DE4DA
Authority key identifier: 61:D3:9D:74:B1:7E:69:1D:D1:B0:52:21:C6:09:8C:AF:5E:E9:3A:36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YdOddLF-aR3RsFIhxgmMr17pOjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/Jf2ybRPxCJRBz81M0sPHI9fL5Xc.asa
Signing time:             Wed 28 Jan 2026 11:55:30 +0000
ASPA not before:          Wed 28 Jan 2026 11:55:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            212253
Providers:                AS: 35133
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YdOddLF-aR3RsFIhxgmMr17pOjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:04:75:6c:35:9c:ee:f3:a2:cf:e7:3f:d3:03:9d:e4:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61d39d74b17e691dd1b05221c6098caf5ee93a36
        Validity
            Not Before: Jan 28 11:55:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=25fdb26d13f1089441cfcd4cd2c3c723d7cbe577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:92:8f:da:8b:29:ee:9f:d9:7e:65:79:eb:d3:
                    ec:10:3f:c6:23:bf:0a:32:69:c8:2a:b4:92:b4:6f:
                    b2:c5:db:ad:09:29:98:20:ec:d9:c7:0e:5d:24:ae:
                    39:60:61:56:34:55:80:dd:5e:01:2d:36:f2:95:13:
                    b4:56:14:14:50:7e:35:4f:03:f5:72:64:4e:33:13:
                    4c:b4:b4:13:89:b7:77:29:28:8c:6a:0a:4e:64:f5:
                    59:b3:0e:f3:05:8e:6f:15:e1:90:cb:ae:5a:80:70:
                    56:5e:c3:68:a5:ce:5c:3a:fb:f1:75:ce:4a:82:5f:
                    92:d5:ef:1c:e3:d3:fa:15:8d:68:a4:f0:96:47:2c:
                    04:77:e3:9b:64:af:99:90:a4:de:03:b4:52:b9:ec:
                    f0:78:ee:d4:b7:02:d3:9f:2e:81:ee:37:16:f9:7d:
                    fb:96:78:1f:14:38:fc:ab:64:e0:61:98:08:f9:fb:
                    98:23:61:28:18:2e:b8:ea:6e:56:99:ed:b2:95:dc:
                    6e:49:a6:3b:3b:2e:f5:98:6b:c7:6d:14:af:ce:a8:
                    4f:08:13:42:80:83:08:7c:9c:82:82:6d:a0:43:55:
                    6d:72:e0:6d:91:ad:a9:95:fe:5e:19:39:d5:8e:66:
                    c7:80:48:05:5f:4f:f7:3f:62:e3:19:f5:fe:a0:90:
                    e8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:FD:B2:6D:13:F1:08:94:41:CF:CD:4C:D2:C3:C7:23:D7:CB:E5:77
            X509v3 Authority Key Identifier:
                keyid:61:D3:9D:74:B1:7E:69:1D:D1:B0:52:21:C6:09:8C:AF:5E:E9:3A:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdOddLF-aR3RsFIhxgmMr17pOjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/Jf2ybRPxCJRBz81M0sPHI9fL5Xc.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212253

    Signature Algorithm: sha256WithRSAEncryption
         00:14:2f:b6:d9:0f:8a:d5:80:e8:b6:4b:61:40:23:c7:95:63:
         89:67:11:4b:3e:17:b2:5c:fe:c9:a3:08:26:8e:eb:4d:02:76:
         65:7e:92:8b:c8:76:20:fb:63:d8:de:d8:25:d4:1c:a6:2e:be:
         a3:66:42:a0:16:5f:57:60:55:d8:0c:26:24:88:31:47:77:c1:
         51:10:05:4c:7d:ed:d2:1d:8e:81:9e:d6:0b:9c:ae:48:f3:15:
         01:7b:ea:0d:5f:6f:a8:ff:79:88:ca:f8:f5:83:35:24:eb:7d:
         55:5b:e4:a3:7b:93:6f:61:5d:39:3c:c5:36:35:44:c3:98:52:
         9b:f6:39:cc:89:da:39:63:14:23:d6:6e:f9:b9:14:9d:9b:9f:
         08:53:f3:c2:51:75:b3:72:cf:e8:72:ca:71:ba:b1:2c:68:9f:
         20:5f:6e:c4:56:f8:0c:0b:84:66:1e:f2:42:eb:bb:7c:21:e8:
         cb:42:c9:75:c3:c1:6c:9d:64:09:ab:6c:18:44:72:d6:90:53:
         80:99:9a:ec:0e:40:7b:fd:d2:42:14:11:57:0b:e7:2b:54:30:
         ef:cd:5a:c2:35:6f:ed:4f:f4:db:f5:ce:b4:3a:8f:e0:5c:22:
         d8:d5:d7:b0:12:05:4a:1c:b8:2e:35:3f:ff:29:de:c6:66:85:
         dd:6c:53:fc
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZwEdWw1nO7zos/nP9MDneTaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxZDM5ZDc0YjE3ZTY5MWRkMWIwNTIyMWM2MDk4Y2FmNWVl
OTNhMzYwHhcNMjYwMTI4MTE1NTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWZkYjI2ZDEzZjEwODk0NDFjZmNkNGNkMmMzYzcyM2Q3Y2JlNTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JKP2osp7p/ZfmV569PsED/GI78K
MmnIKrSStG+yxdutCSmYIOzZxw5dJK45YGFWNFWA3V4BLTbylRO0VhQUUH41TwP1
cmROMxNMtLQTibd3KSiMagpOZPVZsw7zBY5vFeGQy65agHBWXsNopc5cOvvxdc5K
gl+S1e8c49P6FY1opPCWRywEd+ObZK+ZkKTeA7RSuezweO7UtwLTny6B7jcW+X37
lngfFDj8q2TgYZgI+fuYI2EoGC646m5Wme2yldxuSaY7Oy71mGvHbRSvzqhPCBNC
gIMIfJyCgm2gQ1VtcuBtka2plf5eGTnVjmbHgEgFX0/3P2LjGfX+oJDogQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFCX9sm0T8QiUQc/NTNLDxyPXy+V3MB8GA1UdIwQY
MBaAFGHTnXSxfmkd0bBSIcYJjK9e6To2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWRPZGRMRi1hUjNSc0ZJaHhnbU1yMTdwT2pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS83Y2EyZjItYmYxMy00ZDE4LWE4ZGQt
OTgwNTExZGMwNWFlLzEvSmYyeWJSUHhDSlJCejgxTTBzUEhJOWZMNVhjLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS83Y2EyZjItYmYxMy00ZDE4LWE4ZGQtOTgwNTExZGMwNWFl
LzEvWWRPZGRMRi1hUjNSc0ZJaHhnbU1yMTdwT2pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM9HTANBgkqhkiG
9w0BAQsFAAOCAQEAABQvttkPitWA6LZLYUAjx5VjiWcRSz4Xslz+yaMIJo7rTQJ2
ZX6Si8h2IPtj2N7YJdQcpi6+o2ZCoBZfV2BV2AwmJIgxR3fBURAFTH3t0h2OgZ7W
C5yuSPMVAXvqDV9vqP95iMr49YM1JOt9VVvko3uTb2FdOTzFNjVEw5hSm/Y5zIna
OWMUI9Zu+bkUnZufCFPzwlF1s3LP6HLKcbqxLGifIF9uxFb4DAuEZh7yQuu7fCHo
y0LJdcPBbJ1kCatsGERy1pBTgJma7A5Ae/3SQhQRVwvnK1Qw781awjVv7U/02/XO
tDqP4Fwi2NXXsBIFShy4LjU//ynexmaF3WxT/A==
-----END CERTIFICATE-----
Generated at Mon Feb 2 04:40:51 2026 by rpki-client