This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/YivW_0JV1PXQKNZNuU-YZa-0178.asa
File:                     YivW_0JV1PXQKNZNuU-YZa-0178.asa (raw, json)
Hash identifier:          UK5xEl6Yl9PtluY9Smceeot0bF0az/oSTMQ4CgDOsRs=
Subject key identifier:   62:2B:D6:FF:42:55:D4:F5:D0:28:D6:4D:B9:4F:98:65:AF:B4:D7:BF
Certificate issuer:       /CN=e24bc2870de2599daf66497f5729c74b33ef993a
Certificate serial:       019BFA5CE3F6966C5CA3862B67A6E8E45AB0
Authority key identifier: E2:4B:C2:87:0D:E2:59:9D:AF:66:49:7F:57:29:C7:4B:33:EF:99:3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/YivW_0JV1PXQKNZNuU-YZa-0178.asa
Signing time:             Mon 26 Jan 2026 12:52:30 +0000
ASPA not before:          Mon 26 Jan 2026 12:52:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            16374
Providers:                AS: 213973
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:5c:e3:f6:96:6c:5c:a3:86:2b:67:a6:e8:e4:5a:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e24bc2870de2599daf66497f5729c74b33ef993a
        Validity
            Not Before: Jan 26 12:52:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=622bd6ff4255d4f5d028d64db94f9865afb4d7bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:62:ba:fa:99:9a:69:ab:ea:eb:70:4d:b0:e6:
                    3e:e6:25:05:80:e9:bf:e1:38:57:38:7b:7e:0c:48:
                    f6:f6:c1:df:6f:52:0b:8d:1f:32:35:6a:17:16:cd:
                    53:48:0d:22:31:44:6f:cf:c5:26:79:59:a9:c6:9c:
                    ac:46:ab:e9:fe:7a:f5:f1:29:00:9f:5f:50:19:96:
                    c6:59:c0:9a:d0:d2:e6:bb:5a:9c:c8:46:51:76:df:
                    75:39:3f:c3:52:63:fa:85:f6:fb:a9:d9:d9:d7:dd:
                    ad:a2:51:bf:e2:5e:77:83:e2:21:6b:dd:dc:8b:c3:
                    a9:10:8a:6b:bc:8e:e7:f8:1c:0e:e5:34:49:37:27:
                    ec:b6:59:0b:eb:7d:31:70:8a:48:d9:74:fa:b0:2f:
                    e9:f1:6e:f9:34:c4:9b:c0:73:1e:b1:72:a1:f1:dc:
                    19:16:df:12:93:18:ad:1b:1d:46:0f:43:58:c8:df:
                    7a:86:02:19:b4:8b:0d:66:e2:ce:05:6c:02:b3:b4:
                    7e:db:fe:a3:69:23:4d:f7:08:3a:1e:61:74:59:cc:
                    bb:7b:02:5c:07:f8:49:36:41:20:b1:3b:58:fd:0b:
                    60:98:71:ed:23:bb:ca:2e:85:d5:07:9c:9b:51:07:
                    fc:08:e9:fa:9a:f2:f3:86:7d:e2:c4:6a:fd:1a:34:
                    e0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:2B:D6:FF:42:55:D4:F5:D0:28:D6:4D:B9:4F:98:65:AF:B4:D7:BF
            X509v3 Authority Key Identifier:
                keyid:E2:4B:C2:87:0D:E2:59:9D:AF:66:49:7F:57:29:C7:4B:33:EF:99:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/YivW_0JV1PXQKNZNuU-YZa-0178.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16374

    Signature Algorithm: sha256WithRSAEncryption
         0b:51:06:1b:cf:2f:b8:c7:32:42:04:ec:3a:2f:84:2f:d4:3f:
         da:46:90:e7:b5:46:4a:a1:c5:89:d4:37:be:2d:cc:ba:23:44:
         ff:69:67:86:57:b7:a8:16:60:6f:52:81:c5:47:c9:7a:37:7a:
         cf:b6:3a:8a:07:2e:d5:67:de:4f:ad:75:65:89:42:2b:81:02:
         55:b3:1b:96:92:83:c8:7a:a2:c8:ae:36:17:05:af:8e:52:ae:
         fd:ba:cf:b6:40:10:f4:b9:ce:ba:b0:b8:61:9f:79:67:bb:d3:
         65:26:57:00:df:a0:47:b1:cf:24:a1:4b:19:71:7a:36:45:32:
         ba:a1:08:9a:a2:74:7c:a7:7a:5f:e7:45:12:a0:80:f0:b5:c4:
         63:b1:35:a9:9a:f7:67:a9:ff:83:cd:67:7c:e8:cb:48:67:08:
         b0:93:a6:09:74:70:a2:1d:79:8d:27:18:e6:3e:54:31:d1:8c:
         63:d0:3d:79:71:c2:28:8b:96:da:84:36:86:35:40:45:9e:38:
         fb:a9:93:88:f8:35:d0:37:fe:20:5e:3c:91:d4:16:33:d6:f3:
         96:39:9c:f4:8e:54:ff:04:b9:39:65:97:72:8e:9b:0a:44:c7:
         65:a7:f3:42:31:2b:5b:f6:c4:cf:df:3a:32:71:6e:9c:c7:a0:
         b6:f9:44:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:42:05 2026 by rpki-client