This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/ntyTSk72RSe0ZIrYeLH81RbxpHA.asa
File:                     ntyTSk72RSe0ZIrYeLH81RbxpHA.asa (raw, json)
Hash identifier:          iPI512YEQ0gn5dd5DCMPxy3EAFdTv8AI/1+OEDUHbSc=
Subject key identifier:   9E:DC:93:4A:4E:F6:45:27:B4:64:8A:D8:78:B1:FC:D5:16:F1:A4:70
Certificate issuer:       /CN=79a3b2c3622df9e87982ea8350978a6c9875a7c8
Certificate serial:       019B8FCDF718E46578DC9D46525AB825DB94
Authority key identifier: 79:A3:B2:C3:62:2D:F9:E8:79:82:EA:83:50:97:8A:6C:98:75:A7:C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/ntyTSk72RSe0ZIrYeLH81RbxpHA.asa
Signing time:             Mon 05 Jan 2026 20:16:38 +0000
ASPA not before:          Mon 05 Jan 2026 20:16:38 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            35639
Providers:                AS: 3255
                          AS: 6939
                          AS: 13249
                          AS: 15577
                          AS: 41568
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 23 Jan 2026 08:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:8f:cd:f7:18:e4:65:78:dc:9d:46:52:5a:b8:25:db:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a3b2c3622df9e87982ea8350978a6c9875a7c8
        Validity
            Not Before: Jan  5 20:16:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9edc934a4ef64527b4648ad878b1fcd516f1a470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b9:b9:5b:c7:fe:c8:18:a6:fe:c1:da:11:3a:
                    fb:af:3c:98:ec:f0:b3:71:4d:ab:a1:e8:38:86:a8:
                    84:50:56:4b:a7:d7:2a:d1:06:61:29:64:3e:61:04:
                    7a:01:63:f9:9b:74:31:37:6a:77:95:f3:7d:58:20:
                    21:c7:ab:12:60:2c:28:9f:1d:be:f6:58:09:7c:43:
                    82:41:a6:de:ea:8a:62:64:82:c3:c1:bb:90:71:e9:
                    e5:83:25:61:65:7c:d7:43:f3:f6:9a:6c:1e:0a:d7:
                    92:15:8b:be:a5:ba:71:e6:32:9e:f0:57:eb:b9:ec:
                    42:df:12:b3:34:c7:24:87:46:47:f1:ed:28:34:b3:
                    2b:af:83:ed:8f:17:eb:a4:f6:44:0f:af:75:fe:b1:
                    d7:f5:0b:1e:90:c9:fc:cb:ee:bf:5a:91:ed:04:bd:
                    a6:f1:b3:b7:b9:d2:d0:95:1c:9a:e2:5d:ef:70:86:
                    4c:3c:2f:b0:3b:2d:cb:d8:24:71:16:47:be:2c:32:
                    dc:d9:9e:81:ea:ba:3c:72:02:a4:96:7d:54:bb:d9:
                    23:cc:cc:04:2f:80:7c:ae:70:06:43:d9:7d:b0:6c:
                    25:fb:81:20:64:6b:09:0c:c3:88:5d:11:a8:a3:da:
                    b4:35:73:22:18:00:89:da:40:ad:60:fc:17:d9:22:
                    1c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:DC:93:4A:4E:F6:45:27:B4:64:8A:D8:78:B1:FC:D5:16:F1:A4:70
            X509v3 Authority Key Identifier:
                keyid:79:A3:B2:C3:62:2D:F9:E8:79:82:EA:83:50:97:8A:6C:98:75:A7:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/ntyTSk72RSe0ZIrYeLH81RbxpHA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  35639

    Signature Algorithm: sha256WithRSAEncryption
         0e:22:05:e0:e6:c3:38:7d:aa:d8:c3:fa:15:31:96:b3:c4:bd:
         cb:59:e7:ed:8c:77:f1:48:06:42:51:38:e6:44:5c:17:b6:cd:
         a1:fc:b7:f5:8b:4a:fc:a5:d1:60:cd:6f:32:cb:7c:11:ce:83:
         dd:90:90:64:dd:77:b5:57:4f:14:53:32:8d:ec:0a:e5:cf:4f:
         fa:38:f9:a2:55:24:61:20:1a:6a:df:bd:b4:32:e9:1c:17:3a:
         12:a9:f9:f5:f5:3f:0d:0e:4e:ff:06:ad:f0:2c:d6:a1:22:91:
         d6:48:5e:1f:58:bd:22:2e:51:02:32:11:6a:5f:21:5e:b4:e5:
         9b:ba:ec:43:3f:ad:19:14:ee:a1:c2:8b:1e:d9:ee:1b:fb:cd:
         85:86:9e:4d:58:e3:5a:7e:ba:c6:97:52:15:01:fe:8e:0d:86:
         be:b0:6c:2e:c6:90:83:71:2f:d1:e1:24:54:86:fd:83:08:45:
         2b:fa:58:c8:cf:7b:1c:42:31:67:30:c9:e6:73:26:b6:7a:e6:
         89:d5:ef:ca:53:ae:39:c3:f6:f4:1e:be:79:38:46:c5:90:32:
         72:47:88:23:eb:4e:be:06:a4:c6:81:f2:cf:50:9b:ef:b8:70:
         98:90:dc:23:e9:e9:0c:a2:57:58:6f:b1:9e:d3:11:05:59:a3:
         b8:15:68:af
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZuPzfcY5GV43J1GUlq4JduUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YTNiMmMzNjIyZGY5ZTg3OTgyZWE4MzUwOTc4YTZjOTg3
NWE3YzgwHhcNMjYwMTA1MjAxNjM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZWRjOTM0YTRlZjY0NTI3YjQ2NDhhZDg3OGIxZmNkNTE2ZjFhNDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLm5W8f+yBim/sHaETr7rzyY7PCz
cU2roeg4hqiEUFZLp9cq0QZhKWQ+YQR6AWP5m3QxN2p3lfN9WCAhx6sSYCwonx2+
9lgJfEOCQabe6opiZILDwbuQcenlgyVhZXzXQ/P2mmweCteSFYu+pbpx5jKe8Ffr
uexC3xKzNMckh0ZH8e0oNLMrr4PtjxfrpPZED691/rHX9QsekMn8y+6/WpHtBL2m
8bO3udLQlRya4l3vcIZMPC+wOy3L2CRxFke+LDLc2Z6B6ro8cgKkln1Uu9kjzMwE
L4B8rnAGQ9l9sGwl+4EgZGsJDMOIXRGoo9q0NXMiGACJ2kCtYPwX2SIcrwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFJ7ck0pO9kUntGSK2Hix/NUW8aRwMB8GA1UdIwQY
MBaAFHmjssNiLfnoeYLqg1CXimyYdafIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWFPeXcySXQtZWg1Z3VxRFVKZUtiSmgxcDhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9lNTA2OWItMWNhZC00NWE0LWE2MTkt
YzI0ZmY2ODJmN2FkLzEvbnR5VFNrNzJSU2UwWklyWWVMSDgxUmJ4cEhBLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9lNTA2OWItMWNhZC00NWE0LWE2MTktYzI0ZmY2ODJmN2Fk
LzEvZWFPeXcySXQtZWg1Z3VxRFVKZUtiSmgxcDhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCLNzANBgkqhkiG
9w0BAQsFAAOCAQEADiIF4ObDOH2q2MP6FTGWs8S9y1nn7Yx38UgGQlE45kRcF7bN
ofy39YtK/KXRYM1vMst8Ec6D3ZCQZN13tVdPFFMyjewK5c9P+jj5olUkYSAaat+9
tDLpHBc6Eqn59fU/DQ5O/wat8CzWoSKR1kheH1i9Ii5RAjIRal8hXrTlm7rsQz+t
GRTuocKLHtnuG/vNhYaeTVjjWn66xpdSFQH+jg2GvrBsLsaQg3Ev0eEkVIb9gwhF
K/pYyM97HEIxZzDJ5nMmtnrmidXvylOuOcP29B6+eThGxZAyckeII+tOvgakxoHy
z1Cb77hwmJDcI+npDKJXWG+xntMRBVmjuBVorw==
-----END CERTIFICATE-----
Generated at Thu Jan 22 10:39:39 2026 by rpki-client