This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/YCz7-CkEVhCfF1Yx2osR16ioZHU.asa
File:                     YCz7-CkEVhCfF1Yx2osR16ioZHU.asa (raw, json)
Hash identifier:          HqY7WylV2rDv4zE6nPFV+XcytLTw/YOLekrTPYUG/rs=
Subject key identifier:   60:2C:FB:F8:29:04:56:10:9F:17:56:31:DA:8B:11:D7:A8:A8:64:75
Certificate issuer:       /CN=c65613d5999f3632985ed89a02efaabd1890ba09
Certificate serial:       019B376A91F99CAF96E4A0CA4AF21E8CE7F7
Authority key identifier: C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/YCz7-CkEVhCfF1Yx2osR16ioZHU.asa
Signing time:             Fri 19 Dec 2025 16:21:29 +0000
ASPA not before:          Fri 19 Dec 2025 16:21:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            215492
Providers:                AS: 174
                          AS: 6939
                          AS: 16509
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 19:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:37:6a:91:f9:9c:af:96:e4:a0:ca:4a:f2:1e:8c:e7:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c65613d5999f3632985ed89a02efaabd1890ba09
        Validity
            Not Before: Dec 19 16:21:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=602cfbf8290456109f175631da8b11d7a8a86475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:82:1d:2b:71:14:57:e6:fb:18:e4:6f:ef:05:
                    4d:47:91:f3:1a:ca:83:8a:67:ea:a2:1c:dc:a0:7f:
                    26:6f:3f:1c:00:fe:00:ea:32:50:3c:bc:1f:50:ba:
                    f6:62:8f:02:35:14:bc:c9:d9:2e:8d:14:cb:6e:28:
                    e7:bb:b0:ad:78:09:f6:9e:d9:45:9b:0c:b3:d0:57:
                    ef:23:e1:3e:5a:bd:c5:2c:69:e9:3c:49:ff:21:c9:
                    0f:86:43:6d:7d:d3:4c:d3:23:bc:5e:73:26:6f:6e:
                    72:39:e0:b2:7a:77:61:83:96:ee:a4:d6:4a:c1:55:
                    4d:0d:16:50:91:b1:95:e8:ac:f2:7b:18:2b:b7:c1:
                    d3:25:44:33:42:33:5f:56:4d:28:22:cd:ac:c9:51:
                    2e:3a:55:d6:0d:b5:5a:67:a8:3f:b7:28:9d:df:e7:
                    e0:a8:33:dc:ee:db:37:62:ba:36:bd:9e:59:b1:46:
                    7f:27:c6:45:e7:30:3d:c3:33:8b:02:77:8e:b8:39:
                    75:ee:f0:70:ef:eb:b5:ab:39:d4:f6:92:1c:42:be:
                    db:be:72:f2:a9:4b:36:a3:e5:24:11:2e:4c:30:33:
                    4c:d0:d3:dd:c4:ce:5e:59:a7:8d:7d:6e:7e:af:a6:
                    b2:78:30:85:ae:dc:65:da:83:1e:f0:cd:d9:ea:66:
                    2b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:2C:FB:F8:29:04:56:10:9F:17:56:31:DA:8B:11:D7:A8:A8:64:75
            X509v3 Authority Key Identifier:
                keyid:C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/YCz7-CkEVhCfF1Yx2osR16ioZHU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215492

    Signature Algorithm: sha256WithRSAEncryption
         15:e1:9d:32:94:78:23:f2:74:81:3a:a6:76:62:7f:99:94:65:
         a0:d6:4a:a8:cc:7e:df:a8:4e:6d:9b:d9:a2:74:a4:93:7c:c8:
         e9:1d:4b:b5:b0:3a:df:c2:86:fe:71:d8:6a:1c:bb:8a:97:27:
         51:7a:98:12:58:8b:f0:89:d1:1a:b4:cb:03:2e:a6:b9:37:0a:
         d5:24:d5:c7:2a:0d:ec:fb:ef:34:75:21:60:c7:f3:82:bd:1e:
         b0:89:6a:cf:03:26:97:94:06:6b:4b:b3:cf:29:1b:01:77:a5:
         9a:1e:49:2d:2f:68:24:00:ba:39:f6:0d:72:82:e4:a9:5b:43:
         74:7a:6a:57:38:12:51:e1:70:39:af:f3:c3:12:13:8f:99:a6:
         af:64:6b:82:9e:7d:94:a8:9d:e0:da:e1:fd:70:3e:8c:4c:4a:
         a9:df:6f:c0:3b:4e:a4:54:ce:23:07:73:40:4e:7e:a7:21:e0:
         87:14:1c:5f:52:c4:1a:1c:10:3e:c7:22:2c:d5:84:b6:52:66:
         9a:0a:bc:a7:91:af:f9:01:49:23:68:a9:ff:87:b4:cd:f9:30:
         ac:81:a4:e8:b8:13:25:ee:05:c8:e7:1d:ef:a7:ba:40:74:ad:
         44:fe:89:af:15:d4:0a:c3:d4:12:21:eb:24:23:60:f1:ad:69:
         75:51:2f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 05:19:00 2025 by rpki-client