This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf krill.starlamp.su/repo/starlamp/0/AS214675.asa
File:                     AS214675.asa (raw, json)
Hash identifier:          HWOmXzUwALfB4lvNwu30MokJHdZOmic5rwduYz2MzkA=
Subject key identifier:   22:BC:C7:97:A9:33:FD:01:C9:24:12:F7:F7:77:B5:06:58:AB:B8:D7
Certificate issuer:       /CN=8568bf579f56f4139d364514d84ea5ee01cc8048
Certificate serial:       52921C774A21B987EF828B08550EF82352EDCC36
Authority key identifier: 85:68:BF:57:9F:56:F4:13:9D:36:45:14:D8:4E:A5:EE:01:CC:80:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hWi_V59W9BOdNkUU2E6l7gHMgEg.cer
Subject info access:      rsync://krill.starlamp.su/repo/starlamp/0/AS214675.asa
Signing time:             Wed 17 Dec 2025 16:28:52 +0000
ASPA not before:          Wed 17 Dec 2025 16:23:52 +0000
ASPA not after:           Wed 16 Dec 2026 16:28:52 +0000
Customer ASID:            214675
Providers:                AS: 6939
                          AS: 9663
                          AS: 11967
                          AS: 34872
                          AS: 34927
                          AS: 38074
                          AS: 41051
                          AS: 63798
                          AS: 150369
                          AS: 214757
                          AS: 215828
                          AS: 216324
                          AS: 270013
Validation:               OK
Signature path:           rsync://krill.starlamp.su/repo/starlamp/0/8568BF579F56F4139D364514D84EA5EE01CC8048.crl
                          rsync://krill.starlamp.su/repo/starlamp/0/8568BF579F56F4139D364514D84EA5EE01CC8048.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hWi_V59W9BOdNkUU2E6l7gHMgEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 14:53:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:92:1c:77:4a:21:b9:87:ef:82:8b:08:55:0e:f8:23:52:ed:cc:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8568bf579f56f4139d364514d84ea5ee01cc8048
        Validity
            Not Before: Dec 17 16:23:52 2025 GMT
            Not After : Dec 16 16:28:52 2026 GMT
        Subject: CN=22BCC797A933FD01C92412F7F777B50658ABB8D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ee:e5:3a:82:e4:3f:1d:b1:88:2e:fb:e4:b9:
                    8f:9d:f9:8f:f2:c1:70:3b:ed:89:b6:80:54:9c:e3:
                    73:0c:56:06:7e:89:ff:0e:ca:54:8b:0c:a9:15:2d:
                    11:d8:69:57:48:24:38:97:1b:df:26:79:8f:94:db:
                    4f:01:6d:41:cb:29:bc:3f:97:fb:8e:06:6e:f1:82:
                    a8:d9:a5:6f:8e:47:5e:db:03:0f:e2:da:1d:3b:fa:
                    21:6d:82:09:ce:de:9f:65:39:49:fa:1a:ce:59:82:
                    81:d0:04:6c:69:81:db:8f:cf:2b:fd:17:3d:92:e9:
                    39:1b:f8:bc:4a:d2:a2:df:c8:40:35:42:52:19:99:
                    63:c1:9d:82:f7:8f:37:d9:56:93:db:f2:8e:58:ab:
                    b0:ed:55:ac:8f:54:de:bd:04:ba:08:2a:05:5c:2b:
                    82:c5:c3:41:6a:d2:dd:7d:d3:7b:ca:9b:8a:4b:e4:
                    8a:cb:9d:89:cd:8c:24:c4:ed:fc:c2:db:70:66:0e:
                    7e:30:e6:54:de:a9:ee:f6:be:9a:b5:c7:30:43:2b:
                    1b:21:fb:b8:cb:0f:6e:e0:1e:d8:22:d3:56:c8:4c:
                    98:cf:b2:ca:75:8b:70:e5:a5:b4:b1:c6:8c:db:8a:
                    b8:2f:35:6c:1f:46:aa:f1:8c:e5:84:dc:ef:ef:40:
                    5b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:BC:C7:97:A9:33:FD:01:C9:24:12:F7:F7:77:B5:06:58:AB:B8:D7
            X509v3 Authority Key Identifier:
                keyid:85:68:BF:57:9F:56:F4:13:9D:36:45:14:D8:4E:A5:EE:01:CC:80:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.starlamp.su/repo/starlamp/0/8568BF579F56F4139D364514D84EA5EE01CC8048.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWi_V59W9BOdNkUU2E6l7gHMgEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.starlamp.su/repo/starlamp/0/AS214675.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214675

    Signature Algorithm: sha256WithRSAEncryption
         56:64:5b:70:5b:cb:ca:6b:17:b0:ae:d9:1e:87:68:be:8f:18:
         23:96:52:b0:cb:4c:bd:25:52:9d:22:f8:aa:9a:8d:14:19:bd:
         8c:2f:65:ff:7e:39:91:ff:c5:fc:37:0a:55:f7:6c:2c:03:4e:
         75:c4:df:ad:77:ea:74:60:a8:6c:a6:46:10:3b:cf:32:ff:3b:
         1a:40:a8:24:38:45:23:79:8d:5f:59:8f:5a:34:e6:f0:0d:15:
         41:e2:ad:23:80:84:a1:34:bc:b9:02:cf:8d:46:b9:e0:f5:b5:
         76:ae:0a:3a:cb:98:36:8b:5c:fb:25:98:47:15:3d:db:41:c8:
         81:f1:85:cc:ed:e4:57:43:b9:ff:a7:7f:8e:50:13:ea:30:f3:
         ad:bd:32:b3:80:8a:0d:3e:5c:41:09:0f:7d:e7:f1:06:43:8e:
         51:0b:ce:10:3b:ad:be:27:be:ce:d2:47:ff:ea:8f:8f:d2:42:
         1c:e0:3a:63:d9:bb:a5:a7:06:b8:76:fb:0a:66:e3:62:a8:db:
         f2:af:53:2d:ab:3f:b7:47:c1:52:af:3b:a2:97:f7:0f:54:da:
         06:ed:89:6a:44:c1:d1:a2:ea:3c:5f:2c:25:e0:05:59:f4:fc:
         b6:54:67:15:c3:ae:bf:fa:8f:6d:28:62:c2:9a:86:e6:da:39:
         48:ed:fd:d4
-----BEGIN CERTIFICATE-----
MIIEozCCA4ugAwIBAgIUUpIcd0ohuYfvgosIVQ74I1LtzDYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU2OGJmNTc5ZjU2ZjQxMzlkMzY0NTE0ZDg0ZWE1ZWUw
MWNjODA0ODAeFw0yNTEyMTcxNjIzNTJaFw0yNjEyMTYxNjI4NTJaMDMxMTAvBgNV
BAMTKDIyQkNDNzk3QTkzM0ZEMDFDOTI0MTJGN0Y3NzdCNTA2NThBQkI4RDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd7uU6guQ/HbGILvvkuY+d+Y/y
wXA77Ym2gFSc43MMVgZ+if8OylSLDKkVLRHYaVdIJDiXG98meY+U208BbUHLKbw/
l/uOBm7xgqjZpW+OR17bAw/i2h07+iFtggnO3p9lOUn6Gs5ZgoHQBGxpgduPzyv9
Fz2S6Tkb+LxK0qLfyEA1QlIZmWPBnYL3jzfZVpPb8o5Yq7DtVayPVN69BLoIKgVc
K4LFw0Fq0t1903vKm4pL5IrLnYnNjCTE7fzC23BmDn4w5lTeqe72vpq1xzBDKxsh
+7jLD27gHtgi01bITJjPssp1i3DlpbSxxozbirgvNWwfRqrxjOWE3O/vQFt1AgMB
AAGjggGtMIIBqTAdBgNVHQ4EFgQUIrzHl6kz/QHJJBL393e1BliruNcwHwYDVR0j
BBgwFoAUhWi/V59W9BOdNkUU2E6l7gHMgEgwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud
HwRgMF4wXKBaoFiGVnJzeW5jOi8va3JpbGwuc3RhcmxhbXAuc3UvcmVwby9zdGFy
bGFtcC8wLzg1NjhCRjU3OUY1NkY0MTM5RDM2NDUxNEQ4NEVBNUVFMDFDQzgwNDgu
Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9oV2lfVjU5VzlCT2ROa1VVMkU2bDdn
SE1nRWcuY2VyMFIGCCsGAQUFBwELBEYwRDBCBggrBgEFBQcwC4Y2cnN5bmM6Ly9r
cmlsbC5zdGFybGFtcC5zdS9yZXBvL3N0YXJsYW1wLzAvQVMyMTQ2NzUuYXNhMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID
A0aTMA0GCSqGSIb3DQEBCwUAA4IBAQBWZFtwW8vKaxewrtkeh2i+jxgjllKwy0y9
JVKdIviqmo0UGb2ML2X/fjmR/8X8NwpV92wsA051xN+td+p0YKhspkYQO88y/zsa
QKgkOEUjeY1fWY9aNObwDRVB4q0jgIShNLy5As+NRrng9bV2rgo6y5g2i1z7JZhH
FT3bQciB8YXM7eRXQ7n/p3+OUBPqMPOtvTKzgIoNPlxBCQ995/EGQ45RC84QO62+
J77O0kf/6o+P0kIc4Dpj2bulpwa4dvsKZuNiqNvyr1Mtqz+3R8FSrzuil/cPVNoG
7YlqRMHRouo8Xywl4AVZ9Py2VGcVw66/+o9tKGLCmobm2jlI7f3U
-----END CERTIFICATE-----
Generated at Sun Dec 21 04:05:17 2025 by rpki-client