This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/AS202939.asa
File:                     AS202939.asa (raw, json)
Hash identifier:          FvC+uVfcvzmqWGVss4EmlGumfYisXasIIp+ZDydRm3A=
Subject key identifier:   DB:A7:FF:BA:0A:D9:86:66:BC:95:DD:77:21:5C:15:C7:59:FE:CE:B9
Certificate issuer:       /CN=40f02fb7dfe9ac800a1b1b693709c2f03c5ed98b
Certificate serial:       326E231F34575461FB5B32BBA2D131AB2BD9CF38
Authority key identifier: 40:F0:2F:B7:DF:E9:AC:80:0A:1B:1B:69:37:09:C2:F0:3C:5E:D9:8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/AS202939.asa
Signing time:             Mon 08 Dec 2025 13:43:10 +0000
ASPA not before:          Mon 08 Dec 2025 13:38:10 +0000
ASPA not after:           Mon 07 Dec 2026 13:43:10 +0000
Customer ASID:            202939
Providers:                AS: 6939
                          AS: 7720
                          AS: 14447
                          AS: 31898
                          AS: 34927
                          AS: 41051
                          AS: 44324
                          AS: 202662
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 13:43:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:6e:23:1f:34:57:54:61:fb:5b:32:bb:a2:d1:31:ab:2b:d9:cf:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f02fb7dfe9ac800a1b1b693709c2f03c5ed98b
        Validity
            Not Before: Dec  8 13:38:10 2025 GMT
            Not After : Dec  7 13:43:10 2026 GMT
        Subject: CN=DBA7FFBA0AD98666BC95DD77215C15C759FECEB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:32:02:b0:93:d0:6a:02:ed:70:17:71:3b:27:
                    7e:81:3d:b4:f7:ba:bc:3a:8d:3f:bb:9d:03:e7:4f:
                    92:07:5a:61:a2:4b:75:32:1d:4f:81:af:2a:dc:7a:
                    28:ea:d8:d3:f3:4b:53:08:58:a7:e3:59:32:89:cb:
                    9b:1b:2c:0f:a3:6b:b0:cb:53:e1:78:d6:14:60:5b:
                    34:ec:80:6f:36:fc:a5:0b:60:5f:20:3d:ac:52:d8:
                    b0:44:b2:ab:f1:ff:d4:bc:ef:d8:4e:2d:a8:fe:4c:
                    03:47:13:c5:b5:8a:1b:4d:d3:d1:b0:c2:75:3b:de:
                    ee:09:36:84:1e:8b:ec:63:01:58:04:4f:dc:db:95:
                    22:c5:c1:98:c5:75:ac:01:5e:3d:19:9f:e7:4d:35:
                    f8:b2:58:af:39:11:0f:df:f9:30:96:52:67:9d:74:
                    b4:8c:89:84:62:b1:0f:f5:6f:03:39:2c:07:11:0d:
                    e3:4d:87:5a:b6:23:bc:7f:dd:f3:14:1a:f6:cf:0c:
                    fe:a0:ac:d3:42:9f:27:fc:c2:ab:ae:98:45:50:f7:
                    c0:74:4b:80:23:6b:20:7b:71:15:f5:d6:62:84:9c:
                    ad:db:a3:17:81:42:7c:0e:05:a8:09:b7:c2:61:a0:
                    5d:08:51:c6:d4:ae:41:ad:8d:14:16:67:70:e0:2c:
                    d6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A7:FF:BA:0A:D9:86:66:BC:95:DD:77:21:5C:15:C7:59:FE:CE:B9
            X509v3 Authority Key Identifier:
                keyid:40:F0:2F:B7:DF:E9:AC:80:0A:1B:1B:69:37:09:C2:F0:3C:5E:D9:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/AS202939.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202939

    Signature Algorithm: sha256WithRSAEncryption
         3b:a2:be:9d:87:ec:5e:ce:b1:c8:4a:bd:db:e8:a3:9d:83:fe:
         6f:6c:c8:3d:75:a3:09:32:dd:c9:36:49:7e:91:6a:00:13:40:
         ea:42:59:dd:eb:50:e9:a0:8f:59:86:a2:96:86:9e:aa:47:39:
         69:26:c2:40:61:30:7f:f1:b6:26:8e:ae:49:df:7b:8a:d2:7b:
         d1:0b:bc:a2:48:6c:9a:3c:f5:0f:f6:0e:78:cb:e2:0a:6a:18:
         7e:bf:66:ec:2a:91:24:82:d6:6e:d6:eb:48:7c:c5:73:e5:48:
         e9:0c:23:65:93:8b:71:34:77:12:f7:a9:1e:f3:c1:6d:0d:d7:
         32:20:86:9b:20:ce:2c:98:3b:3c:20:76:10:47:26:f2:9b:fa:
         75:59:41:6f:2f:8e:32:c6:80:25:8d:94:da:fc:e8:40:a7:39:
         c6:62:9e:aa:fa:b1:eb:2f:c0:0f:0a:58:36:ca:86:75:bd:6d:
         15:d3:87:a1:1d:55:c4:d4:76:0c:eb:aa:24:37:69:d0:30:b6:
         bf:ab:96:32:f7:1f:0e:1e:b6:9b:1d:9d:73:29:8d:c8:d4:e4:
         b3:5c:e3:ae:8f:57:3c:8a:99:17:fc:4e:00:76:e0:11:3e:84:
         f3:ac:71:36:3e:eb:d2:e6:b6:17:33:b2:06:77:1f:7e:37:98:
         42:70:bd:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 04:32:24 2025 by rpki-client