This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/AS216375.asa
File:                     AS216375.asa (raw, json)
Hash identifier:          Is18bo2gvq7cfPyUjZtt2qFIiddFBmM/O7y3HvC32i0=
Subject key identifier:   D9:20:C7:C0:35:EA:EE:B2:E6:0F:30:64:33:0F:74:D6:EE:31:A7:36
Certificate issuer:       /CN=fb64d48d941f2f324279cf863188d26d2056d11d
Certificate serial:       178BCD932589A9FEC27E816EB1BD836086E176D7
Authority key identifier: FB:64:D4:8D:94:1F:2F:32:42:79:CF:86:31:88:D2:6D:20:56:D1:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-2TUjZQfLzJCec-GMYjSbSBW0R0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/AS216375.asa
Signing time:             Sat 20 Dec 2025 14:59:18 +0000
ASPA not before:          Sat 20 Dec 2025 14:54:18 +0000
ASPA not after:           Sat 19 Dec 2026 14:59:18 +0000
Customer ASID:            216375
Providers:                AS: 8849
                          AS: 34927
                          AS: 44817
                          AS: 135659
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-2TUjZQfLzJCec-GMYjSbSBW0R0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:8b:cd:93:25:89:a9:fe:c2:7e:81:6e:b1:bd:83:60:86:e1:76:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb64d48d941f2f324279cf863188d26d2056d11d
        Validity
            Not Before: Dec 20 14:54:18 2025 GMT
            Not After : Dec 19 14:59:18 2026 GMT
        Subject: CN=D920C7C035EAEEB2E60F3064330F74D6EE31A736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:74:87:02:4f:3a:9b:81:44:02:a7:89:f8:0d:
                    8c:e7:cb:0e:01:2f:a9:75:d1:ae:b3:b5:c2:72:fb:
                    87:3e:d4:bf:61:0d:bb:19:3a:7c:1f:cf:45:e9:05:
                    9b:54:0a:5f:bd:5d:00:4f:47:19:6b:bf:30:86:fb:
                    be:c3:fa:bc:06:56:67:a3:00:af:06:20:6c:45:eb:
                    d0:7b:88:30:a7:1e:86:40:4e:8a:1a:d1:d0:06:61:
                    23:98:62:38:5c:c5:87:29:89:25:71:ff:d1:d4:6e:
                    99:a1:c0:09:04:8c:7f:58:2a:3a:19:83:48:94:21:
                    80:8b:08:e6:2b:34:d1:a4:2b:a5:40:b4:f2:ad:8d:
                    e2:b0:57:22:fe:30:c7:72:7a:4f:22:c2:2e:23:f1:
                    55:e0:07:a5:e5:4b:d0:7d:69:ab:04:ba:fe:77:f7:
                    be:e7:6e:b9:73:a2:92:ed:73:15:55:67:86:2a:47:
                    b8:e7:03:3f:7b:3e:3b:50:95:73:ae:23:96:19:7a:
                    6a:6d:ec:a2:f8:e8:e1:a1:82:ce:0d:d1:48:7a:b0:
                    9c:c0:59:00:4f:16:9e:19:4a:4c:91:3e:a4:8f:34:
                    1e:35:34:b8:4a:86:a6:f8:f9:55:a4:5a:ef:97:88:
                    6e:e5:17:4b:da:d6:5d:d5:1b:ca:98:2e:03:e9:35:
                    10:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:20:C7:C0:35:EA:EE:B2:E6:0F:30:64:33:0F:74:D6:EE:31:A7:36
            X509v3 Authority Key Identifier:
                keyid:FB:64:D4:8D:94:1F:2F:32:42:79:CF:86:31:88:D2:6D:20:56:D1:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2TUjZQfLzJCec-GMYjSbSBW0R0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/AS216375.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216375

    Signature Algorithm: sha256WithRSAEncryption
         87:15:e8:68:cb:5b:af:2c:cf:97:31:54:1d:7f:17:89:31:40:
         50:4d:cd:25:2e:42:f0:ba:86:6b:f8:db:96:da:2c:3f:40:15:
         c6:6e:85:11:5b:33:a4:ea:ab:c4:11:bc:e9:9a:15:40:28:36:
         49:92:b3:db:04:10:f6:13:bc:35:45:14:fe:82:c6:77:84:21:
         d6:32:ec:09:11:28:3f:d8:1c:c5:f8:99:eb:d3:02:76:7f:7a:
         0a:70:e9:32:44:d5:b8:1c:1a:9b:40:4b:8a:d0:49:2d:4a:10:
         14:c8:df:08:19:fe:2f:b1:46:fb:53:00:80:38:25:55:12:43:
         06:bf:40:e7:95:ed:b9:99:c2:4e:01:3f:2c:26:dd:0c:bb:bf:
         d3:26:3b:a9:91:ff:46:88:44:31:17:a7:3e:4c:1b:07:4e:8d:
         a3:f7:4a:e2:3b:fe:d5:6a:a9:18:f4:2a:6c:93:a4:3a:ee:50:
         f6:34:57:47:da:2c:51:ba:54:b8:ad:28:13:5a:84:32:18:84:
         4d:e8:2c:2e:cb:03:ee:1d:9b:e9:a7:96:8c:3e:2c:66:8c:9b:
         0c:92:c8:32:29:f7:da:68:fa:67:69:66:69:4c:03:19:6c:f4:
         9a:30:d7:58:d4:8b:7d:ad:97:9a:cc:e5:99:30:2b:af:60:69:
         56:ad:e4:c2
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgIUF4vNkyWJqf7CfoFusb2DYIbhdtcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZmI2NGQ0OGQ5NDFmMmYzMjQyNzljZjg2MzE4OGQyNmQy
MDU2ZDExZDAeFw0yNTEyMjAxNDU0MThaFw0yNjEyMTkxNDU5MThaMDMxMTAvBgNV
BAMTKEQ5MjBDN0MwMzVFQUVFQjJFNjBGMzA2NDMzMEY3NEQ2RUUzMUE3MzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8dIcCTzqbgUQCp4n4DYznyw4B
L6l10a6ztcJy+4c+1L9hDbsZOnwfz0XpBZtUCl+9XQBPRxlrvzCG+77D+rwGVmej
AK8GIGxF69B7iDCnHoZATooa0dAGYSOYYjhcxYcpiSVx/9HUbpmhwAkEjH9YKjoZ
g0iUIYCLCOYrNNGkK6VAtPKtjeKwVyL+MMdyek8iwi4j8VXgB6XlS9B9aasEuv53
977nbrlzopLtcxVVZ4YqR7jnAz97PjtQlXOuI5YZempt7KL46OGhgs4N0Uh6sJzA
WQBPFp4ZSkyRPqSPNB41NLhKhqb4+VWkWu+XiG7lF0va1l3VG8qYLgPpNRDNAgMB
AAGjggIGMIICAjAdBgNVHQ4EFgQU2SDHwDXq7rLmDzBkMw901u4xpzYwHwYDVR0j
BBgwFoAU+2TUjZQfLzJCec+GMYjSbSBW0R0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4
NzU1LzAvRkI2NEQ0OEQ5NDFGMkYzMjQyNzlDRjg2MzE4OEQyNkQyMDU2RDExRC5j
cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtMlRValpRZkx6SkNlYy1HTVlqU2JT
QlcwUjAuY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y
c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMTFlNDdjNC0wMmYw
LTQ2NTctOTAyMi1kMmI4M2NmZjg3NTUvMC9BUzIxNjM3NS5hc2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDTTcwDQYJ
KoZIhvcNAQELBQADggEBAIcV6GjLW68sz5cxVB1/F4kxQFBNzSUuQvC6hmv425ba
LD9AFcZuhRFbM6Tqq8QRvOmaFUAoNkmSs9sEEPYTvDVFFP6CxneEIdYy7AkRKD/Y
HMX4mevTAnZ/egpw6TJE1bgcGptAS4rQSS1KEBTI3wgZ/i+xRvtTAIA4JVUSQwa/
QOeV7bmZwk4BPywm3Qy7v9MmO6mR/0aIRDEXpz5MGwdOjaP3SuI7/tVqqRj0KmyT
pDruUPY0V0faLFG6VLitKBNahDIYhE3oLC7LA+4dm+mnlow+LGaMmwySyDIp99po
+mdpZmlMAxls9Jow11jUi32tl5rM5ZkwK69gaVat5MI=
-----END CERTIFICATE-----
Generated at Sun Dec 21 02:18:24 2025 by rpki-client