This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/AS215171.asa
File:                     AS215171.asa (raw, json)
Hash identifier:          gdJa6WG2GERDZaDbnz7OAqIN3lLaJy+y5wFkZsKkjzo=
Subject key identifier:   9B:4D:2C:C4:E6:7B:DB:26:C9:25:1F:10:D9:0C:A6:F8:D4:CE:D5:A3
Certificate issuer:       /CN=53a2aa1601cc09214461d03ca771ed50ec1d6325
Certificate serial:       7DE4188C3A3FFFC714821CE1DD23555505B1CCC9
Authority key identifier: 53:A2:AA:16:01:CC:09:21:44:61:D0:3C:A7:71:ED:50:EC:1D:63:25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U6KqFgHMCSFEYdA8p3HtUOwdYyU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/AS215171.asa
Signing time:             Sat 20 Dec 2025 14:59:07 +0000
ASPA not before:          Sat 20 Dec 2025 14:54:07 +0000
ASPA not after:           Sat 19 Dec 2026 14:59:07 +0000
Customer ASID:            215171
Providers:                AS: 8849
                          AS: 34927
                          AS: 44817
                          AS: 135659
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U6KqFgHMCSFEYdA8p3HtUOwdYyU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:42:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:e4:18:8c:3a:3f:ff:c7:14:82:1c:e1:dd:23:55:55:05:b1:cc:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53a2aa1601cc09214461d03ca771ed50ec1d6325
        Validity
            Not Before: Dec 20 14:54:07 2025 GMT
            Not After : Dec 19 14:59:07 2026 GMT
        Subject: CN=9B4D2CC4E67BDB26C9251F10D90CA6F8D4CED5A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:75:75:13:5a:35:c2:24:bc:c7:ae:d1:4e:7b:
                    57:8a:a9:c3:67:72:43:c7:5c:4c:0b:97:b2:b3:f5:
                    75:78:54:f1:d6:8e:f9:3f:3b:74:1d:6f:c8:a9:ee:
                    ab:63:eb:d4:fd:6f:80:41:bd:6b:e6:b7:13:c3:c1:
                    85:23:f3:dc:fc:0f:64:18:8a:ac:1e:6a:fb:c7:46:
                    ca:95:9d:e5:32:59:4a:80:74:70:48:f8:52:67:f4:
                    46:e2:05:24:c5:57:1f:8e:bf:18:3c:1b:3d:79:58:
                    55:ec:24:53:23:63:16:2b:a5:56:06:d6:85:16:49:
                    9b:34:07:e1:2b:db:ad:18:d6:1b:ec:49:83:0e:10:
                    d7:eb:82:81:d4:18:4e:2d:48:bd:04:18:be:f1:36:
                    e5:45:36:c1:c9:23:96:48:c4:cf:c9:09:34:43:a3:
                    5b:2c:e9:f2:bc:c7:71:f6:44:e0:fd:81:ee:70:b0:
                    f4:02:15:10:ee:1e:65:3a:2f:7d:23:0c:ae:69:52:
                    28:9c:90:9d:5a:fb:17:d6:ed:a0:cb:dc:4d:2e:b5:
                    b0:56:42:bc:23:59:dc:50:8e:b6:35:e0:ef:e1:b5:
                    11:cf:7e:74:b2:94:68:9d:9a:15:cf:2d:7a:b3:84:
                    fc:2b:b3:6c:14:35:ae:77:58:f7:4f:af:0c:66:6b:
                    b9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:4D:2C:C4:E6:7B:DB:26:C9:25:1F:10:D9:0C:A6:F8:D4:CE:D5:A3
            X509v3 Authority Key Identifier:
                keyid:53:A2:AA:16:01:CC:09:21:44:61:D0:3C:A7:71:ED:50:EC:1D:63:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6KqFgHMCSFEYdA8p3HtUOwdYyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/AS215171.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215171

    Signature Algorithm: sha256WithRSAEncryption
         31:dc:71:de:f7:ba:59:8a:48:fb:06:03:b7:a2:c1:b4:a0:dd:
         7e:9b:ba:bc:a6:ee:73:c3:15:8f:65:a6:69:b2:2a:2b:c6:ea:
         6a:f8:b4:5c:b8:81:71:cb:8f:7c:9f:a2:67:a8:56:fa:97:f7:
         df:1b:80:73:c0:e5:9b:ff:db:ff:ba:85:fe:01:6f:e0:b5:33:
         70:bf:c4:ba:98:e8:d2:b4:f3:78:f6:e7:2e:9b:c7:98:3f:4e:
         16:33:04:73:ad:7d:ce:2f:3e:94:8f:b7:75:85:5c:f6:d2:81:
         e3:39:be:fb:2f:35:fb:30:fc:fa:e8:11:a2:92:58:71:41:38:
         c8:46:b7:69:76:e3:2a:fb:a1:13:4c:29:c0:63:11:6b:45:a5:
         c2:71:98:ac:51:a5:d8:9c:ae:8a:01:d0:5e:05:6f:a7:ed:f8:
         e9:fb:21:29:66:77:b0:af:9a:ec:0f:46:77:ca:fd:c9:8b:f3:
         58:05:1f:16:64:c5:8e:62:4d:76:62:3a:f4:ac:72:5a:34:68:
         82:ea:a0:9b:2d:a3:ad:1b:1d:b2:81:3e:0f:a6:a0:e9:99:93:
         de:f2:9f:34:77:17:b9:3e:09:07:5b:4a:13:69:a0:f8:f6:17:
         a4:81:bd:d6:42:35:54:e0:b5:b8:cf:a2:7d:46:a6:75:b6:28:
         18:dc:3b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 05:37:03 2025 by rpki-client