This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/AS201386.asa
File:                     AS201386.asa (raw, json)
Hash identifier:          Km0FYaY5IcqQati8Ra2iIk50ZJqz+8PvB+1BSoPkJKw=
Subject key identifier:   83:E4:AB:5A:9C:BF:62:F7:A4:8D:74:B8:42:9E:90:2D:FA:9E:BD:AB
Certificate issuer:       /CN=bb8e87f353127cc923b1cc1f978699537efad66d
Certificate serial:       5F8A1ECE463A405C084EC028DC708760B3E1585F
Authority key identifier: BB:8E:87:F3:53:12:7C:C9:23:B1:CC:1F:97:86:99:53:7E:FA:D6:6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u46H81MSfMkjscwfl4aZU3761m0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/AS201386.asa
Signing time:             Mon 22 Dec 2025 19:22:30 +0000
ASPA not before:          Mon 22 Dec 2025 19:17:30 +0000
ASPA not after:           Mon 21 Dec 2026 19:22:30 +0000
Customer ASID:            201386
Providers:                AS: 44324
                          AS: 53808
                          AS: 216299
                          AS: 216324
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u46H81MSfMkjscwfl4aZU3761m0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:8a:1e:ce:46:3a:40:5c:08:4e:c0:28:dc:70:87:60:b3:e1:58:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb8e87f353127cc923b1cc1f978699537efad66d
        Validity
            Not Before: Dec 22 19:17:30 2025 GMT
            Not After : Dec 21 19:22:30 2026 GMT
        Subject: CN=83E4AB5A9CBF62F7A48D74B8429E902DFA9EBDAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:12:86:f1:35:84:f2:1c:cc:e1:07:14:4c:cc:
                    03:91:71:34:de:b2:c8:8d:19:b4:80:23:88:d7:bd:
                    8b:c4:a4:f5:9d:81:8e:ef:ca:91:da:d8:e1:e6:33:
                    14:72:57:f3:c5:eb:f8:c7:d9:d0:29:8d:70:5c:92:
                    4a:04:92:2c:ad:ab:38:82:fe:1a:b9:55:ab:b1:3d:
                    2f:e6:bf:5e:b1:4b:e5:80:5b:0d:1a:38:ec:f7:4b:
                    ed:c2:f3:c9:9e:fc:5d:70:4a:eb:79:8b:58:81:f6:
                    bf:2a:49:57:7b:17:45:96:70:8b:03:54:c2:2f:be:
                    5b:c9:31:78:d5:0e:4b:e1:17:52:9b:1d:7c:1d:7c:
                    ea:1f:20:16:a5:ba:f7:31:9d:db:71:ed:c3:85:a2:
                    9e:68:38:aa:27:de:2f:8a:ee:99:08:4a:b3:a6:ca:
                    05:bc:7e:40:5c:6a:bf:b9:1f:66:b7:41:73:e9:8a:
                    b1:7f:c7:6f:21:0b:4e:ab:b0:12:5d:a2:18:b8:19:
                    59:80:8f:54:e5:ba:4b:83:ea:e9:43:f4:7e:53:b4:
                    66:28:1c:c3:01:73:89:e6:53:6e:c3:94:8c:71:c1:
                    31:57:0b:09:75:b5:70:44:5f:f7:11:6b:61:20:7b:
                    1e:5d:04:65:d6:f0:33:48:b7:02:71:96:a8:b2:a8:
                    24:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E4:AB:5A:9C:BF:62:F7:A4:8D:74:B8:42:9E:90:2D:FA:9E:BD:AB
            X509v3 Authority Key Identifier:
                keyid:BB:8E:87:F3:53:12:7C:C9:23:B1:CC:1F:97:86:99:53:7E:FA:D6:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u46H81MSfMkjscwfl4aZU3761m0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/AS201386.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201386

    Signature Algorithm: sha256WithRSAEncryption
         37:94:84:1d:a6:5b:7b:79:bb:72:31:2c:df:b6:f5:76:20:d6:
         30:1c:88:d8:e2:58:55:23:8b:6d:4a:47:1b:89:e0:8b:1e:4e:
         8d:c5:34:46:6a:6b:62:f3:ca:c1:00:b8:97:23:b2:38:d8:ff:
         84:24:78:38:81:13:e2:a6:c9:d4:19:70:1b:c6:21:8f:db:99:
         63:e5:11:97:e6:f1:47:cd:cb:e3:2d:7a:a6:6d:5d:83:b2:0f:
         86:f6:b6:c2:77:d5:0c:09:4a:b2:4b:5b:b1:7a:b2:9e:ac:8a:
         4d:36:50:f4:05:3e:42:e4:14:8f:0f:0d:9d:9f:b2:05:d6:31:
         79:97:de:86:d0:78:11:1f:f6:21:d9:35:03:6b:01:15:fa:bb:
         b9:f8:e3:05:78:25:72:59:70:ae:90:92:ed:aa:5f:56:55:d1:
         16:6d:df:ad:4c:de:25:c5:51:d2:d0:8e:45:6c:5c:75:3d:06:
         a4:5d:ad:c5:03:ba:01:0e:e6:6b:ef:93:e2:db:c1:8c:3c:90:
         9b:bf:45:be:4c:de:d6:f7:90:42:a9:f7:5c:b6:1e:9a:2e:d7:
         0f:6f:ba:80:3b:3f:c3:0b:9c:86:be:e3:a8:85:8b:42:27:ff:
         dd:da:d2:fb:6a:ea:65:7c:55:df:ec:53:c4:a6:bd:10:4e:12:
         cf:b5:4f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 09:15:13 2025 by rpki-client