This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/AS214757.asa
File:                     AS214757.asa (raw, json)
Hash identifier:          29YvfB9eu9yppGSh4prOQYg6dKk+YDfmBaqtqD6Y6tY=
Subject key identifier:   82:9E:D5:2A:EE:73:89:54:ED:5A:A9:7C:51:BD:C1:69:36:47:32:6D
Certificate issuer:       /CN=a0bbb954570cfa6e856937043dd2c1745a0a05c2
Certificate serial:       04C78B539CEE1AA4C83E1963A9C8A9207C9A6B46
Authority key identifier: A0:BB:B9:54:57:0C:FA:6E:85:69:37:04:3D:D2:C1:74:5A:0A:05:C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oLu5VFcM-m6FaTcEPdLBdFoKBcI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/AS214757.asa
Signing time:             Thu 11 Dec 2025 19:00:39 +0000
ASPA not before:          Thu 11 Dec 2025 18:55:39 +0000
ASPA not after:           Thu 10 Dec 2026 19:00:39 +0000
Customer ASID:            214757
Providers:                AS: 6939
                          AS: 34927
                          AS: 49127
                          AS: 50338
                          AS: 50917
                          AS: 60068
                          AS: 62553
                          AS: 142064
                          AS: 208453
                          AS: 212895
                          AS: 214331
                          AS: 214809
                          AS: 215638
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oLu5VFcM-m6FaTcEPdLBdFoKBcI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:c7:8b:53:9c:ee:1a:a4:c8:3e:19:63:a9:c8:a9:20:7c:9a:6b:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0bbb954570cfa6e856937043dd2c1745a0a05c2
        Validity
            Not Before: Dec 11 18:55:39 2025 GMT
            Not After : Dec 10 19:00:39 2026 GMT
        Subject: CN=829ED52AEE738954ED5AA97C51BDC1693647326D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:98:2a:4b:f4:fb:39:f1:2a:0f:92:7d:ca:bc:
                    9e:fe:d3:bc:61:67:c2:79:38:13:a1:5e:3a:72:bd:
                    21:60:87:67:70:79:e7:43:bf:91:14:32:53:d8:f9:
                    9d:d9:d1:c2:9a:6a:cb:6a:1d:cf:99:a9:1e:c1:f0:
                    45:4c:03:d2:56:f7:7b:c6:f7:2c:8d:3b:0c:6a:d1:
                    c5:c5:8c:71:d3:b4:cd:86:be:d9:4b:29:c9:35:32:
                    9d:a2:5b:c6:23:c0:f4:01:0e:47:dc:0d:12:42:e4:
                    57:b4:fe:a8:6c:57:ca:13:21:b2:ad:b7:e9:10:a5:
                    be:a9:9f:54:73:61:2b:3b:4a:3f:a8:dc:d5:70:e4:
                    79:6f:ff:8d:b9:0e:4f:a8:7e:24:be:09:89:92:68:
                    ac:b4:8e:f3:84:4f:f6:eb:78:0a:78:36:e1:68:da:
                    7a:f0:ba:5a:8f:71:0f:17:79:98:39:63:f5:d3:78:
                    92:3a:c1:8e:7f:c2:bd:42:5d:60:15:67:1f:a2:5a:
                    a7:c5:6e:b3:1f:12:bb:80:06:24:a7:02:4b:42:f9:
                    a8:e2:bf:79:e5:e6:ee:2c:c1:28:6a:93:53:e1:30:
                    94:0c:60:6c:ea:7d:13:06:26:63:f7:ea:cb:35:2a:
                    9f:52:e2:f7:f1:2a:56:1b:af:ec:d0:7e:19:5c:cb:
                    11:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:9E:D5:2A:EE:73:89:54:ED:5A:A9:7C:51:BD:C1:69:36:47:32:6D
            X509v3 Authority Key Identifier:
                keyid:A0:BB:B9:54:57:0C:FA:6E:85:69:37:04:3D:D2:C1:74:5A:0A:05:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLu5VFcM-m6FaTcEPdLBdFoKBcI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/AS214757.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214757

    Signature Algorithm: sha256WithRSAEncryption
         d7:92:65:91:d0:00:68:63:ae:fa:c3:1a:f1:61:da:8f:e7:57:
         e2:df:ef:55:77:a9:ff:68:60:99:b0:21:6e:17:f8:80:24:0e:
         e6:6a:c7:f0:2c:e9:85:04:64:56:ca:7e:c5:7e:bc:b2:68:b1:
         28:59:e3:96:15:c3:bf:d2:0b:c7:de:2d:50:9f:c4:09:04:cd:
         01:ec:56:2e:7a:d0:ca:b6:1e:be:69:42:ca:77:db:ae:85:16:
         7e:ef:b7:04:1e:37:f8:b0:ab:e2:f5:97:8b:ab:df:2d:5d:c4:
         5e:27:bd:19:1b:57:43:ea:b8:7a:41:cd:3d:46:ee:2c:39:ef:
         ab:c4:2a:32:08:ae:41:52:04:2e:63:21:4c:e4:07:76:b9:9a:
         e0:80:15:84:21:f5:b1:0d:6d:75:bc:31:7b:81:67:d0:88:a3:
         98:8f:79:31:1b:fa:f1:b3:c2:38:10:01:5e:1f:d8:9b:93:46:
         8b:d6:78:65:70:c2:54:c8:a8:9f:27:22:53:62:ee:94:3c:9c:
         bc:77:d2:a3:db:b7:f4:7f:e7:95:a2:8f:a0:04:f3:3c:ee:90:
         6e:b6:34:5a:8e:12:12:db:2f:33:3a:51:2b:cd:8a:eb:0f:87:
         c8:d5:2e:73:09:3e:8d:96:71:79:d7:1f:49:cf:42:e8:a8:6c:
         58:59:9b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:25:29 2025 by rpki-client