This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/AS204211.asa
File:                     AS204211.asa (raw, json)
Hash identifier:          yt11FQmMZ8P9UMbvCIMjnEDEe7PkUl2NP7ay9+7hSTo=
Subject key identifier:   E2:0A:A9:D1:DA:C0:BD:59:68:34:BF:18:C5:EF:1A:21:41:15:E4:04
Certificate issuer:       /CN=c18020bdc5e6ba4a5474d3aa0da4a962a68d98ab
Certificate serial:       2DE988BE9D6C4FDB1ECA0CD4F4D7DB6D6CC29926
Authority key identifier: C1:80:20:BD:C5:E6:BA:4A:54:74:D3:AA:0D:A4:A9:62:A6:8D:98:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/AS204211.asa
Signing time:             Sun 07 Dec 2025 14:48:52 +0000
ASPA not before:          Sun 07 Dec 2025 14:43:52 +0000
ASPA not after:           Sun 06 Dec 2026 14:48:52 +0000
Customer ASID:            204211
Providers:                AS: 174
                          AS: 6939
                          AS: 44324
                          AS: 53667
                          AS: 53808
                          AS: 151673
                          AS: 207529
                          AS: 210352
                          AS: 210773
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 21:28:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:e9:88:be:9d:6c:4f:db:1e:ca:0c:d4:f4:d7:db:6d:6c:c2:99:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c18020bdc5e6ba4a5474d3aa0da4a962a68d98ab
        Validity
            Not Before: Dec  7 14:43:52 2025 GMT
            Not After : Dec  6 14:48:52 2026 GMT
        Subject: CN=E20AA9D1DAC0BD596834BF18C5EF1A214115E404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:87:61:5f:6e:11:e4:29:f4:20:4f:2a:ab:50:
                    b5:9c:f5:06:fc:83:13:9a:4c:c7:10:cd:18:26:64:
                    0a:b6:1d:42:af:a7:e0:1c:71:e2:2a:45:91:88:e7:
                    42:95:92:ca:50:57:d0:be:ac:52:e6:f6:e9:3e:5f:
                    f2:74:02:a9:36:ce:74:76:9d:4c:32:01:f2:bc:52:
                    a6:86:61:c9:56:de:16:00:a0:9c:9b:72:b2:e2:d5:
                    e3:81:bd:e6:15:82:61:b3:5e:67:8c:1f:cc:fd:0e:
                    7c:97:e8:c5:8c:da:61:bf:2e:d4:7f:0e:fa:68:ce:
                    cc:7a:f0:45:2b:39:c3:62:19:79:51:41:e0:11:bf:
                    e8:69:a3:d4:b2:1e:22:74:24:8a:06:84:30:3b:83:
                    4f:a3:78:fe:8e:57:b3:60:de:cb:f7:e1:2b:35:18:
                    2f:99:47:12:9d:48:e3:b9:17:89:fa:4a:2f:1f:4e:
                    f4:0b:04:5a:07:02:c3:3a:7b:36:0e:0f:f0:17:88:
                    d1:e7:4e:a7:c0:53:9a:2a:1a:eb:2d:1b:a1:7e:7a:
                    93:94:fa:7d:21:c1:bb:4e:8b:af:c3:7c:6d:0b:39:
                    58:c4:88:aa:e7:a9:43:2e:fc:4d:6d:f9:6a:86:37:
                    1b:dd:49:2a:d2:70:d7:6a:c4:01:51:c2:69:4d:df:
                    b1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:0A:A9:D1:DA:C0:BD:59:68:34:BF:18:C5:EF:1A:21:41:15:E4:04
            X509v3 Authority Key Identifier:
                keyid:C1:80:20:BD:C5:E6:BA:4A:54:74:D3:AA:0D:A4:A9:62:A6:8D:98:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/AS204211.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204211

    Signature Algorithm: sha256WithRSAEncryption
         43:ed:f4:f3:2c:59:70:fb:4f:0e:90:76:a2:c0:a4:8c:d9:31:
         7e:ad:ae:ec:20:dc:e5:e1:51:0b:ae:bb:81:e6:09:18:ee:ce:
         45:89:ce:d3:37:72:56:5c:9a:14:a0:96:f4:f8:c4:48:b8:f5:
         55:f9:7b:40:f8:3d:d7:98:5e:e3:88:d5:e8:ea:bb:75:44:8c:
         9c:e2:15:28:7a:0b:db:84:40:fd:d2:e2:55:26:cc:01:f1:30:
         be:d7:30:61:16:54:61:1b:f9:ff:a9:55:21:f4:bd:ac:14:6d:
         f6:07:cf:ca:b5:b4:71:c5:f8:58:23:ac:62:95:c8:6a:11:86:
         a0:a1:b5:2f:41:dc:ec:f0:1a:09:47:0e:b7:98:c1:10:4d:eb:
         63:2d:e7:e3:19:0e:ee:8d:7e:ec:41:23:61:cb:b5:d0:d1:7f:
         a6:d0:16:ea:3d:27:94:51:ba:9e:83:cc:cd:50:94:b3:52:32:
         fb:76:a4:64:08:12:e7:ec:41:6d:95:a3:d4:b1:12:cd:8f:24:
         dd:30:ea:18:db:72:24:11:b7:1a:b1:c9:19:89:d0:42:b9:10:
         81:64:0d:24:cd:90:1c:fa:57:67:51:11:d4:a1:dd:56:81:c2:
         5f:cb:3a:c8:89:59:ad:63:62:16:60:50:81:f4:41:62:36:e8:
         96:b8:fb:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 04:32:25 2025 by rpki-client