This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/AS207682.asa
File:                     AS207682.asa (raw, json)
Hash identifier:          yNMgsZTlVBgZuwAny+gfftheJcltZQ2eLBjscmcmhhI=
Subject key identifier:   AB:2E:D1:3E:B8:2B:F8:A1:2F:B7:4A:1E:E1:51:AF:61:B0:FD:A4:0E
Certificate issuer:       /CN=317edb3410058e086217c50fb97009dde70a6f1a
Certificate serial:       3A8A1D2A7275817D41102D7C938390CF2C6E57C9
Authority key identifier: 31:7E:DB:34:10:05:8E:08:62:17:C5:0F:B9:70:09:DD:E7:0A:6F:1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/AS207682.asa
Signing time:             Fri 14 Nov 2025 09:58:59 +0000
ASPA not before:          Fri 14 Nov 2025 09:53:59 +0000
ASPA not after:           Fri 13 Nov 2026 09:58:59 +0000
Customer ASID:            207682
Providers:                AS: 215085
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:8a:1d:2a:72:75:81:7d:41:10:2d:7c:93:83:90:cf:2c:6e:57:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=317edb3410058e086217c50fb97009dde70a6f1a
        Validity
            Not Before: Nov 14 09:53:59 2025 GMT
            Not After : Nov 13 09:58:59 2026 GMT
        Subject: CN=AB2ED13EB82BF8A12FB74A1EE151AF61B0FDA40E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a1:e7:07:0d:4f:32:0b:2f:50:0a:34:c5:af:
                    f9:28:8b:d4:c2:85:30:48:2b:74:83:ca:da:a4:7b:
                    7a:27:34:47:5a:96:23:d0:58:b2:ac:4e:af:25:6d:
                    38:bd:57:f9:37:56:6c:99:c1:c6:07:8a:1e:aa:c2:
                    67:51:48:5a:db:be:6e:02:23:03:52:8c:0b:73:26:
                    3f:10:8b:a0:cd:38:3d:c1:82:ad:3f:0b:0a:24:c0:
                    ac:1c:d0:e8:cd:65:77:a9:5b:72:46:7c:36:e7:34:
                    d3:39:b3:de:55:c5:c8:5e:18:ea:81:24:52:be:c0:
                    69:96:27:ae:13:17:4e:fa:7f:b4:6e:6f:41:18:64:
                    12:8c:0a:35:53:04:22:3d:a8:85:30:47:88:5d:19:
                    77:24:ba:9f:5e:cf:6d:72:8c:a1:4a:8d:07:66:ed:
                    f8:b2:79:e3:9b:1b:df:29:91:c1:68:57:25:8b:74:
                    39:54:1a:d7:f8:f7:ca:3f:fa:fc:f9:27:ea:8c:e3:
                    d9:57:c5:11:d5:01:42:fd:88:28:7a:ef:14:e1:77:
                    7c:13:82:42:e9:ce:b5:18:a9:25:3e:32:8a:cc:f7:
                    2d:9c:3a:b4:a1:03:b0:96:21:fb:fe:5c:7b:b7:7c:
                    f5:5d:66:c0:42:ba:29:01:c2:6b:bc:c0:c7:2b:ff:
                    9f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:2E:D1:3E:B8:2B:F8:A1:2F:B7:4A:1E:E1:51:AF:61:B0:FD:A4:0E
            X509v3 Authority Key Identifier:
                keyid:31:7E:DB:34:10:05:8E:08:62:17:C5:0F:B9:70:09:DD:E7:0A:6F:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/AS207682.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207682

    Signature Algorithm: sha256WithRSAEncryption
         6a:bd:3a:e0:bb:14:ad:b6:ce:11:52:49:60:2d:6d:a3:2b:12:
         47:bf:fd:a5:7b:4e:4b:25:6c:b9:4e:86:db:0e:ff:b3:1c:51:
         ca:0f:2c:f3:11:73:db:4d:cf:ce:ad:6f:59:cc:a6:da:7f:f9:
         c7:c2:66:86:25:97:04:ae:dd:37:e0:79:c6:11:df:bd:21:41:
         56:e3:c8:ab:95:63:a4:a1:e1:aa:b0:cf:2a:05:ec:90:99:be:
         04:0e:36:5d:12:04:c6:c1:69:e9:64:ae:fe:c6:c2:ad:97:ec:
         79:79:e0:a5:55:6f:29:6e:0f:2e:1c:84:f9:a9:9c:e7:64:ac:
         a8:3f:58:3a:70:f2:65:20:c3:68:20:bc:cb:99:d8:b9:8f:04:
         e9:20:d1:a9:b1:fe:dd:36:3e:04:43:16:d9:8e:fe:3f:1f:70:
         c2:c7:77:e2:ba:69:4f:5a:9a:96:59:9b:3f:23:13:39:0d:27:
         7f:65:ed:c2:43:54:c0:51:bb:af:98:4f:dc:84:8f:48:a4:f3:
         55:04:a5:2a:20:a4:bc:e4:50:7f:60:22:ba:a4:18:b2:d4:01:
         de:f9:f5:6a:75:b9:34:9b:10:96:4e:f9:5a:c5:80:ae:56:59:
         d1:37:b3:26:24:e4:4f:6f:4f:6f:a0:f4:c2:92:bb:4f:0f:4b:
         65:22:57:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:11:26 2025 by rpki-client