This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/AS202939.asa
File:                     AS202939.asa (raw, json)
Hash identifier:          IYHwUTkXDmswLWJeaoI2BAhm2sWtfWtUEiBFlN3eZkw=
Subject key identifier:   C4:52:99:FD:8B:CB:68:F5:B0:99:FB:9B:BE:2A:FB:BF:7D:54:A4:61
Certificate issuer:       /CN=40f02fb7dfe9ac800a1b1b693709c2f03c5ed98b
Certificate serial:       5F4043FFC565DA15A31E85AB7A613F7062C24980
Authority key identifier: 40:F0:2F:B7:DF:E9:AC:80:0A:1B:1B:69:37:09:C2:F0:3C:5E:D9:8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/AS202939.asa
Signing time:             Sat 06 Dec 2025 06:29:34 +0000
ASPA not before:          Sat 06 Dec 2025 06:24:34 +0000
ASPA not after:           Sat 05 Dec 2026 06:29:34 +0000
Customer ASID:            202939
Providers:                AS: 6939
                          AS: 7720
                          AS: 31898
                          AS: 34927
                          AS: 41051
                          AS: 44324
                          AS: 202662
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:40:43:ff:c5:65:da:15:a3:1e:85:ab:7a:61:3f:70:62:c2:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f02fb7dfe9ac800a1b1b693709c2f03c5ed98b
        Validity
            Not Before: Dec  6 06:24:34 2025 GMT
            Not After : Dec  5 06:29:34 2026 GMT
        Subject: CN=C45299FD8BCB68F5B099FB9BBE2AFBBF7D54A461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a7:7e:39:88:dc:02:de:a0:70:b8:8c:ec:99:
                    0a:d8:57:ca:cc:79:92:59:45:0c:85:bd:aa:c0:91:
                    41:28:ca:ea:e9:e8:de:44:9c:d5:7b:74:b6:a2:3b:
                    a3:1c:19:dc:e4:72:d0:14:0d:93:c8:85:87:0f:42:
                    77:55:c3:61:b6:03:f4:50:93:ed:1f:d5:b9:6c:42:
                    f8:4a:c6:af:1c:77:49:8c:19:95:57:bd:02:6b:a9:
                    05:6b:09:b6:7d:39:08:fe:8d:6c:38:a3:79:3f:a2:
                    68:2e:a6:b7:b2:78:fa:33:a1:27:b5:64:47:1f:7a:
                    ea:d4:73:4e:14:6a:14:d0:b7:fc:c4:c8:c4:7d:8a:
                    05:37:a8:ba:06:65:7b:0d:2e:cc:5d:f6:79:b0:e0:
                    fc:e5:23:70:0a:84:48:67:19:a7:4f:c3:48:ee:0a:
                    7e:55:f0:c2:0b:e9:c6:c1:f7:ce:0c:e6:a3:7a:69:
                    4f:68:e3:4e:77:2f:d5:e0:07:25:dd:79:36:5d:7b:
                    f3:c8:20:6e:f1:75:9e:90:d8:3a:cb:3b:2a:71:ce:
                    ce:7a:fd:e7:0d:a1:98:22:f3:d2:de:07:ac:d1:b4:
                    62:1c:d7:d9:20:39:c3:20:f1:84:82:42:2a:7f:46:
                    93:86:e3:6c:56:b4:bb:4c:bf:79:02:35:13:2b:21:
                    62:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:52:99:FD:8B:CB:68:F5:B0:99:FB:9B:BE:2A:FB:BF:7D:54:A4:61
            X509v3 Authority Key Identifier:
                keyid:40:F0:2F:B7:DF:E9:AC:80:0A:1B:1B:69:37:09:C2:F0:3C:5E:D9:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/AS202939.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202939

    Signature Algorithm: sha256WithRSAEncryption
         65:51:5b:66:7a:7f:b1:30:06:41:4f:9c:aa:fe:47:dd:a9:11:
         79:ae:71:ab:ad:b6:45:d2:78:b3:b2:41:b5:59:44:49:f6:6a:
         59:2c:ff:bf:21:b6:2c:f5:e9:08:4b:ea:12:d6:83:62:3b:9d:
         f3:b1:a6:62:3d:6a:7e:db:a4:1e:a9:57:19:d7:7f:a9:35:d9:
         db:88:64:86:73:cc:07:bc:fc:86:a1:ab:f5:08:fc:06:ea:83:
         94:04:61:33:9d:b3:c2:9c:3e:51:71:72:9a:c5:65:da:d8:6d:
         48:70:47:65:14:ca:31:86:c4:94:55:7d:fd:6d:0f:17:99:69:
         aa:0e:b2:fa:7d:5a:69:68:1f:27:f6:86:d9:0a:df:c2:ad:35:
         dc:16:10:23:29:67:a3:7c:73:61:69:c6:02:ec:db:33:a9:39:
         49:0f:8f:ef:04:41:fe:39:96:3b:99:5a:35:b4:af:cf:62:db:
         e2:5f:fc:24:02:40:8d:95:73:26:74:a5:5e:36:5b:01:2f:8a:
         16:55:3d:4a:42:98:3a:63:1b:9f:cb:fa:77:1a:2e:0d:57:19:
         ba:01:56:e0:9c:a7:5a:f7:c9:c1:eb:06:e2:08:b9:e1:ab:35:
         c0:95:65:8d:29:07:c2:61:55:15:8e:4d:19:a4:a3:98:5f:4c:
         6f:b7:37:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:54:06 2025 by rpki-client