This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/AS214955.asa
File:                     AS214955.asa (raw, json)
Hash identifier:          9BTc33tzJ3o9p7u2GITVOlVxirs0irbQ8mfVzNdUJgc=
Subject key identifier:   AD:97:B5:B8:13:F2:08:68:85:0A:B4:E6:BD:C8:43:78:60:9F:19:95
Certificate issuer:       /CN=ce964f98379f0320a7191e6d6788800535885928
Certificate serial:       7E3EDB30D7A73DA13EABBCDE37B75BCE4A457356
Authority key identifier: CE:96:4F:98:37:9F:03:20:A7:19:1E:6D:67:88:80:05:35:88:59:28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/AS214955.asa
Signing time:             Sun 25 Jan 2026 07:09:36 +0000
ASPA not before:          Sun 25 Jan 2026 07:04:36 +0000
ASPA not after:           Sun 24 Jan 2027 07:09:36 +0000
Customer ASID:            214955
Providers:                AS: 20473
                          AS: 44324
                          AS: 53667
                          AS: 199310
                          AS: 205008
                          AS: 207529
                          AS: 213605
                          AS: 215172
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:3e:db:30:d7:a7:3d:a1:3e:ab:bc:de:37:b7:5b:ce:4a:45:73:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce964f98379f0320a7191e6d6788800535885928
        Validity
            Not Before: Jan 25 07:04:36 2026 GMT
            Not After : Jan 24 07:09:36 2027 GMT
        Subject: CN=AD97B5B813F20868850AB4E6BDC84378609F1995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d0:ab:b1:ed:05:90:fc:9f:48:98:2a:a5:83:
                    6c:0a:90:81:73:e5:60:a5:14:10:2c:14:54:5e:b7:
                    bb:5e:74:ec:a2:37:65:1d:86:25:1a:a4:c5:4a:1b:
                    63:e6:29:0b:af:71:f5:ba:72:4b:37:0d:8c:3f:d8:
                    74:89:04:32:95:cd:56:f7:d6:4b:91:46:0b:7d:d7:
                    2f:f4:05:b0:0c:49:80:8e:8e:19:f4:c7:ce:72:a8:
                    b6:14:c0:e7:69:f7:97:e3:05:be:26:e8:fd:92:73:
                    13:e0:0e:78:cd:b2:8c:98:68:84:5d:68:64:76:11:
                    85:9b:18:cd:2c:40:37:ce:b6:88:d2:53:ec:f0:0b:
                    62:31:0d:d0:77:26:a5:f2:1f:02:10:34:4d:3f:e7:
                    a5:7a:bc:5e:a9:b7:bc:0f:6d:da:cf:a7:1d:bf:53:
                    5a:58:bc:c3:a1:3a:7e:ea:29:b7:ce:f8:f5:e6:0e:
                    ba:5c:91:2b:24:97:e3:b7:5f:83:31:94:bc:7c:b8:
                    18:43:ee:ef:a1:84:f7:35:ea:90:e5:f9:8b:65:9d:
                    47:17:d9:55:a8:d9:d3:65:38:9f:64:da:53:fc:4f:
                    f8:41:51:6a:63:7f:9d:8a:fd:c9:61:f9:ec:33:57:
                    f8:5d:59:33:bc:a5:de:6a:32:7a:27:03:76:dd:b0:
                    f1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:97:B5:B8:13:F2:08:68:85:0A:B4:E6:BD:C8:43:78:60:9F:19:95
            X509v3 Authority Key Identifier:
                keyid:CE:96:4F:98:37:9F:03:20:A7:19:1E:6D:67:88:80:05:35:88:59:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/AS214955.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214955

    Signature Algorithm: sha256WithRSAEncryption
         7e:b8:d0:40:78:8b:f0:26:ad:1a:be:44:2f:0e:18:86:47:11:
         ee:6d:f9:9d:17:9b:ad:e1:92:af:75:9b:95:70:86:1d:9c:8a:
         db:ca:a0:05:49:f2:88:b5:9b:71:b3:01:83:73:fb:a2:ac:87:
         5f:2d:5a:06:c4:55:45:f1:cc:ab:fa:60:bb:0b:99:04:80:1b:
         6f:e8:6d:fe:65:e2:5d:9e:71:43:2d:f4:11:86:69:32:7c:22:
         f8:73:f2:70:96:6a:96:99:be:3b:6d:79:48:82:bc:62:7a:64:
         23:84:f8:9c:c9:5a:ae:a2:24:c7:cb:5a:12:34:ef:98:a5:2e:
         a9:a2:9d:2d:08:71:bb:c9:c1:93:d5:48:85:15:bd:20:de:2e:
         64:de:ac:d3:39:6e:96:1e:f7:cb:4b:93:dd:cb:f5:24:f7:58:
         3e:f2:1e:96:c6:46:58:1a:60:f3:cf:37:1f:1b:96:91:10:0b:
         7d:a9:c1:6f:ea:52:b8:3f:46:3e:7d:7a:6f:82:55:9c:fc:78:
         27:d1:6c:a6:f3:51:67:65:95:a5:52:db:4d:5e:29:75:99:b9:
         49:8a:9a:29:3c:31:eb:4f:06:a8:05:80:50:5c:0a:32:20:63:
         80:07:9c:11:41:39:11:32:b8:4b:8a:43:6c:ea:f8:c7:53:08:
         e0:e9:de:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:44:27 2026 by rpki-client