This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/AS216299.asa
File:                     AS216299.asa (raw, json)
Hash identifier:          X6AXlCP9HIyHTXbg3649O81EGxBI70CVhawZpaYBepA=
Subject key identifier:   C7:13:37:08:94:51:8A:33:7B:82:21:12:2B:FE:E4:6C:3C:C7:76:D1
Certificate issuer:       /CN=4ec249b7af3ee69c5bbdf3c7f4cbee1eaaec494f
Certificate serial:       64E8EEC3AA866F35491B36F0947B22657E20E603
Authority key identifier: 4E:C2:49:B7:AF:3E:E6:9C:5B:BD:F3:C7:F4:CB:EE:1E:AA:EC:49:4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/AS216299.asa
Signing time:             Thu 22 Jan 2026 21:43:26 +0000
ASPA not before:          Thu 22 Jan 2026 21:38:26 +0000
ASPA not after:           Thu 21 Jan 2027 21:43:26 +0000
Customer ASID:            216299
Providers:                AS: 6939
                          AS: 7720
                          AS: 17433
                          AS: 27523
                          AS: 44324
                          AS: 52025
                          AS: 53667
                          AS: 53808
                          AS: 201386
                          AS: 207529
                          AS: 209533
                          AS: 209554
                          AS: 211301
                          AS: 213605
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:51:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:e8:ee:c3:aa:86:6f:35:49:1b:36:f0:94:7b:22:65:7e:20:e6:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ec249b7af3ee69c5bbdf3c7f4cbee1eaaec494f
        Validity
            Not Before: Jan 22 21:38:26 2026 GMT
            Not After : Jan 21 21:43:26 2027 GMT
        Subject: CN=C713370894518A337B8221122BFEE46C3CC776D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5e:70:d7:20:11:8f:4c:12:0b:06:b8:51:07:
                    98:b4:62:82:b4:be:9f:1e:7a:bc:51:5f:60:81:e0:
                    04:4e:7b:5c:67:d8:69:40:df:5a:95:1d:58:fa:5e:
                    84:df:49:90:4c:c9:87:0a:5a:f5:3d:24:26:5f:c9:
                    fe:94:1d:e8:44:cf:f2:a9:46:d0:47:60:d0:4d:5a:
                    91:10:51:71:dc:c9:a7:07:c5:1f:d0:c9:a4:e5:b6:
                    e0:be:ee:6b:5a:ab:55:d3:a3:7c:f9:d8:2c:c1:91:
                    0b:ab:02:e4:1f:f1:79:be:19:e4:d6:2f:ce:b3:17:
                    61:c4:8a:f7:1d:79:38:ff:b0:58:af:8d:38:b5:f6:
                    0d:fa:c6:7c:17:c9:b9:04:b7:bc:9f:74:99:40:8c:
                    2b:d6:a2:8f:35:61:5a:87:61:e5:89:6c:53:f9:2b:
                    d8:35:9e:77:ca:e6:64:51:a2:e3:64:d2:eb:59:1a:
                    31:35:a3:b7:a3:6b:6f:f7:12:0d:3a:b8:1d:bd:3d:
                    dd:52:9f:c7:70:b6:f1:05:9b:e7:26:fc:c8:3f:16:
                    14:d1:9c:58:21:d7:e0:9d:a9:50:d9:1c:a7:61:62:
                    d5:00:56:44:fa:b3:ba:52:4e:fc:3a:c3:75:ac:a2:
                    6f:7f:8c:cc:98:9e:78:0d:fe:94:4e:77:da:85:e0:
                    e1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:13:37:08:94:51:8A:33:7B:82:21:12:2B:FE:E4:6C:3C:C7:76:D1
            X509v3 Authority Key Identifier:
                keyid:4E:C2:49:B7:AF:3E:E6:9C:5B:BD:F3:C7:F4:CB:EE:1E:AA:EC:49:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/AS216299.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216299

    Signature Algorithm: sha256WithRSAEncryption
         4c:99:2c:46:8c:9d:e8:76:ca:5f:42:60:b5:40:fd:b4:00:b9:
         1e:d9:ab:7d:b8:cf:3a:99:7f:c1:2d:bc:7b:d0:19:9c:93:fa:
         d2:b2:4c:73:15:f2:3c:ec:9c:b3:06:d3:78:86:93:a5:2c:3c:
         5c:cf:c2:c8:35:10:72:9b:f7:5c:88:42:b5:65:4b:2a:78:11:
         1a:48:65:f7:25:74:14:19:35:35:60:8a:56:34:dc:51:b7:60:
         16:13:bc:f8:b2:5a:a5:12:b7:18:21:dd:e7:22:fe:a4:7c:62:
         fe:2e:25:ec:05:e0:58:60:a6:02:2c:ee:c3:9c:0f:61:c8:ef:
         b1:15:fe:07:b1:6b:09:c5:9c:cf:73:c1:88:fa:d1:4a:fc:74:
         04:54:6d:ed:0c:44:09:de:3a:c3:2b:b0:c0:77:21:54:e7:0e:
         bd:b2:74:97:a9:1c:4f:ab:78:a8:28:6c:7d:a2:ff:13:22:b5:
         5c:d4:3c:53:14:b9:c8:d7:93:f4:dd:3f:93:e9:89:04:e9:3f:
         55:43:9b:60:7a:6a:f0:dc:d3:c5:72:7a:6c:0e:61:ba:fb:75:
         12:85:4e:8f:54:88:d7:e9:c3:82:b3:5f:69:95:9b:0b:ac:36:
         c9:8d:a9:bf:b3:50:c9:8f:5a:52:38:7b:02:aa:6b:01:b9:1f:
         eb:63:1f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:05:48 2026 by rpki-client