This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/AS214976.asa
File:                     AS214976.asa (raw, json)
Hash identifier:          v5lBSdK131Etk8q/qrO2YWGrpYrwgCaCsAichEGY55Y=
Subject key identifier:   0C:1A:B3:66:5D:7E:AA:4F:4D:F2:08:19:3F:3F:CD:CE:99:D2:A1:39
Certificate issuer:       /CN=e4b988e0c5f16cd5a58b879a31737b4f2f086b95
Certificate serial:       01A8D97D286DB09AD9B4885E205252A8E2C5D1E3
Authority key identifier: E4:B9:88:E0:C5:F1:6C:D5:A5:8B:87:9A:31:73:7B:4F:2F:08:6B:95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5LmI4MXxbNWli4eaMXN7Ty8Ia5U.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/AS214976.asa
Signing time:             Wed 21 Jan 2026 11:22:19 +0000
ASPA not before:          Wed 21 Jan 2026 11:17:19 +0000
ASPA not after:           Wed 20 Jan 2027 11:22:19 +0000
Customer ASID:            214976
Providers:                AS: 0
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5LmI4MXxbNWli4eaMXN7Ty8Ia5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:48:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a8:d9:7d:28:6d:b0:9a:d9:b4:88:5e:20:52:52:a8:e2:c5:d1:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4b988e0c5f16cd5a58b879a31737b4f2f086b95
        Validity
            Not Before: Jan 21 11:17:19 2026 GMT
            Not After : Jan 20 11:22:19 2027 GMT
        Subject: CN=0C1AB3665D7EAA4F4DF208193F3FCDCE99D2A139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7d:08:9d:e4:79:3b:27:a3:f6:30:58:eb:79:
                    c6:27:45:fa:de:e3:da:3a:a5:3b:ca:fb:67:c8:64:
                    51:95:ad:06:c4:7c:f0:cb:de:e1:9f:39:75:83:aa:
                    db:ec:e3:1b:3e:a0:0b:be:91:38:82:ad:8a:21:2b:
                    af:46:57:77:ad:e1:77:bd:bf:c9:0b:7b:40:09:cf:
                    a0:e8:92:cf:d4:9f:ce:55:c6:5b:75:28:70:3c:ee:
                    7d:aa:71:7e:b6:3f:31:89:36:34:f2:83:18:34:f2:
                    3c:49:02:03:03:9f:71:a4:ab:f5:1e:01:9c:77:56:
                    d9:3d:63:05:96:45:30:99:f5:38:e6:6c:4c:02:10:
                    4c:31:32:b0:a6:4b:50:14:1b:a4:6f:a9:b2:05:b5:
                    1f:28:ec:ca:2f:f9:13:83:07:1a:40:6e:c7:16:25:
                    4e:12:03:79:b4:ec:55:40:1e:6d:57:24:fe:d2:ca:
                    33:75:f8:84:e4:be:1a:7d:c0:c3:b8:a4:84:47:a6:
                    85:a3:7e:dc:6a:a8:b2:94:1f:b9:88:01:d6:cf:cc:
                    d9:85:19:26:42:d2:d6:f1:5a:0a:6a:07:2f:56:1c:
                    47:66:6b:35:18:fe:b5:32:0c:b3:53:17:b5:dc:50:
                    c7:bc:4f:41:0c:ea:c2:86:ab:e9:e8:14:b5:c2:57:
                    3e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:1A:B3:66:5D:7E:AA:4F:4D:F2:08:19:3F:3F:CD:CE:99:D2:A1:39
            X509v3 Authority Key Identifier:
                keyid:E4:B9:88:E0:C5:F1:6C:D5:A5:8B:87:9A:31:73:7B:4F:2F:08:6B:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LmI4MXxbNWli4eaMXN7Ty8Ia5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/AS214976.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214976

    Signature Algorithm: sha256WithRSAEncryption
         33:20:49:e4:a7:14:63:8b:d4:7e:5f:d8:c7:0d:0d:f8:ec:df:
         8d:13:bd:eb:86:95:9d:5a:85:9b:ec:bd:6d:f2:71:fd:0f:7e:
         d0:21:92:ee:be:3d:ba:ce:af:26:d1:8a:6e:8d:03:a9:8c:dd:
         b4:70:d5:b7:c6:8d:c6:e7:8c:cd:ce:d6:53:a6:1b:71:ee:77:
         76:6e:b1:8d:de:70:db:37:21:c2:18:74:6c:dd:8a:67:37:ec:
         83:50:16:b0:ec:82:c9:94:54:91:0e:10:d1:8d:55:a8:02:50:
         42:0e:16:8d:10:9c:b1:3e:7d:bb:6c:0e:21:d1:04:75:ba:7a:
         83:80:87:91:c6:81:aa:2d:6e:50:a7:32:98:56:af:28:7e:15:
         f6:da:e5:7b:82:8f:18:24:34:15:ad:14:7d:48:99:9b:50:8b:
         0d:57:c4:b9:c5:87:1e:d9:eb:eb:bc:25:5b:f2:0e:b6:68:cd:
         06:91:5d:7e:3b:12:a3:38:25:46:d8:09:c1:6b:a4:8e:0f:6b:
         f6:e8:cd:5b:ac:d8:cd:b8:fc:5a:dd:0b:be:5c:6f:d0:a5:cd:
         cc:aa:d6:fd:47:a1:50:dc:26:9f:78:4c:90:e7:e2:35:1b:be:
         0f:16:30:4c:82:c8:a9:4e:92:0d:5a:8a:26:d5:21:4d:ee:01:
         3d:d6:c4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:14:34 2026 by rpki-client