This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/AS208453.asa
File:                     AS208453.asa (raw, json)
Hash identifier:          toOH13RB5+pWltEn+DIWd3Jh25GA7/n1ICrPv2hKjZc=
Subject key identifier:   D0:55:BE:C9:F7:73:F1:15:F1:D6:61:0A:07:2B:68:8C:DC:A1:9F:19
Certificate issuer:       /CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11
Certificate serial:       407424C4DA198E57ADE38275DA0095DEF15E89C4
Authority key identifier: E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/AS208453.asa
Signing time:             Thu 27 Nov 2025 21:22:37 +0000
ASPA not before:          Thu 27 Nov 2025 21:17:37 +0000
ASPA not after:           Thu 26 Nov 2026 21:22:37 +0000
Customer ASID:            208453
Providers:                AS: 3399
                          AS: 35133
                          AS: 60068
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:74:24:c4:da:19:8e:57:ad:e3:82:75:da:00:95:de:f1:5e:89:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11
        Validity
            Not Before: Nov 27 21:17:37 2025 GMT
            Not After : Nov 26 21:22:37 2026 GMT
        Subject: CN=D055BEC9F773F115F1D6610A072B688CDCA19F19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7a:7d:1e:b5:8b:4f:f1:54:e7:38:3e:db:e5:
                    4f:f0:c0:ac:c8:b9:c5:29:94:f0:ac:5f:52:f6:0a:
                    78:4d:9d:d1:cd:9f:39:59:b7:ac:02:a9:ad:8a:f4:
                    d4:90:38:a3:03:eb:16:32:2a:68:84:d4:2c:b9:07:
                    56:35:1b:13:c8:db:d0:4b:0e:87:56:b1:51:c6:27:
                    94:fd:1c:65:6e:2f:20:28:a2:d5:43:7c:1f:c2:84:
                    c4:60:e8:9c:4d:e1:30:f4:b8:6d:69:7c:43:3d:bc:
                    02:23:ea:c4:74:ee:c3:8e:da:f1:9f:a9:07:36:3a:
                    bb:9b:64:a4:a5:28:84:ae:b3:ae:1f:df:c8:c0:ce:
                    1e:6f:7d:07:5c:72:de:eb:0b:4e:8a:c5:e9:04:5b:
                    9b:0a:05:ee:7e:dc:26:d3:63:57:82:95:d8:cc:a0:
                    d3:f0:32:ed:51:4d:d8:cf:c9:a6:fe:db:b3:ec:1c:
                    70:09:57:b0:ae:90:90:a5:0e:5a:d6:45:58:44:76:
                    52:99:15:3b:81:35:b0:64:32:46:ce:f5:aa:06:ca:
                    8d:fc:f3:4a:ef:f3:91:d2:29:16:16:8f:e5:63:22:
                    2d:13:44:db:f5:4f:8e:f2:81:f4:ba:b8:89:5e:5c:
                    54:be:4b:fc:f2:4f:2f:24:3e:23:20:75:57:4b:b0:
                    24:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:55:BE:C9:F7:73:F1:15:F1:D6:61:0A:07:2B:68:8C:DC:A1:9F:19
            X509v3 Authority Key Identifier:
                keyid:E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/AS208453.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208453

    Signature Algorithm: sha256WithRSAEncryption
         8d:aa:47:9e:df:9a:89:12:e8:bb:29:7e:5a:e9:c3:6c:06:3a:
         97:65:90:bc:15:12:09:8a:51:ab:c9:90:76:45:96:ae:a7:a1:
         84:ca:45:75:d4:aa:d1:74:68:9a:fb:47:f0:c8:70:73:78:19:
         a6:91:f4:d5:30:5f:3f:7e:e4:64:45:b9:d0:d6:31:e8:f5:ea:
         a4:cf:ab:64:79:74:74:82:ab:be:e0:6a:b0:e1:c6:bc:eb:8a:
         52:20:3d:d1:59:47:46:76:85:c4:7a:0b:d2:8c:ad:14:6e:ca:
         c6:69:ef:a0:df:09:e8:73:9c:06:e3:20:46:5f:96:70:d3:61:
         6e:fa:79:1c:e0:db:7a:73:67:38:86:92:4f:d7:d8:10:09:a5:
         da:1d:07:0c:f0:65:6e:fc:4f:bd:e0:aa:49:4c:3b:78:53:7b:
         ad:8d:e5:89:fa:e0:3c:73:b2:77:63:b7:f0:c9:3e:86:ab:74:
         29:bb:13:fd:a8:10:05:00:0b:f3:71:04:5b:a4:01:27:8b:54:
         54:8f:53:21:66:73:28:81:b8:b9:5c:2c:a4:14:fd:44:15:ff:
         25:c7:8c:c8:31:25:84:0e:40:4d:f1:af:58:98:d5:37:58:6c:
         2e:6b:1c:1c:84:df:32:9b:5e:56:15:58:33:b0:d7:db:58:1c:
         d1:82:b7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:11:24 2025 by rpki-client