This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/AS214498.asa
File:                     AS214498.asa (raw, json)
Hash identifier:          8ffGLuery14Nq5mT6PDQYWHsPt7OmIpAlm+G/THSwyg=
Subject key identifier:   53:9E:A5:44:97:AD:6A:8D:68:94:1D:37:2A:E2:98:B5:87:60:D6:27
Certificate issuer:       /CN=c7615031d0a8e02bf58efc7f2330af3d65954efc
Certificate serial:       4C47A415D67F94A421BAD674EA0AAAE0037D1AFA
Authority key identifier: C7:61:50:31:D0:A8:E0:2B:F5:8E:FC:7F:23:30:AF:3D:65:95:4E:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/AS214498.asa
Signing time:             Fri 21 Nov 2025 12:08:07 +0000
ASPA not before:          Fri 21 Nov 2025 12:03:07 +0000
ASPA not after:           Fri 20 Nov 2026 12:08:07 +0000
Customer ASID:            214498
Providers:                AS: 16276
                          AS: 207841
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:47:a4:15:d6:7f:94:a4:21:ba:d6:74:ea:0a:aa:e0:03:7d:1a:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7615031d0a8e02bf58efc7f2330af3d65954efc
        Validity
            Not Before: Nov 21 12:03:07 2025 GMT
            Not After : Nov 20 12:08:07 2026 GMT
        Subject: CN=539EA54497AD6A8D68941D372AE298B58760D627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1b:66:65:d2:8c:d7:8b:5d:f9:9e:ec:84:fb:
                    31:22:98:c1:08:d2:80:59:ab:7b:8a:fa:4a:00:c6:
                    f6:37:b2:a8:54:8e:87:2f:92:92:ee:93:ea:22:7c:
                    06:cc:7e:be:77:b0:cc:09:4b:ba:a3:79:3d:0e:23:
                    19:b7:be:c1:d2:db:b2:14:ca:be:f3:bd:29:08:fc:
                    2d:a7:ae:d1:05:91:e0:52:06:5d:b6:c8:f3:62:aa:
                    bc:10:95:cb:40:73:89:8c:20:55:3e:3b:98:d0:b3:
                    7b:ad:58:3b:80:89:8c:ca:bc:e3:82:13:42:d6:3c:
                    8d:bb:3b:11:af:9b:0c:e0:df:c8:2d:b3:80:15:48:
                    11:f8:77:60:67:f5:60:6a:df:22:d7:9b:60:dd:cf:
                    1f:bc:a5:7b:b5:f7:e3:15:ce:f2:3b:88:34:a2:5c:
                    45:03:79:57:fe:78:50:eb:51:48:0a:e0:92:b7:35:
                    6f:11:64:5f:f2:14:b5:9e:ab:cf:9c:a8:d8:c3:1a:
                    c1:27:b6:88:77:07:32:f1:b3:52:71:2b:57:e5:98:
                    46:c2:f7:7e:ca:9f:92:ed:dd:75:84:c6:34:60:30:
                    7d:36:37:a8:4b:66:f8:a2:ae:d9:3a:34:99:fe:bf:
                    be:15:71:9c:82:db:de:6e:e0:40:86:a1:e7:35:07:
                    83:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:9E:A5:44:97:AD:6A:8D:68:94:1D:37:2A:E2:98:B5:87:60:D6:27
            X509v3 Authority Key Identifier:
                keyid:C7:61:50:31:D0:A8:E0:2B:F5:8E:FC:7F:23:30:AF:3D:65:95:4E:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/AS214498.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214498

    Signature Algorithm: sha256WithRSAEncryption
         a8:b2:74:ce:7f:0f:52:91:a3:94:10:2a:23:99:73:84:6a:01:
         6d:65:7e:e5:f5:c2:cf:65:5e:67:dd:bb:77:07:25:df:43:07:
         5d:a4:50:39:b0:9c:1c:b7:2c:10:9b:7d:04:95:f9:da:74:f7:
         5d:64:c5:72:d9:0a:70:c2:93:83:1f:c7:58:b3:1f:8c:f4:e5:
         d0:26:f9:c0:24:87:19:eb:68:4a:1b:96:46:12:71:58:ab:32:
         61:54:ee:9e:4f:9c:22:44:30:83:a2:65:b3:26:3f:27:4d:ab:
         7e:61:7b:17:3f:27:19:e6:85:2e:e4:a5:3c:40:5b:11:f2:a3:
         18:38:bb:80:43:9e:7d:8b:37:02:a7:54:43:84:c0:de:7f:9c:
         4d:6e:67:31:e2:12:49:c7:d9:e5:0a:c4:0c:a7:b1:70:37:9b:
         0f:13:60:f8:5f:ad:a3:94:e9:1a:8f:7b:aa:5c:54:21:d9:2b:
         b3:f6:ca:4f:92:87:50:cb:38:85:50:a0:0f:90:10:91:ae:be:
         73:dc:9f:69:3a:87:4a:81:02:d5:92:8e:b0:4f:d8:d2:99:ee:
         22:aa:71:68:77:dd:66:51:36:62:5f:d3:a6:0f:b5:2a:e4:04:
         e0:a9:9b:24:38:38:59:ce:63:e1:01:25:db:44:be:29:4b:f0:
         f2:24:5d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:15:28 2025 by rpki-client