This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/AS204518.asa
File:                     AS204518.asa (raw, json)
Hash identifier:          +a70Dretrb4KJ4yzwih5lF1Jn0AeV/QnsDhvKdho2Ts=
Subject key identifier:   C9:03:6D:E1:B2:CC:74:91:80:39:CB:2F:1B:67:0C:15:94:76:5D:0A
Certificate issuer:       /CN=86dd27eac36dd2299c2889aa376f963dae72f42b
Certificate serial:       66116B4E165C880CAE687D97DF21AAE394C16DB0
Authority key identifier: 86:DD:27:EA:C3:6D:D2:29:9C:28:89:AA:37:6F:96:3D:AE:72:F4:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ht0n6sNt0imcKImqN2-WPa5y9Cs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/AS204518.asa
Signing time:             Sat 17 Jan 2026 21:41:08 +0000
ASPA not before:          Sat 17 Jan 2026 21:36:08 +0000
ASPA not after:           Sat 16 Jan 2027 21:41:08 +0000
Customer ASID:            204518
Providers:                AS: 198304
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/86DD27EAC36DD2299C2889AA376F963DAE72F42B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/86DD27EAC36DD2299C2889AA376F963DAE72F42B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ht0n6sNt0imcKImqN2-WPa5y9Cs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:11:6b:4e:16:5c:88:0c:ae:68:7d:97:df:21:aa:e3:94:c1:6d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86dd27eac36dd2299c2889aa376f963dae72f42b
        Validity
            Not Before: Jan 17 21:36:08 2026 GMT
            Not After : Jan 16 21:41:08 2027 GMT
        Subject: CN=C9036DE1B2CC74918039CB2F1B670C1594765D0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c7:d0:8c:cd:6b:23:fd:ce:f1:64:be:00:a4:
                    14:b2:ab:bd:67:e1:d7:f7:c9:73:a2:61:f1:25:6f:
                    a9:32:f7:94:20:36:0f:b9:d7:fd:46:09:52:40:f9:
                    c5:95:7a:8a:16:94:97:9f:53:20:fd:85:ad:d2:4a:
                    1a:7b:df:e4:7f:09:0e:75:93:0c:fd:95:57:c0:72:
                    6f:57:8f:9e:fa:f5:3a:12:af:c8:74:8a:04:08:08:
                    ed:66:77:f7:ea:f9:4f:ba:10:6b:c4:61:2c:b7:3e:
                    30:4b:6c:5a:b7:e4:9b:81:ad:b9:0d:91:d6:fc:ee:
                    4a:ff:a8:9c:ab:96:be:b8:cb:16:6c:cc:e6:0f:62:
                    f1:95:3f:cc:cf:ba:7c:be:79:cd:ae:81:97:03:3d:
                    e8:ad:c8:ae:c2:f1:52:ff:e0:0d:7b:f5:35:22:ca:
                    54:c9:f2:90:ff:ab:dd:f5:7c:cf:0f:69:38:f6:2b:
                    e3:46:bf:f8:d8:63:ec:60:d8:29:c4:f4:b3:c8:a5:
                    ef:3e:0e:a3:6e:2b:7a:24:da:a8:d6:f7:ea:f3:09:
                    29:3c:c5:7a:07:0a:c8:8e:64:28:a1:a5:ca:30:16:
                    43:cc:d8:13:d7:3d:b5:ba:9c:78:a7:d1:0f:cd:4a:
                    20:7a:64:79:1d:d1:c5:84:56:d0:9b:f6:50:7f:f7:
                    dc:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:03:6D:E1:B2:CC:74:91:80:39:CB:2F:1B:67:0C:15:94:76:5D:0A
            X509v3 Authority Key Identifier:
                keyid:86:DD:27:EA:C3:6D:D2:29:9C:28:89:AA:37:6F:96:3D:AE:72:F4:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/86DD27EAC36DD2299C2889AA376F963DAE72F42B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ht0n6sNt0imcKImqN2-WPa5y9Cs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/AS204518.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204518

    Signature Algorithm: sha256WithRSAEncryption
         ca:c1:91:e0:a5:3e:c1:ea:15:c9:ef:08:f2:3f:33:a1:60:13:
         d5:c1:7d:d6:5c:d6:af:80:04:b8:b5:21:7a:e3:21:cc:ef:33:
         11:97:08:cd:a1:72:1a:70:1d:a3:80:2d:e1:01:7e:de:e9:ea:
         09:c1:67:05:15:92:49:13:7e:68:e8:b3:ba:f9:43:d1:14:e6:
         44:4e:77:05:7b:19:2d:40:36:63:c7:90:e1:cb:8f:5a:3d:06:
         b9:a7:7e:66:b0:69:c6:60:37:ff:a4:ff:cb:eb:5c:38:9c:11:
         11:6f:03:ef:51:84:0a:c7:e8:3f:34:d9:f4:f2:e7:ed:c3:f9:
         43:cb:94:58:92:3c:45:ae:25:a9:31:bf:4b:dd:f0:b8:d3:39:
         99:2e:9a:a4:5d:b2:34:0e:f0:7b:0d:eb:6b:d1:c7:d5:50:24:
         1c:51:98:2b:eb:0d:73:7a:1c:75:89:39:fd:fe:97:e9:5a:bd:
         c8:a2:85:5e:56:7e:10:08:e5:b1:19:4e:bf:ef:11:2d:9b:a8:
         3e:0f:39:46:b0:1f:c9:ed:ae:05:c3:ff:30:de:f5:1a:b5:b2:
         ab:65:ed:9e:0f:47:5a:4d:8b:a1:e9:de:76:c3:5b:86:4d:68:
         9c:7b:56:5b:b7:90:bc:02:1e:8f:fa:c2:6f:ee:77:99:c3:74:
         38:e8:4f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:14:51 2026 by rpki-client