This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/AS215849.asa
File:                     AS215849.asa (raw, json)
Hash identifier:          zDqRf1CmpsA1KFLVwsUM6m+4OIs88BLCSJXXlOwSvmc=
Subject key identifier:   CE:6F:C9:4F:B5:7E:0F:00:7E:DF:CB:51:C3:49:BE:99:A1:7D:03:3A
Certificate issuer:       /CN=7d7059638411e3231e759e74a813bf9376209e77
Certificate serial:       7B6BA8E367A0B04A6FF0C6432FEC2AAD697EF55D
Authority key identifier: 7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/AS215849.asa
Signing time:             Fri 05 Dec 2025 21:34:24 +0000
ASPA not before:          Fri 05 Dec 2025 21:29:24 +0000
ASPA not after:           Fri 04 Dec 2026 21:34:24 +0000
Customer ASID:            215849
Providers:                AS: 215375
                          AS: 215828
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:6b:a8:e3:67:a0:b0:4a:6f:f0:c6:43:2f:ec:2a:ad:69:7e:f5:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d7059638411e3231e759e74a813bf9376209e77
        Validity
            Not Before: Dec  5 21:29:24 2025 GMT
            Not After : Dec  4 21:34:24 2026 GMT
        Subject: CN=CE6FC94FB57E0F007EDFCB51C349BE99A17D033A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b1:27:b4:dd:30:c1:d8:64:67:b7:9e:87:f6:
                    ec:08:6e:b8:62:9f:5e:ff:00:15:75:5c:98:95:44:
                    c3:8a:21:f9:67:ca:30:7a:4c:bf:d8:2a:df:0e:36:
                    de:19:8a:0f:15:b3:75:e0:c3:67:d8:48:06:9b:ce:
                    ed:83:0f:0c:25:fa:e3:ea:7c:c7:19:9c:18:c2:de:
                    de:68:9d:75:43:eb:45:ee:42:ba:86:1b:99:b9:f7:
                    bb:90:ae:30:f6:f4:42:6b:69:af:d1:f1:9c:a5:ae:
                    74:3b:98:a2:a1:2d:27:00:77:86:a0:be:70:14:c0:
                    9b:53:5b:48:6c:7b:2f:4d:9c:02:8a:9f:73:84:6a:
                    fe:15:79:e1:52:52:58:1f:0b:91:18:98:2a:6e:b6:
                    f7:a1:cd:56:f3:9b:74:78:f7:4d:4b:c2:6c:13:58:
                    7c:38:0a:2e:17:0f:cd:03:18:d8:a1:e9:dc:c8:50:
                    bb:c7:4d:d6:fd:a0:7d:5b:34:0c:37:b4:7a:15:2b:
                    34:67:43:98:e8:78:78:91:c4:e5:9d:c2:dd:88:67:
                    6d:24:0c:f3:f3:4f:63:60:bb:24:bd:b7:66:d2:cf:
                    da:4a:98:c0:ed:4c:d2:b4:df:12:c8:ba:39:08:32:
                    b9:28:5e:91:07:83:ef:f8:cb:ab:ac:c5:f2:84:3f:
                    7e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:6F:C9:4F:B5:7E:0F:00:7E:DF:CB:51:C3:49:BE:99:A1:7D:03:3A
            X509v3 Authority Key Identifier:
                keyid:7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/AS215849.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215849

    Signature Algorithm: sha256WithRSAEncryption
         30:6a:2b:e7:07:3c:1f:e7:28:07:e5:a6:69:9f:c8:89:ea:ff:
         c7:21:e4:df:1c:db:f4:90:e0:78:ec:bc:db:42:8a:3c:2b:37:
         09:81:02:2d:f9:ea:96:43:fa:b1:a7:52:22:c8:8b:a3:49:f4:
         37:54:6f:6b:9d:fa:91:11:79:8a:0e:95:c5:a1:ba:f4:37:83:
         32:38:57:ff:fc:9e:c2:ef:d6:a9:f0:83:af:c9:ea:96:dc:a1:
         52:7d:81:fb:f1:22:6d:42:9e:86:13:d6:d8:70:f4:1a:4d:c9:
         8b:ac:cf:8d:08:db:13:eb:d4:d1:86:17:e0:eb:b3:cc:2f:07:
         b8:72:a5:4c:80:e4:aa:02:2b:de:17:f9:17:61:3c:0f:a3:1d:
         7b:44:8f:d0:bf:21:64:f1:7b:22:f1:0e:38:10:30:b6:20:e0:
         8a:b2:4f:dd:cf:db:ca:8c:34:aa:3c:10:15:3d:a7:24:c1:9f:
         74:3a:7a:9a:10:2c:43:73:ac:94:51:4a:9a:20:85:c8:95:e6:
         b7:b2:23:0a:dd:63:09:8a:9c:25:bf:01:20:b6:c6:da:a8:f7:
         4c:66:9e:d8:24:40:f0:3c:34:16:e3:d1:20:9c:7b:7f:b5:38:
         93:18:12:a7:97:74:23:92:d0:ba:29:bf:bd:23:a6:33:11:21:
         b1:b1:cd:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:15:13 2025 by rpki-client