This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/AS215296.asa
File:                     AS215296.asa (raw, json)
Hash identifier:          OtSM7n/M5H4Gr1eK1WwYJcN3J5IxezG9iWmcyo289w0=
Subject key identifier:   33:31:DD:02:58:73:4B:63:19:DE:BB:BF:B5:F2:31:67:B0:79:C5:2D
Certificate issuer:       /CN=578d7dc9779b27815ebb5c3f5fcf07cc583708b3
Certificate serial:       3CC92BE2E034EB8DBA8D7D48BC668A1E2B089D10
Authority key identifier: 57:8D:7D:C9:77:9B:27:81:5E:BB:5C:3F:5F:CF:07:CC:58:37:08:B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/AS215296.asa
Signing time:             Thu 27 Nov 2025 09:18:38 +0000
ASPA not before:          Thu 27 Nov 2025 09:13:38 +0000
ASPA not after:           Thu 26 Nov 2026 09:18:38 +0000
Customer ASID:            215296
Providers:                AS: 6204
                          AS: 8283
                          AS: 64289
                          AS: 200132
                          AS: 212895
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 18:43:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:c9:2b:e2:e0:34:eb:8d:ba:8d:7d:48:bc:66:8a:1e:2b:08:9d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=578d7dc9779b27815ebb5c3f5fcf07cc583708b3
        Validity
            Not Before: Nov 27 09:13:38 2025 GMT
            Not After : Nov 26 09:18:38 2026 GMT
        Subject: CN=3331DD0258734B6319DEBBBFB5F23167B079C52D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e1:05:53:ff:af:ab:cc:6b:94:3f:20:82:d0:
                    16:6f:3d:0b:f6:4b:04:20:17:79:82:27:f2:46:41:
                    51:f5:73:d1:83:48:d8:bf:8d:8e:78:6e:41:d4:d5:
                    11:bf:8f:02:03:d0:07:51:f6:7c:10:83:c0:10:c9:
                    ff:f9:a9:db:2f:4b:19:f7:d7:7f:bc:61:38:75:f7:
                    39:23:90:fe:3c:87:9d:8f:ae:b0:18:df:15:6a:d8:
                    a0:50:3e:fb:c7:64:66:13:51:20:63:29:64:95:35:
                    99:f3:4c:2a:a6:3e:fe:05:79:3c:4e:60:86:70:59:
                    1f:ec:03:0c:c0:57:c1:f6:02:02:31:db:06:c1:f7:
                    b8:d3:a5:45:94:c4:69:35:f7:03:0a:ae:05:4a:b5:
                    f5:67:bf:05:61:73:f3:a9:c7:ec:03:3f:ab:b8:2f:
                    d6:43:42:2d:02:de:22:5f:a5:bb:59:34:e2:46:5f:
                    35:9f:43:2d:ac:58:2e:6c:02:8e:06:15:70:4d:67:
                    d9:48:71:32:af:4a:5c:ce:fb:5f:5e:fb:28:0b:43:
                    fe:80:18:ac:34:04:34:bb:ed:e9:3f:db:c1:5b:e4:
                    a7:ff:8d:00:4e:32:03:d1:0a:4e:9b:b8:19:a9:a4:
                    22:52:f6:6c:80:3c:fc:a6:64:3b:b2:7a:30:d5:ef:
                    b4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:31:DD:02:58:73:4B:63:19:DE:BB:BF:B5:F2:31:67:B0:79:C5:2D
            X509v3 Authority Key Identifier:
                keyid:57:8D:7D:C9:77:9B:27:81:5E:BB:5C:3F:5F:CF:07:CC:58:37:08:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/AS215296.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215296

    Signature Algorithm: sha256WithRSAEncryption
         3b:52:14:25:b2:7c:1f:4b:71:be:63:68:dd:78:86:f7:f4:66:
         39:50:0f:be:33:c1:ec:a2:3e:4a:f3:85:ec:fc:2e:5c:4d:77:
         1f:ff:5b:75:0d:96:ba:dd:05:9c:89:1d:9c:82:e5:cc:0d:c9:
         58:dc:f3:4a:49:d3:cb:49:14:4c:a0:11:66:d8:52:00:6f:ea:
         bc:56:a7:9c:96:0e:2b:48:9e:88:cb:ed:35:b5:88:9d:fd:3e:
         23:15:1c:40:12:2a:03:42:d0:27:b4:80:f4:70:e4:7c:50:c8:
         2a:d5:88:56:61:c0:66:bd:c5:44:90:20:e2:84:68:3c:e8:0c:
         4e:dc:66:f2:fe:a4:c9:35:96:00:40:f4:48:ec:02:e8:0c:28:
         de:38:f9:a2:0f:a2:ed:2c:2b:d1:a2:a5:f7:a7:a8:e0:1c:a4:
         65:95:37:96:55:7c:0b:8f:ec:09:0b:e1:41:9c:81:1a:87:5e:
         e3:8c:b3:b1:ee:5a:32:c1:c9:36:93:ce:d3:e0:30:c1:ae:4c:
         bf:15:bc:31:4a:91:f3:b1:07:81:4e:a4:cf:9f:20:75:26:8a:
         a4:25:bc:45:9e:81:59:ce:42:dc:d3:83:6f:a1:18:c5:c9:52:
         a3:10:62:59:85:74:4d:47:75:cd:ab:89:dc:03:a4:c1:2e:87:
         68:22:52:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:14:59 2025 by rpki-client