This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/06feb79d-9a1d-4cf2-9747-ecb32e6c7851/0/AS214749.asa
File:                     AS214749.asa (raw, json)
Hash identifier:          RYlC9PQ+LoodhtgoIjxNb0wE9JuGdO7xtokex5vTzdE=
Subject key identifier:   55:EE:07:0D:3A:57:62:20:7A:39:5C:28:07:6A:D6:E4:BD:D6:57:2C
Certificate issuer:       /CN=bc9e09286114a0abaefcf8ec49e8c5fa5e78484a
Certificate serial:       4FA65CA0267F956BAEAE5B3695B50D1C657E8A4E
Authority key identifier: BC:9E:09:28:61:14:A0:AB:AE:FC:F8:EC:49:E8:C5:FA:5E:78:48:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vJ4JKGEUoKuu_PjsSejF-l54SEo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/06feb79d-9a1d-4cf2-9747-ecb32e6c7851/0/AS214749.asa
Signing time:             Mon 26 Jan 2026 15:10:38 +0000
ASPA not before:          Mon 26 Jan 2026 15:05:38 +0000
ASPA not after:           Mon 25 Jan 2027 15:10:38 +0000
Customer ASID:            214749
Providers:                AS: 8849
                          AS: 34927
                          AS: 47272
                          AS: 52025
                          AS: 207841
                          AS: 209533
                          AS: 212895
                          AS: 214915
                          AS: 215638
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/06feb79d-9a1d-4cf2-9747-ecb32e6c7851/0/BC9E09286114A0ABAEFCF8EC49E8C5FA5E78484A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/06feb79d-9a1d-4cf2-9747-ecb32e6c7851/0/BC9E09286114A0ABAEFCF8EC49E8C5FA5E78484A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vJ4JKGEUoKuu_PjsSejF-l54SEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 13:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:a6:5c:a0:26:7f:95:6b:ae:ae:5b:36:95:b5:0d:1c:65:7e:8a:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc9e09286114a0abaefcf8ec49e8c5fa5e78484a
        Validity
            Not Before: Jan 26 15:05:38 2026 GMT
            Not After : Jan 25 15:10:38 2027 GMT
        Subject: CN=55EE070D3A5762207A395C28076AD6E4BDD6572C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:3b:ec:90:b1:40:66:2a:51:63:66:a9:ab:23:
                    ab:d5:2b:5e:67:43:2e:8c:4a:6b:88:4e:11:18:83:
                    75:cb:56:aa:68:d0:2f:bb:6b:3b:63:a7:3a:ad:0c:
                    7f:12:9c:4d:aa:9b:67:bd:d7:48:be:02:ac:8b:14:
                    b0:75:18:66:ce:9a:68:9d:b0:3b:c4:7d:87:a0:05:
                    0a:43:df:ae:0e:b8:e5:f7:78:54:c1:b3:46:4d:f0:
                    48:2e:63:dc:2f:a2:00:ef:01:ab:6d:69:2d:97:05:
                    17:fd:97:c5:a7:e0:8b:98:5f:7a:8d:1d:f4:12:a0:
                    40:6b:63:6c:53:89:74:66:68:9c:90:f6:48:6c:97:
                    9b:8c:09:a3:8d:b0:07:df:15:f0:b3:79:81:12:29:
                    d3:83:b7:3a:e1:a2:e2:e3:7c:e7:84:86:44:b3:c8:
                    a9:19:c4:a7:81:6f:87:55:44:69:fb:c5:c1:90:10:
                    f8:a6:1e:41:6e:c2:1a:c0:de:5f:54:ae:0d:65:e3:
                    28:66:a9:30:35:ef:13:3a:b4:5b:12:27:9d:89:1f:
                    6b:59:75:ca:39:25:f1:21:e2:dd:74:93:01:1a:b5:
                    d7:1b:9e:ea:31:91:6f:9b:9e:2f:01:ef:f7:15:82:
                    0b:33:02:94:81:94:68:30:85:a2:1a:bc:65:d1:5a:
                    d9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:EE:07:0D:3A:57:62:20:7A:39:5C:28:07:6A:D6:E4:BD:D6:57:2C
            X509v3 Authority Key Identifier:
                keyid:BC:9E:09:28:61:14:A0:AB:AE:FC:F8:EC:49:E8:C5:FA:5E:78:48:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/06feb79d-9a1d-4cf2-9747-ecb32e6c7851/0/BC9E09286114A0ABAEFCF8EC49E8C5FA5E78484A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ4JKGEUoKuu_PjsSejF-l54SEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/06feb79d-9a1d-4cf2-9747-ecb32e6c7851/0/AS214749.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214749

    Signature Algorithm: sha256WithRSAEncryption
         84:9f:a1:f2:b5:82:c2:53:43:18:6c:02:df:f3:d3:17:42:61:
         bb:ad:a5:c9:45:da:26:a4:09:da:f0:f0:b3:2e:56:99:9c:3d:
         0b:3b:34:b0:eb:06:ed:8d:13:7a:4c:d1:4f:e1:0c:e7:9b:47:
         e3:5c:45:7c:8f:73:16:da:08:f9:09:15:76:f4:95:54:ff:d7:
         1d:8a:8c:ec:e7:a3:6f:52:c2:f8:15:89:31:60:b5:50:cb:50:
         17:7d:3a:2a:c8:ae:af:b2:7f:3f:4c:2e:31:c0:d8:e6:60:96:
         16:18:aa:bf:62:b0:eb:b9:a5:74:8a:49:6f:7e:63:80:93:a7:
         6a:d6:f5:1c:9f:ea:8a:de:7d:f2:28:df:64:33:f1:fe:c1:f7:
         2e:d5:0d:c7:bb:c1:cc:a2:af:a4:98:4a:3a:76:23:f4:6f:b3:
         a5:9c:7c:91:0c:7a:46:72:43:34:33:a2:fa:a3:b8:49:c6:c0:
         a7:c5:7c:d4:a8:cf:34:d3:60:3c:be:51:3e:66:a8:b1:6d:aa:
         b2:63:2a:65:f0:88:dd:74:55:ae:a7:9f:0f:75:91:a8:3a:65:
         d3:db:28:15:92:5e:08:a7:d5:72:53:04:88:44:67:72:ce:51:
         fe:a1:00:d4:24:e7:6e:b9:6a:77:85:d0:a5:7b:d1:85:26:a7:
         3d:8a:8f:b2
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIUT6ZcoCZ/lWuurls2lbUNHGV+ik4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmM5ZTA5Mjg2MTE0YTBhYmFlZmNmOGVjNDllOGM1ZmE1
ZTc4NDg0YTAeFw0yNjAxMjYxNTA1MzhaFw0yNzAxMjUxNTEwMzhaMDMxMTAvBgNV
BAMTKDU1RUUwNzBEM0E1NzYyMjA3QTM5NUMyODA3NkFENkU0QkRENjU3MkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuO+yQsUBmKlFjZqmrI6vVK15n
Qy6MSmuIThEYg3XLVqpo0C+7aztjpzqtDH8SnE2qm2e910i+AqyLFLB1GGbOmmid
sDvEfYegBQpD364OuOX3eFTBs0ZN8EguY9wvogDvAattaS2XBRf9l8Wn4IuYX3qN
HfQSoEBrY2xTiXRmaJyQ9khsl5uMCaONsAffFfCzeYESKdODtzrhouLjfOeEhkSz
yKkZxKeBb4dVRGn7xcGQEPimHkFuwhrA3l9Urg1l4yhmqTA17xM6tFsSJ52JH2tZ
dco5JfEh4t10kwEatdcbnuoxkW+bni8B7/cVggszApSBlGgwhaIavGXRWtnDAgMB
AAGjggIFMIICATAdBgNVHQ4EFgQUVe4HDTpXYiB6OVwoB2rW5L3WVywwHwYDVR0j
BBgwFoAUvJ4JKGEUoKuu/PjsSejF+l54SEowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDZmZWI3OWQtOWExZC00Y2YyLTk3NDctZWNiMzJlNmM3
ODUxLzAvQkM5RTA5Mjg2MTE0QTBBQkFFRkNGOEVDNDlFOEM1RkE1RTc4NDg0QS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZKNEpLR0VVb0t1dV9QanNTZWpGLWw1
NFNFby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA2ZmViNzlkLTlhMWQt
NGNmMi05NzQ3LWVjYjMyZTZjNzg1MS8wL0FTMjE0NzQ5LmFzYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNG3TANBgkq
hkiG9w0BAQsFAAOCAQEAhJ+h8rWCwlNDGGwC3/PTF0Jhu62lyUXaJqQJ2vDwsy5W
mZw9Czs0sOsG7Y0TekzRT+EM55tH41xFfI9zFtoI+QkVdvSVVP/XHYqM7Oejb1LC
+BWJMWC1UMtQF306Ksiur7J/P0wuMcDY5mCWFhiqv2Kw67mldIpJb35jgJOnatb1
HJ/qit598ijfZDPx/sH3LtUNx7vBzKKvpJhKOnYj9G+zpZx8kQx6RnJDNDOi+qO4
ScbAp8V81KjPNNNgPL5RPmaosW2qsmMqZfCI3XRVrqefD3WRqDpl09soFZJeCKfV
clMEiERncs5R/qEA1CTnbrlqd4XQpXvRhSanPYqPsg==
-----END CERTIFICATE-----
Generated at Wed Jan 28 04:35:00 2026 by rpki-client