This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/AS211562.asa
File:                     AS211562.asa (raw, json)
Hash identifier:          8C3+cv4Ox/77O136RcP0jRWcrYpRs3rcK+fBYsAe678=
Subject key identifier:   43:5B:DB:69:29:90:D9:6B:A8:3B:42:D4:14:10:F6:9B:D8:FE:90:80
Certificate issuer:       /CN=6a3130acfbfba9017addef637acd312fc763829a
Certificate serial:       02AE0ED4A9A566AC982A4EEBB7CA7B50A89D2620
Authority key identifier: 6A:31:30:AC:FB:FB:A9:01:7A:DD:EF:63:7A:CD:31:2F:C7:63:82:9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ajEwrPv7qQF63e9jes0xL8djgpo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/AS211562.asa
Signing time:             Fri 30 Jan 2026 18:30:57 +0000
ASPA not before:          Fri 30 Jan 2026 18:25:57 +0000
ASPA not after:           Fri 29 Jan 2027 18:30:57 +0000
Customer ASID:            211562
Providers:                AS: 1003
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ajEwrPv7qQF63e9jes0xL8djgpo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:ae:0e:d4:a9:a5:66:ac:98:2a:4e:eb:b7:ca:7b:50:a8:9d:26:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a3130acfbfba9017addef637acd312fc763829a
        Validity
            Not Before: Jan 30 18:25:57 2026 GMT
            Not After : Jan 29 18:30:57 2027 GMT
        Subject: CN=435BDB692990D96BA83B42D41410F69BD8FE9080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:50:7a:3e:ef:1d:07:f9:19:60:a2:b7:d7:d5:
                    5b:d1:8e:3a:e7:3b:4f:4a:ef:fe:83:fd:a3:e2:db:
                    63:ca:a4:c1:16:27:40:ff:ca:2e:9b:f0:31:4c:5d:
                    b7:30:d1:96:e2:bb:5d:37:2a:f3:ba:58:ea:f4:b6:
                    99:e0:57:55:d2:32:b7:d7:00:bf:d1:08:12:df:f1:
                    1f:cc:29:50:82:8d:a5:2d:15:64:6c:79:6a:db:7f:
                    52:14:bb:49:a4:71:6d:dc:4c:17:f8:2f:7d:df:28:
                    b3:e3:5e:7e:21:e7:0e:3f:68:48:44:6e:87:9e:b8:
                    ad:8e:98:08:a5:f9:9f:aa:c7:15:05:70:7f:f1:11:
                    24:44:15:3b:5d:42:8b:35:30:0a:d2:cf:09:3c:14:
                    39:1b:4e:36:7a:ba:be:1d:fb:82:f0:18:2d:94:10:
                    9d:9f:a1:42:f3:b8:a5:b5:b8:20:e1:96:df:dc:71:
                    43:39:81:8f:78:03:b7:45:07:b8:b6:4f:c5:b2:8c:
                    be:8d:b9:b0:12:a3:5f:fd:f3:e2:b7:3c:dc:60:91:
                    df:d5:1f:30:5e:6d:c2:5d:80:7d:4a:f7:81:1f:5b:
                    a6:4d:62:7d:c4:42:83:a7:db:b6:01:a9:17:10:d6:
                    d2:7a:a8:c3:6d:fd:48:69:87:51:29:c8:c5:2c:b4:
                    2c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:5B:DB:69:29:90:D9:6B:A8:3B:42:D4:14:10:F6:9B:D8:FE:90:80
            X509v3 Authority Key Identifier:
                keyid:6A:31:30:AC:FB:FB:A9:01:7A:DD:EF:63:7A:CD:31:2F:C7:63:82:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajEwrPv7qQF63e9jes0xL8djgpo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/AS211562.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211562

    Signature Algorithm: sha256WithRSAEncryption
         00:98:77:80:27:2e:86:be:a6:04:dd:b8:c0:c1:c3:9e:3f:10:
         0a:8a:67:f5:0c:91:40:c8:cf:fb:37:36:e2:0c:ab:32:a3:9a:
         de:61:24:0b:46:35:10:f7:9c:2e:e0:4f:b7:e0:7b:94:8a:15:
         22:17:12:23:40:3c:b1:fe:9c:eb:49:1d:ef:06:97:3d:97:27:
         1c:0d:63:ee:d1:d6:2d:6f:35:e4:40:e0:f0:bb:50:48:12:38:
         7d:9e:19:45:71:48:80:1a:9c:ea:b9:fd:36:d1:d9:82:14:27:
         05:3d:66:9e:8d:2c:8b:b9:d7:dd:58:9c:1c:fb:03:05:b6:af:
         d9:c7:17:38:e1:f1:72:92:5d:dc:64:04:b9:dc:3f:5a:f3:77:
         59:98:82:09:39:14:04:91:18:d4:70:a4:93:53:60:ff:7f:0d:
         34:82:cb:71:c6:42:ee:23:1a:e6:87:94:0b:26:10:45:de:1e:
         2e:0c:15:f3:0b:4b:2b:de:a6:30:49:12:75:ec:58:03:62:af:
         c6:85:2c:26:9c:9e:b4:0f:d0:49:e9:1c:d8:4a:5e:56:d0:9e:
         4f:3d:4f:06:05:e5:5f:57:c4:b5:97:25:aa:84:a9:de:dc:09:
         4c:3a:1c:e2:65:f8:51:4d:79:86:e0:23:34:d6:bb:b8:5b:48:
         3d:76:af:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:40:56 2026 by rpki-client