This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/AS202939.asa
File:                     AS202939.asa (raw, json)
Hash identifier:          piv9HPRfqfODpLZuvS6ulSjfQRKT99tRmCEIVNoawzI=
Subject key identifier:   2C:B2:E5:ED:D5:27:C6:D2:7B:5F:B9:6D:AB:F0:36:96:64:7B:7C:88
Certificate issuer:       /CN=40f02fb7dfe9ac800a1b1b693709c2f03c5ed98b
Certificate serial:       53C44CA0F0DC73318D69A9AE2703453786DB6F39
Authority key identifier: 40:F0:2F:B7:DF:E9:AC:80:0A:1B:1B:69:37:09:C2:F0:3C:5E:D9:8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/AS202939.asa
Signing time:             Thu 15 Jan 2026 08:03:47 +0000
ASPA not before:          Thu 15 Jan 2026 07:58:47 +0000
ASPA not after:           Thu 14 Jan 2027 08:03:47 +0000
Customer ASID:            202939
Providers:                AS: 6939
                          AS: 7720
                          AS: 14447
                          AS: 17433
                          AS: 31898
                          AS: 34927
                          AS: 41051
                          AS: 44324
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 13:38:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:c4:4c:a0:f0:dc:73:31:8d:69:a9:ae:27:03:45:37:86:db:6f:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f02fb7dfe9ac800a1b1b693709c2f03c5ed98b
        Validity
            Not Before: Jan 15 07:58:47 2026 GMT
            Not After : Jan 14 08:03:47 2027 GMT
        Subject: CN=2CB2E5EDD527C6D27B5FB96DABF03696647B7C88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1b:ae:03:1f:7d:2d:3d:cf:22:bb:55:a6:5e:
                    79:c2:8c:36:97:c0:52:f7:15:19:ac:38:f3:4e:6e:
                    a7:d3:bb:87:3e:60:98:89:5b:9a:b5:4c:cf:a3:cd:
                    23:cf:eb:a0:9f:1f:29:70:ad:ac:3b:4a:3e:aa:e0:
                    a7:5f:ca:1e:96:8a:cf:18:01:c5:28:53:83:b8:e1:
                    ae:a6:ac:50:9c:a4:f5:00:56:69:ae:ea:22:4a:70:
                    83:1c:4c:70:76:ff:b5:61:7a:8a:e7:06:b1:5f:a9:
                    3b:99:a1:40:cd:14:9e:2d:e9:57:60:ff:4e:f9:5a:
                    47:03:2a:c1:fc:42:a8:93:c8:69:ad:9e:6e:af:59:
                    35:27:2c:fb:5f:17:10:9a:58:16:56:29:5e:e4:4f:
                    ba:b4:ba:ba:42:84:9e:5b:ea:1d:2d:72:e0:19:6d:
                    4b:33:91:9c:26:f3:53:6d:c9:97:ff:ef:b1:9c:ec:
                    cd:a9:ed:54:fc:9b:f6:39:9c:bc:64:12:54:75:84:
                    12:d0:ae:c7:42:6a:f4:b5:0b:8f:30:dc:55:34:00:
                    36:9d:a5:e8:f7:46:8f:ee:4d:ee:21:4a:15:c7:75:
                    69:70:49:ce:4f:4c:f8:5d:dc:4d:5c:d0:e8:a8:ee:
                    01:44:37:d9:c3:69:2f:ef:fe:0b:0c:01:85:f4:75:
                    23:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B2:E5:ED:D5:27:C6:D2:7B:5F:B9:6D:AB:F0:36:96:64:7B:7C:88
            X509v3 Authority Key Identifier:
                keyid:40:F0:2F:B7:DF:E9:AC:80:0A:1B:1B:69:37:09:C2:F0:3C:5E:D9:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/AS202939.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202939

    Signature Algorithm: sha256WithRSAEncryption
         3f:13:9f:39:b9:3f:81:57:74:0a:49:ce:39:c7:66:4e:6d:ea:
         b3:c0:b4:f0:ef:f4:05:ad:b6:32:ed:8a:35:55:24:e2:2d:9f:
         6d:f7:0c:fd:b9:ba:ef:3f:c8:13:3f:15:79:9b:a4:02:5e:ad:
         d2:cd:42:ac:22:33:d6:09:e4:22:3c:b4:25:06:ba:87:88:3e:
         e3:59:e1:0a:05:75:4f:f3:f6:85:d0:ce:db:a2:98:7e:66:58:
         20:af:b8:23:06:73:6c:41:f0:cf:45:9f:f7:1b:e6:5b:58:53:
         40:23:41:60:f7:ad:fc:cd:b5:35:19:4e:e5:b9:66:f6:d9:b2:
         ac:85:58:e6:cc:9b:84:7b:d5:7d:ad:2a:86:0e:9d:b5:97:2c:
         f9:95:62:b9:2b:24:24:dd:3d:19:80:25:1c:0c:a1:54:6e:9e:
         9c:19:7e:0d:dd:67:ce:e7:c8:91:5c:0c:0b:3d:8d:20:36:3c:
         bf:36:19:4e:7f:4c:18:1e:ef:03:11:44:88:08:f8:26:93:12:
         bf:54:6c:5b:ea:67:9e:94:47:fb:6a:a5:4b:8b:46:20:92:1d:
         62:50:76:bd:90:67:24:5b:c3:58:1c:f5:c6:97:1f:c5:31:0b:
         ea:ba:34:d4:2e:2c:15:7e:f2:59:13:24:b5:ab:69:c5:59:c1:
         4e:6c:62:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 03:24:20 2026 by rpki-client