This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/38fda7c1-9fb5-4551-b6ca-f957eb0742df/1/AS210773.asa
File:                     AS210773.asa (raw, json)
Hash identifier:          r6i5G6kjAFc8UY/TRtXWWrHAB0jZ9ypM41IdntCI4kQ=
Subject key identifier:   6E:FE:59:3C:68:71:34:8E:BA:C2:B5:60:29:E6:A7:33:3A:E3:8F:4A
Certificate issuer:       /CN=381f31477a36f187b7d3db8af4d9b349e8486f5c
Certificate serial:       0CA45502368A3E09C05601A6A360631D09D7ED5E
Authority key identifier: 38:1F:31:47:7A:36:F1:87:B7:D3:DB:8A:F4:D9:B3:49:E8:48:6F:5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OB8xR3o28Ye309uK9NmzSehIb1w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/38fda7c1-9fb5-4551-b6ca-f957eb0742df/1/AS210773.asa
Signing time:             Thu 25 Dec 2025 09:20:23 +0000
ASPA not before:          Thu 25 Dec 2025 09:15:23 +0000
ASPA not after:           Thu 24 Dec 2026 09:20:23 +0000
Customer ASID:            210773
Providers:                AS: 151673
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/38fda7c1-9fb5-4551-b6ca-f957eb0742df/1/381F31477A36F187B7D3DB8AF4D9B349E8486F5C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/38fda7c1-9fb5-4551-b6ca-f957eb0742df/1/381F31477A36F187B7D3DB8AF4D9B349E8486F5C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OB8xR3o28Ye309uK9NmzSehIb1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 04:10:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:a4:55:02:36:8a:3e:09:c0:56:01:a6:a3:60:63:1d:09:d7:ed:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=381f31477a36f187b7d3db8af4d9b349e8486f5c
        Validity
            Not Before: Dec 25 09:15:23 2025 GMT
            Not After : Dec 24 09:20:23 2026 GMT
        Subject: CN=6EFE593C6871348EBAC2B56029E6A7333AE38F4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2a:4c:06:14:26:b4:35:c9:60:46:05:ac:ab:
                    7d:e9:56:11:b9:2f:99:80:47:b9:54:a0:11:3b:50:
                    cb:c8:84:01:f2:c1:06:a6:be:27:69:47:d3:12:52:
                    64:70:c5:73:e6:41:69:85:bf:03:71:ee:21:54:a5:
                    eb:96:db:a4:6b:e9:0d:a4:c3:e0:ca:ae:6f:8f:ce:
                    f8:b7:93:41:8c:9c:b5:a6:80:e9:f0:20:3b:13:c5:
                    d2:bc:99:9e:12:3f:85:69:96:67:55:2e:bc:4d:09:
                    58:5e:28:10:62:b0:2f:57:c1:34:27:b7:48:32:35:
                    12:0f:50:ac:84:00:75:80:7b:12:f1:93:13:56:6f:
                    d3:c5:cd:82:04:a2:f4:f9:d4:2f:39:9c:21:34:44:
                    3b:f0:c2:fe:c6:c6:c1:51:5c:ce:ef:9c:f6:69:77:
                    38:fd:e4:a3:d1:07:5f:b0:fd:00:c7:06:10:1e:4f:
                    38:12:c1:43:ec:3c:68:90:5b:9a:1d:46:16:d6:98:
                    b9:63:a3:3e:0b:ac:26:30:0d:7f:69:33:21:eb:ce:
                    3e:2a:ea:6f:9e:8d:1a:47:b6:90:b1:c9:34:eb:24:
                    dc:2b:80:6d:a1:2d:8b:05:8b:11:f4:7f:8c:8f:d4:
                    fc:41:aa:eb:c3:fa:ce:62:28:b9:a2:3a:0e:72:0d:
                    06:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:FE:59:3C:68:71:34:8E:BA:C2:B5:60:29:E6:A7:33:3A:E3:8F:4A
            X509v3 Authority Key Identifier:
                keyid:38:1F:31:47:7A:36:F1:87:B7:D3:DB:8A:F4:D9:B3:49:E8:48:6F:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/38fda7c1-9fb5-4551-b6ca-f957eb0742df/1/381F31477A36F187B7D3DB8AF4D9B349E8486F5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OB8xR3o28Ye309uK9NmzSehIb1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/38fda7c1-9fb5-4551-b6ca-f957eb0742df/1/AS210773.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210773

    Signature Algorithm: sha256WithRSAEncryption
         12:42:c4:be:e7:bb:7f:fe:d1:03:a3:c3:80:a3:9e:65:03:de:
         6b:7b:5a:08:2e:04:1b:50:3e:10:8f:4c:67:e8:34:7e:c3:b6:
         ea:44:c8:e8:76:1c:5f:27:88:40:5d:f8:be:fa:6d:20:ac:c0:
         12:7e:20:74:a3:76:8c:cc:45:18:1b:01:1c:96:52:4a:96:d8:
         6a:5f:01:9b:75:f7:be:a9:0c:67:99:ea:e6:1f:c5:b2:3c:b6:
         75:e0:bd:a2:b0:fd:28:45:8b:a1:bc:cd:70:84:8c:e9:86:56:
         7e:01:9f:7d:24:16:a6:6b:8f:c8:91:5e:70:a0:6a:0d:62:12:
         10:15:c1:1b:77:96:56:04:02:05:df:34:97:68:eb:ff:75:68:
         d3:da:03:eb:53:58:73:eb:6b:91:f6:e0:dc:b0:4f:f3:68:58:
         88:67:82:6b:e5:78:3b:fd:ab:6b:0d:d8:45:0f:1c:0a:56:21:
         e7:2e:af:bd:2e:12:c2:6f:d3:f0:ea:16:0c:0d:05:cd:ca:3c:
         88:2c:e4:ac:60:2e:d0:cb:55:9f:47:ca:44:05:8c:02:4c:8c:
         2d:6d:dc:19:b8:4a:b8:c2:f0:16:c7:84:fd:1c:92:87:5e:4a:
         a2:5c:e6:d8:4e:8b:39:a4:89:9b:93:47:91:2f:44:e9:65:03:
         ea:21:01:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 17:17:41 2025 by rpki-client