This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4a62173e-e6af-40bc-aba8-1f681b1240f8/0/AS214223.asa
File:                     AS214223.asa (raw, json)
Hash identifier:          YNUlhwP3NAw3XnZ5SvA18oWMQcytI8vssQdkgkKD2Xg=
Subject key identifier:   F2:B3:33:EE:7C:76:2F:70:50:82:2D:6E:03:BB:FF:87:79:D4:C7:1C
Certificate issuer:       /CN=20d9075327cd4c82769464b63e2399758de0cf50
Certificate serial:       4273D656FD8EFAB2170EA4A628A82B4A5B6FD320
Authority key identifier: 20:D9:07:53:27:CD:4C:82:76:94:64:B6:3E:23:99:75:8D:E0:CF:50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/INkHUyfNTIJ2lGS2PiOZdY3gz1A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/4a62173e-e6af-40bc-aba8-1f681b1240f8/0/AS214223.asa
Signing time:             Sat 03 Jan 2026 14:45:33 +0000
ASPA not before:          Sat 03 Jan 2026 14:40:33 +0000
ASPA not after:           Sat 02 Jan 2027 14:45:33 +0000
Customer ASID:            214223
Providers:                AS: 11967
                          AS: 34927
                          AS: 35661
                          AS: 47272
                          AS: 52025
                          AS: 212895
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:73:d6:56:fd:8e:fa:b2:17:0e:a4:a6:28:a8:2b:4a:5b:6f:d3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20d9075327cd4c82769464b63e2399758de0cf50
        Validity
            Not Before: Jan  3 14:40:33 2026 GMT
            Not After : Jan  2 14:45:33 2027 GMT
        Subject: CN=F2B333EE7C762F7050822D6E03BBFF8779D4C71C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:54:d2:81:8d:9e:11:fa:3e:65:45:d4:f8:16:
                    20:43:61:bf:01:d9:a9:ba:96:1c:b5:2f:15:8a:c0:
                    ce:31:ea:10:4d:37:f7:dd:e1:b6:f7:59:15:87:fc:
                    24:72:96:63:a9:c1:68:27:8f:44:f6:4c:3e:44:12:
                    a3:20:c4:0a:80:fd:b4:16:b2:18:6a:cf:3a:16:62:
                    32:05:6e:cf:be:ef:ed:94:e8:76:75:aa:89:87:b1:
                    5a:e9:c3:2c:a2:bd:b2:2b:eb:9e:cf:82:23:b3:c3:
                    1e:9e:55:ea:16:ea:b6:2c:2c:ad:a6:4c:78:48:b5:
                    a9:61:0c:08:4e:59:87:22:83:fa:03:f1:bd:f2:0d:
                    cd:87:40:e1:de:ab:de:96:d9:88:6d:40:e7:cc:e6:
                    8f:64:09:86:59:b2:10:45:2c:be:9a:9d:d6:00:91:
                    b8:a5:9e:27:c8:e3:f6:bd:a6:f5:74:d7:c5:54:74:
                    f2:d9:7b:e3:5e:a6:d8:51:55:7e:9b:f1:64:1f:37:
                    69:01:28:be:0c:39:ae:a7:fc:10:9e:f1:f5:10:54:
                    92:96:bc:8e:ac:da:16:03:14:a2:64:21:45:80:e4:
                    f2:46:52:37:0e:35:f1:21:66:7a:0d:d7:20:19:ca:
                    3d:89:e0:b3:6d:80:16:e9:20:00:e5:28:14:cd:11:
                    4a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B3:33:EE:7C:76:2F:70:50:82:2D:6E:03:BB:FF:87:79:D4:C7:1C
            X509v3 Authority Key Identifier:
                keyid:20:D9:07:53:27:CD:4C:82:76:94:64:B6:3E:23:99:75:8D:E0:CF:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/4a62173e-e6af-40bc-aba8-1f681b1240f8/0/20D9075327CD4C82769464B63E2399758DE0CF50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INkHUyfNTIJ2lGS2PiOZdY3gz1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4a62173e-e6af-40bc-aba8-1f681b1240f8/0/AS214223.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214223

    Signature Algorithm: sha256WithRSAEncryption
         ab:b0:be:9d:e0:db:34:a4:92:64:89:e5:7a:95:12:c4:f3:e6:
         3b:d7:15:7d:bf:e2:0a:56:df:85:a5:f2:5f:d3:04:d3:7b:9a:
         1c:49:5e:64:e4:b8:1b:ca:eb:25:73:b1:63:1b:0b:7a:38:9c:
         a6:02:d1:7e:59:4b:11:21:a4:88:ad:73:43:5d:26:cf:c4:5a:
         9c:38:4a:f2:47:fc:99:5b:dc:da:80:ef:66:9c:68:36:21:24:
         99:f8:6a:44:2e:eb:b9:8f:75:cf:99:94:fb:b0:eb:b4:b8:2a:
         6e:dc:02:f0:03:b5:44:6a:65:5d:dd:e1:4b:ff:a8:aa:c5:21:
         89:bd:86:1c:35:86:12:a7:21:9d:61:a4:ae:e6:36:e1:e9:94:
         c7:70:ff:4c:20:07:9e:ea:cc:98:eb:24:d5:ed:47:2a:eb:e6:
         bc:d5:e1:b7:9f:e9:d1:0f:9d:14:d2:56:f6:91:7b:da:7d:89:
         fc:99:e8:d8:c4:a8:a0:73:23:f5:eb:93:b0:99:f6:1c:5a:c0:
         ce:90:f8:ea:da:3b:9f:e6:04:15:50:0f:d4:51:c5:f6:31:d0:
         04:f4:5e:db:bf:7b:e6:ae:28:93:a8:e0:5a:4d:4f:4f:cd:37:
         43:e8:36:a3:c6:ac:79:c1:d0:eb:69:18:a3:cc:b0:8d:a7:29:
         cb:41:72:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 17 23:14:27 2026 by rpki-client