This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/AS214976.asa
File:                     AS214976.asa (raw, json)
Hash identifier:          XN+JEwS2k6nWcFv3Bew15aYffBvDZBqKCiTOLYl5/Is=
Subject key identifier:   9B:9D:A4:62:B1:DC:D5:2E:FF:02:8F:74:5E:52:BA:23:15:39:80:67
Certificate issuer:       /CN=e4b988e0c5f16cd5a58b879a31737b4f2f086b95
Certificate serial:       75324964DE73CE8EC93BCE01DAE5156C6E431B87
Authority key identifier: E4:B9:88:E0:C5:F1:6C:D5:A5:8B:87:9A:31:73:7B:4F:2F:08:6B:95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5LmI4MXxbNWli4eaMXN7Ty8Ia5U.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/AS214976.asa
Signing time:             Thu 15 Jan 2026 11:48:54 +0000
ASPA not before:          Thu 15 Jan 2026 11:43:54 +0000
ASPA not after:           Thu 14 Jan 2027 11:48:54 +0000
Customer ASID:            214976
Providers:                AS: 174
                          AS: 30823
                          AS: 34927
                          AS: 51396
                          AS: 203446
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5LmI4MXxbNWli4eaMXN7Ty8Ia5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 13:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:32:49:64:de:73:ce:8e:c9:3b:ce:01:da:e5:15:6c:6e:43:1b:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4b988e0c5f16cd5a58b879a31737b4f2f086b95
        Validity
            Not Before: Jan 15 11:43:54 2026 GMT
            Not After : Jan 14 11:48:54 2027 GMT
        Subject: CN=9B9DA462B1DCD52EFF028F745E52BA2315398067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9f:9c:9e:5b:93:6a:9b:60:4f:23:4d:44:10:
                    b8:3d:ee:5a:96:1f:11:4f:8c:df:f4:05:fe:59:7e:
                    5a:a7:d9:f1:12:bb:79:bf:ce:2a:c9:7b:05:a6:11:
                    15:14:c7:f5:1c:4c:91:3a:da:17:8a:32:f0:87:7c:
                    01:f1:34:3f:0f:66:2c:c8:18:38:ec:f3:12:95:d6:
                    cd:c2:97:5d:bc:4d:fa:e1:e7:9c:8b:41:16:75:17:
                    b2:6a:57:25:ff:2c:f2:7e:91:5c:cf:7b:59:1f:d6:
                    2a:65:fd:d7:2c:5e:cf:b5:ec:49:dc:51:83:05:60:
                    db:dc:5f:50:c4:be:6a:fb:6c:f5:63:f9:fb:f2:e0:
                    80:6e:80:2a:86:43:c5:d1:8d:46:6a:e8:88:b7:54:
                    d8:a6:3a:1a:cb:f9:27:6d:a3:0b:4f:f0:5c:65:fb:
                    43:93:9f:07:73:b2:6f:f3:33:89:e5:42:3c:57:7a:
                    e1:f6:be:9b:70:37:84:ae:38:c2:b2:9b:38:4a:31:
                    07:58:08:19:43:ed:3e:8b:90:82:67:b6:b8:41:7e:
                    0e:a2:b2:0b:89:ed:67:4e:2c:7b:a4:95:2d:65:1f:
                    ad:99:97:14:b2:d4:4f:13:38:0a:eb:f3:8f:91:1d:
                    dd:de:f5:56:39:b6:12:c1:60:1f:21:61:7d:cb:5f:
                    b9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:9D:A4:62:B1:DC:D5:2E:FF:02:8F:74:5E:52:BA:23:15:39:80:67
            X509v3 Authority Key Identifier:
                keyid:E4:B9:88:E0:C5:F1:6C:D5:A5:8B:87:9A:31:73:7B:4F:2F:08:6B:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LmI4MXxbNWli4eaMXN7Ty8Ia5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/AS214976.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214976

    Signature Algorithm: sha256WithRSAEncryption
         65:30:66:0e:f3:ee:31:d2:bd:d2:ad:4d:fe:07:8e:b4:be:83:
         f6:3e:ef:c7:7d:98:47:52:aa:86:5d:bd:c4:a3:ed:5c:73:1a:
         5c:e9:05:08:1f:36:7e:c8:0c:76:e1:e9:2c:28:df:27:56:14:
         2b:f3:6e:5f:71:cc:4b:e5:c4:40:8c:3c:7f:4b:5c:5f:6c:41:
         2d:21:53:b0:ad:87:05:d8:c2:83:08:95:9a:f9:9e:01:79:43:
         5f:7e:37:96:18:13:42:75:28:60:ff:60:2b:5c:21:3e:f2:74:
         f4:ce:c7:d3:ff:20:9e:a2:03:13:aa:b4:6b:ed:9e:be:f3:d2:
         5c:13:56:14:a6:b6:28:fe:00:38:39:44:ed:91:9a:73:51:c6:
         e2:84:6d:f0:f4:1b:7c:a7:fd:ab:19:9c:17:3f:aa:2e:d9:78:
         0d:d5:02:d1:e7:ac:b3:19:7d:2b:7e:7f:20:14:d0:c7:b0:3f:
         2c:59:7a:5d:68:90:e9:5f:fe:da:92:e8:ef:0c:10:f4:de:8e:
         19:db:67:aa:52:b9:40:0a:94:38:79:1f:10:ee:f9:b6:8a:4f:
         ba:72:fe:0b:a4:a3:8c:fa:31:31:02:dd:0f:f7:c6:31:e4:25:
         f0:82:f1:34:8f:d7:fd:79:41:f1:72:70:1a:ea:e9:ed:61:d6:
         fa:26:2c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 01:08:02 2026 by rpki-client