This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/AS213279.asa
File:                     AS213279.asa (raw, json)
Hash identifier:          Cafjx2sc9KF1bemlOMSC/Wvjj7P0Gkri+D5Y13trzvs=
Subject key identifier:   82:01:35:5A:54:04:5D:06:03:5D:14:D3:18:C1:6F:05:2D:05:6B:9F
Certificate issuer:       /CN=2c12f0a080f021f2ba25bc0c6ea7e06b67aad05e
Certificate serial:       6375AEFCC98F19F9BB277DEB2787B0ADEAB6061A
Authority key identifier: 2C:12:F0:A0:80:F0:21:F2:BA:25:BC:0C:6E:A7:E0:6B:67:AA:D0:5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/AS213279.asa
Signing time:             Mon 05 Jan 2026 12:41:16 +0000
ASPA not before:          Mon 05 Jan 2026 12:36:16 +0000
ASPA not after:           Mon 04 Jan 2027 12:41:16 +0000
Customer ASID:            213279
Providers:                AS: 6939
                          AS: 20473
                          AS: 34927
                          AS: 212027
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 17:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:75:ae:fc:c9:8f:19:f9:bb:27:7d:eb:27:87:b0:ad:ea:b6:06:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c12f0a080f021f2ba25bc0c6ea7e06b67aad05e
        Validity
            Not Before: Jan  5 12:36:16 2026 GMT
            Not After : Jan  4 12:41:16 2027 GMT
        Subject: CN=8201355A54045D06035D14D318C16F052D056B9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c3:49:40:49:5a:42:31:cd:86:99:f4:f9:f2:
                    00:62:d2:0c:69:33:a1:a9:81:97:40:88:2e:90:f1:
                    bf:96:58:41:3e:12:dc:1d:ae:8a:c8:df:39:8e:b0:
                    74:a8:87:21:63:1a:84:f9:a9:72:7f:46:aa:7e:57:
                    30:d0:b7:17:80:c1:3b:31:4c:a3:14:ef:39:9c:11:
                    2c:aa:aa:c2:62:bb:ec:d6:a4:f7:8c:e1:cc:da:1c:
                    48:a6:4d:d3:5f:24:82:35:30:4c:d9:f8:08:bc:8a:
                    6c:9a:4b:3b:aa:65:5d:0a:de:9c:14:a7:82:0c:70:
                    f2:4d:b6:53:2d:0a:af:4f:4c:24:28:74:c7:8a:2a:
                    a2:5b:fe:04:e6:f5:20:3a:83:a2:66:19:c2:4b:14:
                    59:29:04:dd:45:c5:7e:39:1c:3e:4d:7c:7b:aa:08:
                    7d:f9:b6:7a:82:68:f3:98:f9:b2:73:0a:7d:73:72:
                    83:f9:51:d8:7a:8d:81:8f:2f:bd:45:f2:2c:3a:a6:
                    0b:01:77:02:eb:84:6d:a6:e0:03:af:8d:01:5e:c3:
                    9a:86:69:4e:48:1c:b3:de:85:48:bb:5a:f0:f9:21:
                    37:a6:fe:54:6f:5c:bd:71:74:4c:b2:8d:e8:a1:c8:
                    f1:fa:fa:14:8b:e0:e0:7e:2f:10:d7:5f:95:94:80:
                    dc:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:01:35:5A:54:04:5D:06:03:5D:14:D3:18:C1:6F:05:2D:05:6B:9F
            X509v3 Authority Key Identifier:
                keyid:2C:12:F0:A0:80:F0:21:F2:BA:25:BC:0C:6E:A7:E0:6B:67:AA:D0:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/AS213279.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213279

    Signature Algorithm: sha256WithRSAEncryption
         a7:9f:54:38:ad:85:44:67:6f:ed:2f:63:c6:b9:71:0a:df:e1:
         60:12:58:3f:82:96:e3:a1:a2:58:7b:cf:e1:eb:7c:9d:30:72:
         43:3e:72:ec:e6:b7:72:91:32:73:29:1f:91:0c:23:13:f1:28:
         ec:5a:bd:84:6e:ef:3a:eb:26:34:35:c4:b9:b2:f6:55:81:ef:
         f9:e8:59:2e:29:85:77:38:55:f7:c1:b4:e7:0a:55:5d:7f:48:
         fd:ef:2b:f9:63:27:95:37:2b:f4:16:7b:b0:f8:48:15:e3:a6:
         67:48:61:54:cd:e7:1c:4d:b5:dd:12:a5:7d:89:cc:11:25:f7:
         30:ca:b5:5f:19:be:14:be:13:bc:a5:98:79:96:36:ae:f8:68:
         8e:04:bf:9e:12:c5:47:a3:74:c5:0e:33:1e:a2:6d:96:11:02:
         c2:58:45:a3:d3:b9:27:fe:e3:c3:9c:6d:9c:9b:35:9d:af:32:
         ce:3c:ac:b7:a8:85:af:30:55:e7:30:83:19:18:99:ba:77:18:
         ca:63:5a:ba:c8:ef:60:d0:60:b2:23:2e:a1:4e:a0:bf:53:37:
         ec:f9:fa:5e:f6:4b:0b:31:a3:01:2c:60:1d:a0:61:09:cc:45:
         69:e7:cb:59:d0:12:38:da:7c:76:2f:9f:42:4d:93:b1:1a:c6:
         40:2d:23:54
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIUY3Wu/MmPGfm7J33rJ4ewreq2BhowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMmMxMmYwYTA4MGYwMjFmMmJhMjViYzBjNmVhN2UwNmI2
N2FhZDA1ZTAeFw0yNjAxMDUxMjM2MTZaFw0yNzAxMDQxMjQxMTZaMDMxMTAvBgNV
BAMTKDgyMDEzNTVBNTQwNDVEMDYwMzVEMTREMzE4QzE2RjA1MkQwNTZCOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTw0lASVpCMc2GmfT58gBi0gxp
M6GpgZdAiC6Q8b+WWEE+EtwdrorI3zmOsHSohyFjGoT5qXJ/Rqp+VzDQtxeAwTsx
TKMU7zmcESyqqsJiu+zWpPeM4czaHEimTdNfJII1MEzZ+Ai8imyaSzuqZV0K3pwU
p4IMcPJNtlMtCq9PTCQodMeKKqJb/gTm9SA6g6JmGcJLFFkpBN1FxX45HD5NfHuq
CH35tnqCaPOY+bJzCn1zcoP5Udh6jYGPL71F8iw6pgsBdwLrhG2m4AOvjQFew5qG
aU5IHLPehUi7WvD5ITem/lRvXL1xdEyyjeihyPH6+hSL4OB+LxDXX5WUgNz3AgMB
AAGjggIFMIICATAdBgNVHQ4EFgQUggE1WlQEXQYDXRTTGMFvBS0Fa58wHwYDVR0j
BBgwFoAULBLwoIDwIfK6JbwMbqfga2eq0F4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODA3MDYxNWYtZDI2ZC00MmUzLWExNDUtNWM3YjY3YjJi
NjRlLzAvMkMxMkYwQTA4MEYwMjFGMkJBMjVCQzBDNkVBN0UwNkI2N0FBRDA1RS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0xCTHdvSUR3SWZLNkpid01icWZnYTJl
cTBGNC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzgwNzA2MTVmLWQyNmQt
NDJlMy1hMTQ1LTVjN2I2N2IyYjY0ZS8wL0FTMjEzMjc5LmFzYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNBHzANBgkq
hkiG9w0BAQsFAAOCAQEAp59UOK2FRGdv7S9jxrlxCt/hYBJYP4KW46GiWHvP4et8
nTByQz5y7Oa3cpEycykfkQwjE/Eo7Fq9hG7vOusmNDXEubL2VYHv+ehZLimFdzhV
98G05wpVXX9I/e8r+WMnlTcr9BZ7sPhIFeOmZ0hhVM3nHE213RKlfYnMESX3MMq1
Xxm+FL4TvKWYeZY2rvhojgS/nhLFR6N0xQ4zHqJtlhECwlhFo9O5J/7jw5xtnJs1
na8yzjyst6iFrzBV5zCDGRiZuncYymNausjvYNBgsiMuoU6gv1M37Pn6XvZLCzGj
ASxgHaBhCcxFaefLWdASONp8di+fQk2TsRrGQC0jVA==
-----END CERTIFICATE-----
Generated at Mon Feb 2 04:46:00 2026 by rpki-client