This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS214720.asa
File:                     AS214720.asa (raw, json)
Hash identifier:          +U4auO/V8nlV4camGgHaMOAhD4vWi6ijODldNL0Ba0k=
Subject key identifier:   1F:97:EF:A8:B3:25:A0:AF:48:CB:7C:71:FB:DF:64:59:20:DD:27:49
Certificate issuer:       /CN=411e2d411d687bcb4449c3df45beedc041007d94
Certificate serial:       777AE06FB117E42DE5132FA26B5479F57A0221D5
Authority key identifier: 41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS214720.asa
Signing time:             Sat 17 Jan 2026 21:37:48 +0000
ASPA not before:          Sat 17 Jan 2026 21:32:48 +0000
ASPA not after:           Sat 16 Jan 2027 21:37:48 +0000
Customer ASID:            214720
Providers:                AS: 44324
                          AS: 53808
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 06:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:7a:e0:6f:b1:17:e4:2d:e5:13:2f:a2:6b:54:79:f5:7a:02:21:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=411e2d411d687bcb4449c3df45beedc041007d94
        Validity
            Not Before: Jan 17 21:32:48 2026 GMT
            Not After : Jan 16 21:37:48 2027 GMT
        Subject: CN=1F97EFA8B325A0AF48CB7C71FBDF645920DD2749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7e:5f:7f:0c:2e:ed:53:eb:de:a6:c1:49:89:
                    a3:63:55:60:78:92:82:38:33:65:c3:12:d6:a9:2d:
                    2d:49:cf:4d:2d:47:80:c6:40:3d:1c:87:5a:58:14:
                    6f:b9:92:36:9e:24:ab:6d:d3:49:11:ae:76:04:c1:
                    36:7c:d9:64:d0:a7:3f:bf:d4:ef:62:c1:db:bb:15:
                    3b:1b:7e:f1:b8:65:d9:6f:9c:83:e1:2c:f8:f3:47:
                    99:60:63:60:ab:85:38:6e:58:d2:f2:63:08:11:c0:
                    58:a6:a6:c3:b6:43:b3:86:e9:26:78:e4:c3:94:58:
                    51:0a:1c:9f:d2:8d:25:b9:9f:66:b2:8f:1e:86:a3:
                    d8:52:fc:82:56:b3:bb:3b:59:e0:4c:1b:57:98:99:
                    20:55:54:73:55:49:b3:16:5e:cf:02:cc:0e:be:64:
                    98:2d:be:bc:6e:f8:ba:80:39:36:91:a1:f9:1d:62:
                    71:f5:d4:cd:88:59:64:d8:88:ec:59:e6:d5:f1:55:
                    2f:64:38:88:04:af:e1:e0:f3:64:a1:ff:2d:c8:3a:
                    b4:0c:26:8e:79:bc:c8:ee:1f:db:08:8f:76:7a:ce:
                    5d:af:73:cd:c9:55:b0:0d:88:f8:b8:34:f9:f8:f8:
                    a6:df:d0:3a:ae:97:61:f9:88:5e:1e:3f:cd:23:21:
                    44:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:97:EF:A8:B3:25:A0:AF:48:CB:7C:71:FB:DF:64:59:20:DD:27:49
            X509v3 Authority Key Identifier:
                keyid:41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS214720.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214720

    Signature Algorithm: sha256WithRSAEncryption
         7d:32:b1:e1:b5:9d:f1:19:19:ac:ca:9c:79:9b:23:e4:37:28:
         f2:2a:d9:67:1f:91:f1:8a:2f:c9:c5:7c:cf:de:f4:e4:c6:46:
         61:6c:f6:72:f5:9d:b9:06:69:44:24:e0:2f:f8:8b:1d:b2:71:
         30:2a:bc:ca:23:6d:58:7f:25:f4:6f:3e:57:01:94:10:16:df:
         26:f6:6b:88:5b:a0:76:40:2f:c2:85:9a:7c:54:33:ba:06:68:
         09:a0:f7:43:2b:09:a8:4a:a7:3e:f9:6f:b8:72:17:b8:22:c8:
         c6:25:ef:9c:72:e5:e9:f5:ba:ba:d2:1e:10:8a:71:45:d7:d8:
         a9:9f:e9:81:8a:8e:d5:34:a8:66:8e:46:8f:70:04:02:4a:20:
         50:36:a6:a1:86:f9:6d:ce:63:1a:1a:52:d0:82:5d:a7:a3:0d:
         86:60:ab:1a:cd:6e:69:cb:34:43:f7:e4:6a:97:16:48:a6:95:
         79:de:a8:e6:22:de:b6:ec:5d:57:e4:7a:bd:fa:1a:a3:9d:c7:
         0d:1f:c8:0f:2f:a0:7a:d0:90:19:bc:bf:d9:5f:77:98:0e:7e:
         4a:a2:09:9d:fd:0c:a1:e0:35:0d:73:a1:8a:f6:24:1a:71:52:
         79:2d:81:96:c4:ed:ad:03:f9:28:fe:40:6f:37:05:d5:4a:17:
         d0:ac:44:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 13:13:24 2026 by rpki-client