This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/AS215828.asa
File:                     AS215828.asa (raw, json)
Hash identifier:          gn0zvNq0jqiLUYK3MJlHlnirErp0oB8cq8E7u3vxlhE=
Subject key identifier:   00:2B:D8:A3:F0:F2:E1:89:D3:AF:1C:11:39:42:D5:0F:61:30:2F:B8
Certificate issuer:       /CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Certificate serial:       637DED74DDF62F21AACCFAC646EA15A4521077E6
Authority key identifier: D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/AS215828.asa
Signing time:             Mon 01 Dec 2025 21:52:15 +0000
ASPA not before:          Mon 01 Dec 2025 21:47:15 +0000
ASPA not after:           Mon 30 Nov 2026 21:52:15 +0000
Customer ASID:            215828
Providers:                AS: 1299
                          AS: 6204
                          AS: 6939
                          AS: 34927
                          AS: 51202
                          AS: 59796
                          AS: 62255
                          AS: 64289
                          AS: 207841
                          AS: 209735
                          AS: 211358
                          AS: 393577
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 11:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:7d:ed:74:dd:f6:2f:21:aa:cc:fa:c6:46:ea:15:a4:52:10:77:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
        Validity
            Not Before: Dec  1 21:47:15 2025 GMT
            Not After : Nov 30 21:52:15 2026 GMT
        Subject: CN=002BD8A3F0F2E189D3AF1C113942D50F61302FB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0f:9c:02:21:ef:a1:6e:9e:36:4b:78:40:89:
                    1a:fa:a9:d5:f0:42:a0:b3:3d:7b:37:ad:05:14:d2:
                    a0:7f:a7:8b:9e:3d:eb:9d:4b:5d:3d:af:05:64:a9:
                    c7:23:eb:23:4b:d5:6f:d4:d7:3d:59:77:fa:3d:1e:
                    ac:b7:df:10:12:39:06:6a:4a:4b:65:bb:82:e3:f8:
                    55:1c:5a:33:f5:4c:68:55:65:3e:17:45:cc:e2:b0:
                    0b:23:a9:13:d1:e4:bf:21:cc:05:6e:6b:04:d7:7e:
                    3a:06:72:5f:f9:a8:6a:b4:1b:37:09:2d:63:db:1e:
                    c6:d9:04:cd:bd:8d:09:b2:89:fa:6a:76:f2:bf:ed:
                    5d:83:6a:1a:5c:33:9e:7c:27:e6:be:84:3c:61:7a:
                    55:f3:be:c9:5f:93:39:be:67:f4:fd:17:76:f4:fe:
                    2d:75:bb:f7:82:ff:7a:a7:a7:fc:07:d5:3d:ed:fc:
                    49:29:6c:ca:ac:ff:42:4e:6f:e6:43:67:34:2f:b9:
                    89:6d:3c:21:d9:be:ce:19:4c:6b:ea:01:7b:84:e5:
                    b9:d1:5a:bc:56:92:b3:5c:67:82:a2:ea:81:f1:b4:
                    5e:99:a9:2c:b7:a0:c1:fd:c9:83:14:2c:f0:af:f3:
                    3f:0b:82:96:94:41:51:66:f1:94:65:47:7a:49:17:
                    89:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:2B:D8:A3:F0:F2:E1:89:D3:AF:1C:11:39:42:D5:0F:61:30:2F:B8
            X509v3 Authority Key Identifier:
                keyid:D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/AS215828.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215828

    Signature Algorithm: sha256WithRSAEncryption
         ae:c7:cc:26:5e:06:e4:d1:32:62:de:d9:71:38:4a:2c:d5:7a:
         be:e3:98:28:0b:8e:2d:8b:a4:db:9b:07:47:64:7f:70:79:9f:
         cb:17:d6:4a:71:f8:8c:98:f6:cc:8a:e0:3c:7b:86:89:5b:ab:
         fe:20:dd:d4:da:1a:11:26:dd:61:c7:e5:01:c7:6d:57:4f:78:
         eb:f8:c6:b2:36:6d:9b:5d:9e:71:07:37:8e:11:a5:2f:0d:ab:
         6d:c9:6e:d3:b2:bb:90:05:ff:19:c7:7b:45:91:fb:d5:44:d6:
         8a:97:04:07:43:9a:5f:23:4a:64:4a:38:59:22:37:45:1b:6d:
         22:35:90:ff:44:68:7b:8a:c5:47:28:84:71:7e:2d:bd:94:b8:
         d4:86:b2:fa:a8:d0:c6:16:91:36:ca:82:e8:af:89:cd:40:b5:
         89:d6:6b:f2:c8:c3:c5:2b:75:7d:19:6f:39:18:ac:18:84:af:
         3f:ba:38:a2:d9:8b:29:c7:da:26:1d:ea:be:45:f0:4f:06:59:
         88:6d:26:2f:20:98:25:94:55:3a:f3:d9:01:6e:fd:64:e6:86:
         7a:37:05:a0:52:85:c1:46:56:35:a7:e3:b8:a0:b9:6e:a8:60:
         01:6f:3e:d5:0d:32:fc:d7:65:dc:77:6e:b2:b5:0c:ce:ed:1c:
         00:df:45:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 18:39:29 2025 by rpki-client