This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/AS51019.asa
File:                     AS51019.asa (raw, json)
Hash identifier:          Oaa1EvfqOHf6DhtSUIsxpjt+74z+nkVUgLI9NR9q+Vg=
Subject key identifier:   17:F8:19:A3:7F:64:9A:B1:1E:DB:B8:AF:F1:39:81:60:BC:BC:38:3B
Certificate issuer:       /CN=d2ff07932c3f4c1b3465ff4f0d96484733e02ead
Certificate serial:       4195DA349027B3B0363E9C8D12DAA94A405C7795
Authority key identifier: D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/AS51019.asa
Signing time:             Tue 13 Jan 2026 16:04:20 +0000
ASPA not before:          Tue 13 Jan 2026 15:59:20 +0000
ASPA not after:           Tue 12 Jan 2027 16:04:20 +0000
Customer ASID:            51019
Providers:                AS: 207841
                          AS: 209735
                          AS: 215823
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Jan 2026 16:52:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:95:da:34:90:27:b3:b0:36:3e:9c:8d:12:da:a9:4a:40:5c:77:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2ff07932c3f4c1b3465ff4f0d96484733e02ead
        Validity
            Not Before: Jan 13 15:59:20 2026 GMT
            Not After : Jan 12 16:04:20 2027 GMT
        Subject: CN=17F819A37F649AB11EDBB8AFF1398160BCBC383B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:75:ca:b6:22:77:62:fe:c5:60:4b:29:dd:87:
                    51:7a:a6:1e:53:be:9d:7f:7e:b2:64:fd:e8:f6:06:
                    98:3a:16:41:b4:f9:ab:78:ac:29:81:75:86:56:8e:
                    5c:61:2a:8d:06:25:f7:cf:f4:37:ce:03:ee:74:38:
                    74:ab:d5:99:30:c6:4e:e3:ad:2f:da:27:48:30:2d:
                    eb:a9:e7:3b:a4:aa:62:b3:0a:9c:49:4f:61:39:84:
                    c8:ac:9d:29:80:8e:a3:ac:af:f8:15:df:62:8c:72:
                    0b:3b:31:21:cb:d8:39:2a:8b:26:75:c7:70:4a:85:
                    d2:3b:4f:b2:a5:90:51:cc:ce:79:d6:78:9a:10:28:
                    5a:57:98:c7:01:fe:fc:07:2e:3e:8d:4a:46:89:4d:
                    35:e2:d4:a5:57:19:2c:99:b5:e1:5a:76:da:1d:61:
                    1f:0d:85:42:23:e0:af:4c:ce:7a:16:59:4a:1e:68:
                    b0:81:96:e4:3d:35:ba:6d:8b:85:f0:41:03:ad:3b:
                    bd:e4:f6:e3:ef:62:fd:cb:cd:48:ad:1f:77:ef:da:
                    d6:a8:41:59:53:4f:35:19:a6:fb:c8:5c:eb:7d:e8:
                    29:a9:b5:40:95:ae:9e:97:aa:ee:85:d7:5d:2a:8e:
                    16:36:94:51:43:9f:88:27:29:fd:a3:0a:b8:a3:42:
                    47:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F8:19:A3:7F:64:9A:B1:1E:DB:B8:AF:F1:39:81:60:BC:BC:38:3B
            X509v3 Authority Key Identifier:
                keyid:D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/AS51019.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51019

    Signature Algorithm: sha256WithRSAEncryption
         4c:e6:4b:67:41:81:f5:8b:35:e5:6a:98:d9:4d:99:2e:21:78:
         36:ae:b7:93:44:56:b6:6a:8a:22:5f:fa:10:47:a6:3f:73:b3:
         43:b8:81:e6:c0:27:63:0c:44:47:24:30:3d:b1:27:b9:7a:c4:
         d2:8f:90:0d:50:f8:82:a2:07:02:26:8c:ba:b3:e2:e6:99:30:
         5e:28:b0:c2:71:62:e8:63:95:d2:a7:5d:6b:d1:4d:4d:cb:b8:
         3c:c8:d3:5f:ac:88:f2:7a:89:11:a1:17:fa:43:6c:f2:96:dc:
         c2:20:a3:0b:19:f2:f5:8f:99:98:4f:2c:8e:87:1a:ea:c7:58:
         9a:81:c8:e2:2e:96:69:69:9d:57:c5:76:d0:8d:13:97:ca:fe:
         e5:95:21:ed:11:5a:ad:1d:87:3b:05:bb:ca:19:97:7d:42:ba:
         25:f5:03:da:80:6b:c4:d0:82:10:59:63:1c:55:36:fd:e2:f1:
         4f:61:83:63:3a:f7:87:b1:80:45:57:55:9e:87:5d:cd:7f:5e:
         41:a7:47:7b:a8:0e:25:9a:3e:a0:86:76:18:d4:d9:10:de:e9:
         17:16:e8:f5:65:e7:e2:c1:fd:82:d7:f5:09:16:c8:a8:ec:d5:
         05:18:a7:6e:78:65:62:55:86:7d:36:3d:a4:63:6f:31:20:36:
         96:5d:bb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 17 01:47:17 2026 by rpki-client