This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/AS211695.asa
File:                     AS211695.asa (raw, json)
Hash identifier:          28JSq2d0bdBBVofVa06NM+Q3rZAfBJOiM+L29FXOPWg=
Subject key identifier:   0A:CB:8C:C8:4C:6D:CE:3D:3A:1D:13:BE:C7:0F:22:C7:60:E7:E0:C8
Certificate issuer:       /CN=8fbab13db123c5d63dbbc550d214b3e10c091998
Certificate serial:       2A2F9352A96F5161413EE0BB581202BD1C69AF85
Authority key identifier: 8F:BA:B1:3D:B1:23:C5:D6:3D:BB:C5:50:D2:14:B3:E1:0C:09:19:98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/AS211695.asa
Signing time:             Thu 29 Jan 2026 19:20:11 +0000
ASPA not before:          Thu 29 Jan 2026 19:15:11 +0000
ASPA not after:           Thu 28 Jan 2027 19:20:11 +0000
Customer ASID:            211695
Providers:                AS: 20473
                          AS: 24381
                          AS: 35708
                          AS: 64515
                          AS: 199310
                          AS: 209533
                          AS: 212895
                          AS: 214022
                          AS: 214675
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:2f:93:52:a9:6f:51:61:41:3e:e0:bb:58:12:02:bd:1c:69:af:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fbab13db123c5d63dbbc550d214b3e10c091998
        Validity
            Not Before: Jan 29 19:15:11 2026 GMT
            Not After : Jan 28 19:20:11 2027 GMT
        Subject: CN=0ACB8CC84C6DCE3D3A1D13BEC70F22C760E7E0C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f7:c2:b5:dd:fa:89:70:aa:7b:1a:15:49:77:
                    fe:c3:ca:f3:b8:ff:4f:69:e8:9f:c0:96:b6:f0:02:
                    10:e9:03:ef:22:05:29:60:34:b0:4f:4a:dc:dd:d4:
                    4f:ce:6e:77:c1:cd:6b:36:8a:eb:34:67:85:22:52:
                    7b:f0:ac:5b:77:c4:79:7d:1d:a0:00:1a:64:43:91:
                    f9:fc:db:3d:84:ae:d1:aa:d7:74:31:0b:3a:ec:5f:
                    15:a7:84:45:6d:ff:43:53:fa:78:f1:a9:dd:9b:08:
                    0d:70:ca:c4:e3:0b:c9:1e:06:5d:65:63:bc:21:4d:
                    36:c0:43:67:a7:e3:7e:7a:f2:b5:df:33:f1:99:9b:
                    89:fc:72:38:bc:e1:a0:89:06:83:8e:dd:b3:5c:9a:
                    9b:ce:32:12:e7:77:8e:e7:9e:63:28:8b:e1:28:c4:
                    6c:c1:d9:1f:02:9d:53:fe:63:e2:6f:ba:d9:cd:2a:
                    35:01:bf:0f:5e:82:38:03:ac:ae:4b:3f:51:b3:7d:
                    8f:54:c1:12:53:df:2f:00:b3:92:cb:00:8b:5d:6b:
                    48:4a:ef:d6:eb:ef:5f:f0:86:24:2d:44:0a:77:5f:
                    1f:a2:52:11:a9:24:16:4a:f8:b0:b0:59:11:57:06:
                    ac:67:ef:88:4a:c1:15:14:87:89:62:e6:ec:0a:0b:
                    6e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:CB:8C:C8:4C:6D:CE:3D:3A:1D:13:BE:C7:0F:22:C7:60:E7:E0:C8
            X509v3 Authority Key Identifier:
                keyid:8F:BA:B1:3D:B1:23:C5:D6:3D:BB:C5:50:D2:14:B3:E1:0C:09:19:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/AS211695.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211695

    Signature Algorithm: sha256WithRSAEncryption
         88:5d:09:7c:2d:f9:79:13:ef:b9:8c:94:d2:8a:b5:29:71:1d:
         c3:9f:e9:7d:e3:0f:13:be:64:17:ee:9c:3c:68:58:5a:c3:2e:
         dd:10:a8:80:04:e7:81:7b:89:30:98:19:25:44:5a:f8:a5:4b:
         83:c3:75:a7:bb:c9:84:ce:46:de:a7:4b:0e:d6:ff:f6:54:21:
         a1:cc:97:b5:2c:08:d7:ca:85:26:b4:f4:14:9e:88:6a:14:04:
         93:ff:6d:ed:fe:c4:8e:31:0a:a7:95:06:66:35:53:b9:ac:92:
         ee:ed:92:55:3c:c0:b6:6b:3b:9d:88:86:3a:35:3f:47:c1:b3:
         f1:6c:e7:1f:46:b9:8b:58:33:17:8a:75:49:5a:c0:37:31:b6:
         d1:d9:43:d6:e1:fc:8d:a4:fe:8a:62:0a:75:12:e6:78:ca:86:
         a9:77:2c:a4:a4:54:f5:76:c9:e3:8c:e4:a1:36:ce:ab:9c:e1:
         2f:20:a0:08:46:50:b9:70:0c:ca:12:45:cd:95:ff:3d:f4:79:
         46:4b:cb:93:3d:b9:d6:f2:1c:d2:66:0e:cc:f0:4f:e3:f3:05:
         c8:56:d6:32:39:ee:16:11:09:f6:57:34:f6:9b:86:66:8c:fc:
         61:7c:70:c8:11:40:54:03:ea:9b:1f:50:6b:0b:26:74:7a:93:
         5b:a7:81:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:40:32 2026 by rpki-client