This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/0/AS206604.asa
File:                     AS206604.asa (raw, json)
Hash identifier:          zpxAtBgjiRFEGbUqrc4N3vetnbfhkNMO9p+EhtBGacA=
Subject key identifier:   41:80:4D:C3:3D:60:1E:7B:34:B3:8D:E3:74:6A:AF:23:3B:54:A7:A0
Certificate issuer:       /CN=8c5b75aee1ed7e37d44bfa69536fbdf20e6d3785
Certificate serial:       157DBAC4A36C47420598D3EA61495ABC5A9AFDAF
Authority key identifier: 8C:5B:75:AE:E1:ED:7E:37:D4:4B:FA:69:53:6F:BD:F2:0E:6D:37:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jFt1ruHtfjfUS_ppU2-98g5tN4U.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/0/AS206604.asa
Signing time:             Wed 03 Dec 2025 15:49:13 +0000
ASPA not before:          Wed 03 Dec 2025 15:44:13 +0000
ASPA not after:           Wed 02 Dec 2026 15:49:13 +0000
Customer ASID:            206604
Providers:                AS: 6939
                          AS: 11967
                          AS: 34872
                          AS: 34927
                          AS: 60326
                          AS: 205941
                          AS: 207567
                          AS: 211358
                          AS: 213449
                          AS: 214757
                          AS: 214809
                          AS: 215828
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/0/8C5B75AEE1ED7E37D44BFA69536FBDF20E6D3785.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/0/8C5B75AEE1ED7E37D44BFA69536FBDF20E6D3785.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jFt1ruHtfjfUS_ppU2-98g5tN4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Dec 2025 18:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:7d:ba:c4:a3:6c:47:42:05:98:d3:ea:61:49:5a:bc:5a:9a:fd:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c5b75aee1ed7e37d44bfa69536fbdf20e6d3785
        Validity
            Not Before: Dec  3 15:44:13 2025 GMT
            Not After : Dec  2 15:49:13 2026 GMT
        Subject: CN=41804DC33D601E7B34B38DE3746AAF233B54A7A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:88:83:de:21:57:3d:46:dd:48:ca:bf:23:86:
                    ae:77:e4:6e:71:c4:23:89:9a:cf:ed:60:88:58:2b:
                    98:cb:c6:df:0b:4b:53:bf:2f:fc:97:87:7b:a1:74:
                    78:7e:b0:12:41:30:4e:1b:02:e8:d7:68:bb:62:c8:
                    49:25:1b:2b:89:e7:64:ec:75:c4:a7:91:be:a9:f5:
                    aa:12:bf:80:61:85:bb:6a:e2:b3:65:ac:e7:ef:23:
                    55:5f:4e:7a:8b:89:ea:13:ab:9b:2e:db:4e:ce:85:
                    69:49:1a:ea:1a:04:e2:77:8a:cf:7a:9a:46:ca:71:
                    2e:1a:42:e1:ec:9f:a5:ae:81:8f:6a:51:3f:b3:fb:
                    df:02:b7:6a:b8:d6:25:c6:97:74:e5:00:02:60:eb:
                    4c:54:49:f0:f7:4a:1d:8d:22:cd:12:db:f7:bf:7f:
                    ec:66:f8:19:25:06:77:56:6c:7c:d7:28:3d:c2:ff:
                    f6:8f:b7:86:f7:a8:b8:c1:cb:2f:9d:d9:28:bf:2f:
                    e7:64:07:16:2c:5c:74:4c:4e:0b:8a:4c:a8:29:c4:
                    5f:c1:c4:b8:a8:e1:f4:a4:38:2a:24:6e:99:00:ae:
                    73:47:19:47:f6:dc:ef:0a:09:e2:fd:c3:fb:58:8d:
                    a5:90:cc:9c:6a:95:72:14:14:1a:24:f7:71:c3:f0:
                    a5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:80:4D:C3:3D:60:1E:7B:34:B3:8D:E3:74:6A:AF:23:3B:54:A7:A0
            X509v3 Authority Key Identifier:
                keyid:8C:5B:75:AE:E1:ED:7E:37:D4:4B:FA:69:53:6F:BD:F2:0E:6D:37:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/0/8C5B75AEE1ED7E37D44BFA69536FBDF20E6D3785.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFt1ruHtfjfUS_ppU2-98g5tN4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/0/AS206604.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206604

    Signature Algorithm: sha256WithRSAEncryption
         25:65:25:a1:b0:87:be:99:95:59:e2:c6:55:77:aa:29:e7:57:
         ab:bf:68:74:9f:bd:80:f5:4f:6f:9f:96:34:ff:10:27:9e:d1:
         06:35:52:d5:f4:8f:5f:47:68:d3:94:71:5c:fb:c4:cb:f1:3b:
         00:92:23:a0:9b:7f:eb:74:4c:57:c8:2d:62:f2:bb:5c:3e:ad:
         37:e6:2e:ed:82:15:91:7a:54:2b:5f:e4:cb:77:82:77:35:de:
         03:aa:fd:15:40:c4:a6:6d:7f:8d:85:72:d2:d2:1b:fe:61:04:
         17:bf:33:1a:77:7f:4d:c5:a0:6a:74:cd:78:b6:26:f8:80:b4:
         60:e9:7e:60:db:3d:d6:13:95:e8:99:72:24:79:28:d4:d9:ff:
         7f:b5:76:12:2a:e7:9a:cc:6b:1e:95:c7:f5:84:2a:b3:c0:78:
         43:25:fb:5a:34:77:4a:5d:05:dc:fe:00:87:12:e2:49:13:67:
         ff:16:ff:4b:43:ab:94:72:85:5a:1e:af:e5:4b:d1:a6:b9:8c:
         03:06:fe:a5:91:67:af:4e:f6:0f:a6:e0:64:c4:af:52:5b:a2:
         38:69:fc:32:f1:58:62:29:5b:e7:08:ce:9a:b2:a2:89:db:15:
         ed:00:98:5e:ad:92:81:2b:70:2a:e0:53:95:4c:94:53:a8:46:
         0f:04:8f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 10:30:26 2025 by rpki-client