This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/AS215248.asa
File:                     AS215248.asa (raw, json)
Hash identifier:          hK0Cl1hoR91yj4hhch1arYrJqQ+uSCR61Ha0eKoO6gs=
Subject key identifier:   55:F3:34:54:ED:B9:7E:92:4D:21:C9:B9:54:B6:5D:A4:B2:E0:B7:60
Certificate issuer:       /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Certificate serial:       3D0A1B92A38E87AC33630905FC51D171B810FC88
Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/AS215248.asa
Signing time:             Fri 02 Jan 2026 22:57:21 +0000
ASPA not before:          Fri 02 Jan 2026 22:52:21 +0000
ASPA not after:           Fri 01 Jan 2027 22:57:21 +0000
Customer ASID:            215248
Providers:                AS: 5405
                          AS: 6204
                          AS: 8283
                          AS: 25091
                          AS: 37739
                          AS: 42093
                          AS: 50263
                          AS: 50917
                          AS: 52025
                          AS: 61049
                          AS: 64289
                          AS: 200132
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:0a:1b:92:a3:8e:87:ac:33:63:09:05:fc:51:d1:71:b8:10:fc:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
        Validity
            Not Before: Jan  2 22:52:21 2026 GMT
            Not After : Jan  1 22:57:21 2027 GMT
        Subject: CN=55F33454EDB97E924D21C9B954B65DA4B2E0B760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:00:9d:ac:51:7b:8f:de:78:fd:b6:ae:53:1c:
                    c4:5b:97:9d:61:08:4a:d9:56:f4:33:9f:cb:8e:60:
                    d9:6f:52:60:05:3f:c9:19:f4:96:a0:55:62:3c:b8:
                    c7:dc:94:91:d1:0d:20:30:60:11:1e:09:7f:7f:e7:
                    02:ac:69:a3:ed:c0:cf:bd:e6:ff:d1:e4:aa:93:4a:
                    c0:c4:ee:c2:d0:b6:5c:93:cb:f6:f9:ad:f9:c9:96:
                    4f:0b:18:bd:28:dd:35:07:24:b2:a4:b0:c8:ac:d3:
                    19:eb:55:50:c2:5a:84:ee:55:74:60:ec:31:b0:69:
                    85:e7:7c:0e:34:d6:39:68:92:e7:46:a0:21:64:8d:
                    b0:1e:37:fd:3a:dc:a9:c3:21:ef:9c:ad:2a:26:48:
                    06:38:95:b0:62:6a:f3:2f:91:8e:11:de:54:bd:75:
                    a9:f2:49:b9:8f:85:6d:2d:95:c3:9f:e4:b0:14:1c:
                    7c:75:13:24:da:85:3b:f1:50:9a:67:3f:0c:7c:96:
                    68:c3:81:52:f3:35:87:1f:cd:f3:9e:30:f5:6a:2a:
                    37:e3:c0:87:6a:13:fe:86:d8:7d:01:c2:60:8c:a3:
                    90:ec:fb:29:7e:c1:c6:1a:74:05:30:92:9d:96:f4:
                    c7:96:db:93:1f:99:02:b4:11:d9:91:67:86:c1:eb:
                    87:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F3:34:54:ED:B9:7E:92:4D:21:C9:B9:54:B6:5D:A4:B2:E0:B7:60
            X509v3 Authority Key Identifier:
                keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/AS215248.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215248

    Signature Algorithm: sha256WithRSAEncryption
         c5:1b:1e:4f:f0:f3:98:f6:8f:ec:37:ae:3f:ea:87:dd:91:9a:
         63:7c:f8:19:cf:99:3b:e9:fe:eb:5e:96:4f:8a:ec:6f:c7:cc:
         23:09:b3:33:2d:3b:8a:54:0d:a3:ec:69:3f:d6:bc:01:2c:d4:
         94:f0:c7:b4:e9:eb:1d:5e:8f:10:f3:ca:3a:b7:fb:d5:d4:25:
         d6:d1:10:af:b6:2a:1b:ec:82:5d:d6:f7:e1:73:2e:7c:52:32:
         02:6a:84:75:dd:d2:da:75:c7:c3:d9:72:fc:6f:c6:ed:0d:ef:
         eb:b2:43:bb:c7:c1:e4:e8:37:9e:aa:db:66:c6:cb:54:98:6e:
         ee:bb:4e:8b:3e:41:43:03:ca:86:18:c7:1d:52:7f:a0:17:d3:
         d4:45:54:cf:a2:86:a2:d6:56:d0:0a:4b:17:62:23:10:10:6b:
         07:62:42:24:15:9a:38:38:80:d3:7f:79:59:97:d2:41:20:ce:
         2d:84:21:81:60:ac:05:3a:0a:cf:1a:0f:ad:df:e5:3f:8d:06:
         1d:2c:e3:72:82:7c:e0:fb:30:bf:ae:cd:b9:e5:8d:42:18:2b:
         dd:ef:04:36:68:12:20:3e:b5:00:ee:fe:4f:78:d5:73:96:a7:
         ea:d4:61:f0:6c:a8:dc:94:35:8b:5c:2e:d3:85:75:76:6b:2a:
         ea:ea:78:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:45:59 2026 by rpki-client