This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e97c29c1-31bd-4e09-81eb-7a199b3112a7/0/AS203031.asa
File:                     AS203031.asa (raw, json)
Hash identifier:          nWrsExEcyP73tl74c5+qCA9xzQDek8r8Gvy+OWZRM6I=
Subject key identifier:   77:79:D9:A8:F9:30:D5:72:10:E3:8D:D9:27:4F:C0:CB:CD:16:72:10
Certificate issuer:       /CN=6eec3f02205a4d34b05bb848e8b62b2ff5e50058
Certificate serial:       3557833FA0729343E1F0922E9E5FC885019A6BC0
Authority key identifier: 6E:EC:3F:02:20:5A:4D:34:B0:5B:B8:48:E8:B6:2B:2F:F5:E5:00:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/buw_AiBaTTSwW7hI6LYrL_XlAFg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e97c29c1-31bd-4e09-81eb-7a199b3112a7/0/AS203031.asa
Signing time:             Wed 10 Dec 2025 06:15:50 +0000
ASPA not before:          Wed 10 Dec 2025 06:10:50 +0000
ASPA not after:           Wed 09 Dec 2026 06:15:50 +0000
Customer ASID:            203031
Providers:                AS: 0
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/e97c29c1-31bd-4e09-81eb-7a199b3112a7/0/6EEC3F02205A4D34B05BB848E8B62B2FF5E50058.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e97c29c1-31bd-4e09-81eb-7a199b3112a7/0/6EEC3F02205A4D34B05BB848E8B62B2FF5E50058.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/buw_AiBaTTSwW7hI6LYrL_XlAFg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Dec 2025 08:32:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:57:83:3f:a0:72:93:43:e1:f0:92:2e:9e:5f:c8:85:01:9a:6b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eec3f02205a4d34b05bb848e8b62b2ff5e50058
        Validity
            Not Before: Dec 10 06:10:50 2025 GMT
            Not After : Dec  9 06:15:50 2026 GMT
        Subject: CN=7779D9A8F930D57210E38DD9274FC0CBCD167210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d6:f6:12:91:f1:00:b3:d7:bd:a6:a1:14:83:
                    74:48:21:49:b6:c2:5f:cb:fc:88:0b:9e:fa:3b:46:
                    0c:d7:06:ba:63:be:fe:ae:e4:42:3d:89:e8:74:d9:
                    e3:62:8b:ed:a3:f9:46:aa:1c:98:98:05:42:b6:3e:
                    dc:b1:4a:a4:67:fb:7b:9e:94:03:41:07:e2:8a:73:
                    a7:62:13:29:27:58:88:ca:41:75:25:54:5d:99:05:
                    a3:4a:f0:be:0d:cb:ec:04:91:5e:5d:a7:0b:65:c0:
                    e9:72:ae:94:67:61:42:54:45:74:cc:15:d9:fc:e3:
                    09:3a:6c:b6:20:85:1a:dd:c4:a8:b5:6d:0c:ed:77:
                    75:6a:0c:3a:12:a9:64:11:d6:b6:68:dd:d3:da:8f:
                    ea:98:d4:e0:b6:3d:51:df:c7:c6:20:50:a6:aa:65:
                    5e:bb:b0:fc:30:b4:da:21:aa:8d:56:37:2f:6e:9c:
                    60:75:5e:a7:3c:2e:7d:13:d8:86:15:93:a6:ff:50:
                    43:7e:c7:cf:1b:6b:3d:68:40:98:aa:e6:76:d3:de:
                    10:5e:1a:6d:51:f3:9a:01:b7:14:e3:ca:b9:96:28:
                    8e:01:e0:c8:6a:94:e2:23:a3:13:63:2e:21:8e:9c:
                    dc:be:2d:71:75:a1:ad:2f:bf:3f:0d:f0:7e:e3:4c:
                    02:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:79:D9:A8:F9:30:D5:72:10:E3:8D:D9:27:4F:C0:CB:CD:16:72:10
            X509v3 Authority Key Identifier:
                keyid:6E:EC:3F:02:20:5A:4D:34:B0:5B:B8:48:E8:B6:2B:2F:F5:E5:00:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e97c29c1-31bd-4e09-81eb-7a199b3112a7/0/6EEC3F02205A4D34B05BB848E8B62B2FF5E50058.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/buw_AiBaTTSwW7hI6LYrL_XlAFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e97c29c1-31bd-4e09-81eb-7a199b3112a7/0/AS203031.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203031

    Signature Algorithm: sha256WithRSAEncryption
         68:44:ba:7f:d2:1c:af:11:81:5b:45:eb:23:7a:b7:db:61:a3:
         9e:98:6d:bd:10:32:03:0c:d1:04:9b:95:d3:3c:60:02:cc:45:
         25:a4:01:65:71:46:9b:7f:35:8d:d9:70:80:7b:bf:db:75:ae:
         2b:42:6c:4d:98:82:f4:e4:3d:21:27:e3:ea:f4:cf:5d:4c:9a:
         e3:b1:0d:82:70:93:7d:1a:75:8e:91:8b:28:c9:79:81:35:07:
         c9:37:4d:a3:23:af:7c:cd:a8:97:1c:4b:cf:cd:13:4a:40:63:
         32:7c:71:23:86:b2:be:45:b9:55:d1:d6:56:f4:2c:cf:4a:4b:
         c1:22:3a:69:95:38:3f:d4:b9:c8:d8:4c:56:61:20:51:a1:7f:
         99:60:72:e0:3f:ec:af:ad:6b:23:74:80:2e:27:cb:b6:7c:00:
         16:25:64:37:b9:c4:c2:5c:d6:63:c0:33:60:a7:4c:47:17:f0:
         68:9f:42:84:68:b6:b1:8f:3d:d5:c1:f4:28:cb:8f:ef:b2:81:
         26:f2:83:12:94:b0:34:0d:34:b1:1d:0d:30:3a:94:43:b9:dd:
         e3:eb:8d:74:d4:05:52:39:cd:a3:5c:cd:41:c4:65:29:38:8b:
         b1:8d:eb:84:d0:0f:6b:7d:98:8d:e4:cd:6b:bb:3d:43:26:fc:
         a9:63:aa:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 11:38:56 2025 by rpki-client