Autonomous System Provider Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/AS205941.asa
File:                     AS205941.asa (raw, json)
Hash identifier:          RSQS4jpSR851Ak6RhtcwU5FcZaXidS/C/rK6Y6TFzRQ=
Subject key identifier:   ED:71:F8:84:DD:09:63:93:7B:B6:F6:A5:88:77:FF:E5:EE:4D:DE:74
Certificate issuer:       /CN=42629f1567d74fb19eff142c6a6f5f93f3086333
Certificate serial:       0683C56A9B6DDE103A399F6E76B96E413C5B7573
Authority key identifier: 42:62:9F:15:67:D7:4F:B1:9E:FF:14:2C:6A:6F:5F:93:F3:08:63:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QmKfFWfXT7Ge_xQsam9fk_MIYzM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/AS205941.asa
Signing time:             Sat 01 Aug 2026 15:58:43 +0000
ASPA not before:          Sat 01 Aug 2026 15:53:43 +0000
ASPA not after:           Sat 31 Jul 2027 15:58:43 +0000
Customer ASID:            205941
Providers:                AS: 6204
                          AS: 6517
                          AS: 6939
                          AS: 34854
                          AS: 44324
                          AS: 49600
                          AS: 60900
                          AS: 207252
                          AS: 210464
                          AS: 212271
                          AS: 212635
                          AS: 213753
                          AS: 214757
                          AS: 214762
                          AS: 215114
                          AS: 215362
                          AS: 216456
                          AS: 399486
                          AS: 400587
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/42629F1567D74FB19EFF142C6A6F5F93F3086333.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/42629F1567D74FB19EFF142C6A6F5F93F3086333.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QmKfFWfXT7Ge_xQsam9fk_MIYzM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Sep 2026 21:38:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:83:c5:6a:9b:6d:de:10:3a:39:9f:6e:76:b9:6e:41:3c:5b:75:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42629f1567d74fb19eff142c6a6f5f93f3086333
        Validity
            Not Before: Aug  1 15:53:43 2026 GMT
            Not After : Jul 31 15:58:43 2027 GMT
        Subject: CN=ED71F884DD0963937BB6F6A58877FFE5EE4DDE74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e2:b4:bc:82:c4:ea:92:de:d3:f4:1f:2b:cc:
                    2f:72:ef:34:80:2a:8e:a5:08:4b:9d:69:9d:a2:63:
                    54:9a:d1:18:c6:40:ce:82:57:ad:e9:b8:aa:b5:d8:
                    36:e2:f6:bc:b6:5a:49:fb:f0:00:0e:d0:16:d8:d9:
                    f3:0f:50:fe:09:3c:27:58:e2:06:2c:5d:97:a6:6f:
                    dc:3a:c9:aa:81:27:f8:a7:e0:b4:3b:31:f2:5c:12:
                    83:80:29:38:81:f2:5d:64:ef:2f:57:8d:a4:fa:85:
                    09:c4:2b:22:bf:b2:2b:5a:ef:24:af:6b:1b:94:3b:
                    50:d8:08:be:d9:41:ea:3c:05:0a:9b:da:c2:1f:d0:
                    a2:e5:4f:1c:0d:a2:42:2f:36:b9:06:01:7d:64:d6:
                    3e:2c:37:1b:64:2d:53:25:65:24:ee:af:f4:45:ec:
                    e9:0f:7c:ea:26:1d:4c:5a:6a:b5:90:ee:3e:bd:26:
                    84:40:95:bd:90:64:e2:bd:c7:04:5f:f4:6d:23:d9:
                    b6:ad:70:f2:5b:93:b7:7a:ff:79:88:42:08:73:8a:
                    54:3f:6a:c8:71:4b:18:66:d9:24:f9:27:da:8c:63:
                    50:78:42:f2:4a:e2:8a:e0:e3:85:fb:47:ca:bc:5c:
                    75:8a:2b:86:33:9f:7c:01:6d:4a:e1:8f:64:58:2b:
                    11:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:71:F8:84:DD:09:63:93:7B:B6:F6:A5:88:77:FF:E5:EE:4D:DE:74
            X509v3 Authority Key Identifier:
                keyid:42:62:9F:15:67:D7:4F:B1:9E:FF:14:2C:6A:6F:5F:93:F3:08:63:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/42629F1567D74FB19EFF142C6A6F5F93F3086333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmKfFWfXT7Ge_xQsam9fk_MIYzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/AS205941.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205941

    Signature Algorithm: sha256WithRSAEncryption
         a1:e1:6d:f0:fd:50:33:76:36:9e:1f:05:d5:f4:09:1a:95:a8:
         66:be:69:bc:cf:f9:9b:ea:07:d9:3c:98:98:85:c1:98:c5:40:
         cc:65:d4:51:98:7a:3f:52:6d:36:93:79:95:62:4e:00:15:3a:
         07:be:41:6f:3b:d8:5c:c1:cb:37:52:69:2b:ea:12:89:a5:3a:
         7e:8d:37:87:bb:46:6a:5d:3e:d6:ef:a3:da:94:d2:a8:c6:0d:
         16:c9:b9:65:22:50:ca:c5:5d:63:f0:fa:5e:e8:da:47:89:e6:
         66:d4:aa:60:7f:df:f5:36:fd:0e:05:da:11:91:52:25:91:30:
         51:03:cd:8d:0e:37:45:a6:d8:83:53:49:cb:c0:b7:00:b1:8f:
         07:f8:23:59:a0:39:35:15:4f:96:fa:08:3e:ed:42:cb:84:54:
         eb:e3:9a:3d:0d:c1:c0:b3:f1:16:4f:d0:50:3a:16:33:aa:8d:
         3b:a2:12:b1:c8:ff:4e:eb:19:d9:ca:9b:e5:37:e4:a7:2b:fa:
         24:41:9c:fe:e2:02:e0:b3:da:64:bd:b8:c3:50:df:03:40:db:
         3d:13:e6:15:11:5e:13:9b:d2:8c:18:63:5e:b7:a5:de:6e:37:
         d0:c7:08:fd:f6:3a:68:37:d4:43:ba:9f:e7:e5:56:6b:01:6b:
         72:79:36:23
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIUBoPFaptt3hA6OZ9udrluQTxbdXMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDI2MjlmMTU2N2Q3NGZiMTllZmYxNDJjNmE2ZjVmOTNm
MzA4NjMzMzAeFw0yNjA4MDExNTUzNDNaFw0yNzA3MzExNTU4NDNaMDMxMTAvBgNV
BAMTKEVENzFGODg0REQwOTYzOTM3QkI2RjZBNTg4NzdGRkU1RUU0RERFNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC24rS8gsTqkt7T9B8rzC9y7zSA
Ko6lCEudaZ2iY1Sa0RjGQM6CV63puKq12Dbi9ry2Wkn78AAO0BbY2fMPUP4JPCdY
4gYsXZemb9w6yaqBJ/in4LQ7MfJcEoOAKTiB8l1k7y9XjaT6hQnEKyK/sita7ySv
axuUO1DYCL7ZQeo8BQqb2sIf0KLlTxwNokIvNrkGAX1k1j4sNxtkLVMlZSTur/RF
7OkPfOomHUxaarWQ7j69JoRAlb2QZOK9xwRf9G0j2batcPJbk7d6/3mIQghzilQ/
ashxSxhm2ST5J9qMY1B4QvJK4org44X7R8q8XHWKK4Yzn3wBbUrhj2RYKxGVAgMB
AAGjggIFMIICATAdBgNVHQ4EFgQU7XH4hN0JY5N7tvaliHf/5e5N3nQwHwYDVR0j
BBgwFoAUQmKfFWfXT7Ge/xQsam9fk/MIYzMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDAyZjhlZTYtYWJlNy00YWU4LTk2NGMtNzg4YmI5OGM5
NzVjLzAvNDI2MjlGMTU2N0Q3NEZCMTlFRkYxNDJDNkE2RjVGOTNGMzA4NjMzMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FtS2ZGV2ZYVDdHZV94UXNhbTlma19N
SVl6TS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzAwMmY4ZWU2LWFiZTct
NGFlOC05NjRjLTc4OGJiOThjOTc1Yy8wL0FTMjA1OTQxLmFzYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMkdTANBgkq
hkiG9w0BAQsFAAOCAQEAoeFt8P1QM3Y2nh8F1fQJGpWoZr5pvM/5m+oH2TyYmIXB
mMVAzGXUUZh6P1JtNpN5lWJOABU6B75BbzvYXMHLN1JpK+oSiaU6fo03h7tGal0+
1u+j2pTSqMYNFsm5ZSJQysVdY/D6XujaR4nmZtSqYH/f9Tb9DgXaEZFSJZEwUQPN
jQ43RabYg1NJy8C3ALGPB/gjWaA5NRVPlvoIPu1Cy4RU6+OaPQ3BwLPxFk/QUDoW
M6qNO6ISscj/TusZ2cqb5Tfkpyv6JEGc/uIC4LPaZL24w1DfA0DbPRPmFRFeE5vS
jBhjXrel3m430McI/fY6aDfUQ7qf5+VWawFrcnk2Iw==
-----END CERTIFICATE-----
Generated at Tue Sep 1 02:22:26 2026 by rpki-client