Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/AS205941.asa
File:                     AS205941.asa (raw, json)
Hash identifier:          KnHD+PETxACMy5dzP4DPSm9wPvguxoY0r6N7X+N1Klc=
Subject key identifier:   57:06:8D:D4:9E:15:8B:CA:68:89:CE:8C:CE:A6:66:37:82:5B:E2:2E
Certificate issuer:       /CN=42629f1567d74fb19eff142c6a6f5f93f3086333
Certificate serial:       3F5CCB3E2A484258B2DEBCD3CB30CD954D4782DF
Authority key identifier: 42:62:9F:15:67:D7:4F:B1:9E:FF:14:2C:6A:6F:5F:93:F3:08:63:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QmKfFWfXT7Ge_xQsam9fk_MIYzM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/AS205941.asa
Signing time:             Sat 25 Apr 2026 10:21:37 +0000
ASPA not before:          Sat 25 Apr 2026 10:16:37 +0000
ASPA not after:           Sat 24 Apr 2027 10:21:37 +0000
Customer ASID:            205941
Providers:                AS: 6204
                          AS: 6939
                          AS: 44324
                          AS: 60900
                          AS: 207252
                          AS: 212271
                          AS: 212635
                          AS: 214762
                          AS: 215362
                          AS: 400587
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/42629F1567D74FB19EFF142C6A6F5F93F3086333.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/42629F1567D74FB19EFF142C6A6F5F93F3086333.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QmKfFWfXT7Ge_xQsam9fk_MIYzM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Apr 2026 18:38:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:5c:cb:3e:2a:48:42:58:b2:de:bc:d3:cb:30:cd:95:4d:47:82:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42629f1567d74fb19eff142c6a6f5f93f3086333
        Validity
            Not Before: Apr 25 10:16:37 2026 GMT
            Not After : Apr 24 10:21:37 2027 GMT
        Subject: CN=57068DD49E158BCA6889CE8CCEA66637825BE22E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:11:80:78:f4:15:8b:bc:26:67:11:17:69:59:
                    be:d1:ad:17:10:99:6e:02:7c:23:8e:34:23:cb:9a:
                    a9:41:d6:2f:bc:44:9e:bb:03:fc:e5:e0:a7:4f:b3:
                    e2:11:26:45:31:84:6a:4b:97:6e:e6:92:03:9b:1d:
                    f8:6d:00:b1:79:56:79:5d:d1:73:6a:9c:47:6b:6c:
                    06:b5:2c:0f:d8:94:df:38:7c:3b:c7:61:31:b4:77:
                    3e:73:81:70:ea:eb:2d:b5:6c:97:51:f3:89:86:9e:
                    a8:97:6e:17:a4:8d:95:e7:74:df:9a:e9:bd:f6:0c:
                    88:a0:b9:8b:3d:e6:d8:43:d1:ca:c0:01:20:41:e9:
                    a3:d4:aa:22:82:38:24:75:d5:92:f5:68:5d:e8:7b:
                    6e:8b:70:da:93:66:54:a6:33:51:10:b3:cf:99:28:
                    ce:93:03:f0:aa:69:f4:5c:78:a4:5e:da:be:e1:52:
                    a0:37:9a:da:e9:81:7a:81:25:ca:f4:4f:f2:16:fe:
                    cc:8b:c8:c4:9f:2e:b1:02:1f:16:2e:4a:bb:ae:a6:
                    89:e9:78:2f:8b:0e:be:d7:5c:9c:f5:39:aa:c2:0f:
                    b1:97:18:a3:64:e8:fa:a1:ab:65:02:6b:96:07:b5:
                    b2:c2:7f:87:b2:85:80:e4:5e:80:e3:47:4c:d1:4b:
                    4c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:06:8D:D4:9E:15:8B:CA:68:89:CE:8C:CE:A6:66:37:82:5B:E2:2E
            X509v3 Authority Key Identifier:
                keyid:42:62:9F:15:67:D7:4F:B1:9E:FF:14:2C:6A:6F:5F:93:F3:08:63:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/42629F1567D74FB19EFF142C6A6F5F93F3086333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmKfFWfXT7Ge_xQsam9fk_MIYzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/AS205941.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205941

    Signature Algorithm: sha256WithRSAEncryption
         3c:0f:40:6a:0f:6c:61:7c:9a:33:56:fb:cb:51:fd:9e:d1:a9:
         45:f0:89:af:ee:f7:29:c0:ce:78:f7:6c:44:a7:32:90:e0:a4:
         9f:43:88:91:e1:3f:7b:25:1d:c7:45:da:d3:30:76:d4:93:10:
         b2:cf:28:df:e1:8f:aa:53:d2:d3:f4:04:28:4b:77:dc:a7:b8:
         60:a4:9a:db:72:06:87:43:a3:35:6f:27:99:19:b4:23:13:5b:
         1b:2a:b5:f7:eb:aa:8c:cc:15:09:1b:84:39:21:7d:77:7c:34:
         9b:79:a6:a2:07:45:d3:30:bd:45:42:27:b3:c1:d2:3d:be:67:
         96:0a:af:53:ac:8d:6c:80:90:8f:eb:8a:38:83:23:93:68:80:
         ea:21:54:55:bf:7c:13:84:20:21:85:17:d6:60:6a:8d:54:c0:
         85:ce:df:74:dc:36:ca:2b:65:fd:c9:a8:6c:3f:13:fb:dc:ac:
         39:0f:a3:22:a1:d7:5f:23:21:49:d2:d1:c1:4b:8e:7a:73:73:
         5e:77:96:e8:87:ab:46:dc:1e:b2:cf:9b:20:7a:14:3a:45:05:
         19:ec:a0:04:43:3a:49:46:a9:1b:49:28:7c:9e:90:0c:ca:d0:
         4f:bf:18:f6:39:ab:7b:89:c9:cc:35:0e:01:51:56:fc:0a:c4:
         40:84:08:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 11:56:34 2026 by rpki-client