Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/AS213605.asa
File:                     AS213605.asa (raw, json)
Hash identifier:          /VNMUci42IHQGokYnePPu+nWfjn6z+W+mTSXWO4Akec=
Subject key identifier:   25:17:61:3B:9B:CC:A8:A0:27:5F:B6:BC:60:7E:B9:76:B9:E4:A6:F5
Certificate issuer:       /CN=883931aab8b1363015bc8fddf0b582321767440a
Certificate serial:       282E538873A55D6A1953D86D0CABE60726AF9124
Authority key identifier: 88:39:31:AA:B8:B1:36:30:15:BC:8F:DD:F0:B5:82:32:17:67:44:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iDkxqrixNjAVvI_d8LWCMhdnRAo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/AS213605.asa
Signing time:             Tue 09 Jun 2026 12:54:41 +0000
ASPA not before:          Tue 09 Jun 2026 12:49:41 +0000
ASPA not after:           Tue 08 Jun 2027 12:54:41 +0000
Customer ASID:            213605
Providers:                AS: 6939
                          AS: 7720
                          AS: 17408
                          AS: 17433
                          AS: 18041
                          AS: 18423
                          AS: 31898
                          AS: 34927
                          AS: 44324
                          AS: 51087
                          AS: 53808
                          AS: 134823
                          AS: 154185
                          AS: 199310
                          AS: 201944
                          AS: 203031
                          AS: 204539
                          AS: 210440
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iDkxqrixNjAVvI_d8LWCMhdnRAo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:2e:53:88:73:a5:5d:6a:19:53:d8:6d:0c:ab:e6:07:26:af:91:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=883931aab8b1363015bc8fddf0b582321767440a
        Validity
            Not Before: Jun  9 12:49:41 2026 GMT
            Not After : Jun  8 12:54:41 2027 GMT
        Subject: CN=2517613B9BCCA8A0275FB6BC607EB976B9E4A6F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:27:77:4e:f8:28:26:ca:23:e9:a2:c2:80:07:
                    de:22:e6:30:82:b7:77:bf:12:05:5b:9b:df:09:19:
                    88:d8:13:96:3a:77:22:a5:df:ea:4c:41:56:7f:ae:
                    0b:1c:55:54:1f:e6:3b:f1:22:3e:a4:14:ca:d4:09:
                    8e:d5:b6:cc:49:f1:c5:4c:44:96:2f:4a:6b:4a:5a:
                    7f:cd:81:d8:66:ec:ea:69:3a:4a:5b:28:99:7c:d2:
                    fe:f9:fb:b6:77:3f:7e:3e:f7:1d:1e:f6:f8:19:73:
                    63:4b:9e:58:45:9b:f4:11:6f:84:29:2e:37:c0:d1:
                    73:e8:10:84:70:15:9d:a8:0e:83:c1:bd:aa:12:47:
                    e0:57:59:48:11:1d:73:d1:86:ec:cf:60:f8:33:e5:
                    9a:f1:cf:f3:c0:b8:9b:d6:db:b4:a4:08:23:10:9e:
                    e3:32:01:c4:74:5d:c3:ae:ac:11:49:79:6d:ec:cc:
                    0a:ed:2c:46:22:09:bc:ac:bd:ed:cd:2a:00:b3:21:
                    e6:90:dc:37:43:5b:f4:b7:4b:13:a7:8e:d7:9b:e9:
                    94:91:57:85:07:9c:7d:7e:cb:7b:f7:c9:ea:2e:7b:
                    12:9e:ad:92:a8:5a:e7:5e:96:85:0c:f3:f5:57:ec:
                    e8:25:fc:67:14:1c:97:9f:e7:92:b1:e7:89:ed:2e:
                    10:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:17:61:3B:9B:CC:A8:A0:27:5F:B6:BC:60:7E:B9:76:B9:E4:A6:F5
            X509v3 Authority Key Identifier:
                keyid:88:39:31:AA:B8:B1:36:30:15:BC:8F:DD:F0:B5:82:32:17:67:44:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDkxqrixNjAVvI_d8LWCMhdnRAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/AS213605.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213605

    Signature Algorithm: sha256WithRSAEncryption
         bd:a9:f0:2f:3a:c2:55:b4:bf:a2:5f:71:43:ae:3d:5d:63:35:
         e2:0f:1a:9a:10:88:63:85:57:ba:ef:26:6a:a6:11:c1:62:34:
         da:5b:31:6e:46:af:de:62:97:74:b9:0a:49:1f:d9:6e:6c:52:
         75:6b:72:16:c4:df:69:5a:33:69:90:38:90:04:5f:e7:67:05:
         06:dc:95:47:9c:bb:aa:96:71:c4:73:18:98:ff:e0:c9:85:4d:
         05:d0:b6:23:b7:6f:a5:57:f9:40:d6:af:e8:4d:84:74:7c:09:
         a4:18:bf:38:6f:8b:41:e0:09:de:c7:e9:7b:76:fd:9c:d7:60:
         e3:e0:95:f2:c1:53:c3:82:f4:8d:b9:fe:37:f5:0a:c1:2b:ff:
         8c:bd:a7:4f:98:e8:67:ae:b1:a3:0c:94:83:04:34:4e:b2:0b:
         d1:64:91:e2:96:b9:a0:82:84:d9:24:c1:5a:9b:43:55:0f:29:
         bb:32:90:81:1f:27:90:a6:fe:55:f4:46:1f:32:75:f3:46:74:
         c6:b1:6b:61:6e:51:b5:91:42:df:c6:7a:54:13:32:5f:54:a7:
         93:64:62:01:1c:d9:bb:4c:af:0e:46:ef:b3:e8:da:77:ff:1d:
         44:12:e7:5d:88:40:09:8f:9a:56:d5:70:75:e1:d3:7c:37:4b:
         72:e6:67:fa
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIUKC5TiHOlXWoZU9htDKvmByavkSQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODgzOTMxYWFiOGIxMzYzMDE1YmM4ZmRkZjBiNTgyMzIx
NzY3NDQwYTAeFw0yNjA2MDkxMjQ5NDFaFw0yNzA2MDgxMjU0NDFaMDMxMTAvBgNV
BAMTKDI1MTc2MTNCOUJDQ0E4QTAyNzVGQjZCQzYwN0VCOTc2QjlFNEE2RjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkJ3dO+CgmyiPposKAB94i5jCC
t3e/EgVbm98JGYjYE5Y6dyKl3+pMQVZ/rgscVVQf5jvxIj6kFMrUCY7VtsxJ8cVM
RJYvSmtKWn/Ngdhm7OppOkpbKJl80v75+7Z3P34+9x0e9vgZc2NLnlhFm/QRb4Qp
LjfA0XPoEIRwFZ2oDoPBvaoSR+BXWUgRHXPRhuzPYPgz5Zrxz/PAuJvW27SkCCMQ
nuMyAcR0XcOurBFJeW3szArtLEYiCbysve3NKgCzIeaQ3DdDW/S3SxOnjteb6ZSR
V4UHnH1+y3v3yeouexKerZKoWudeloUM8/VX7Ogl/GcUHJef55Kx54ntLhCzAgMB
AAGjggIFMIICATAdBgNVHQ4EFgQUJRdhO5vMqKAnX7a8YH65drnkpvUwHwYDVR0j
BBgwFoAUiDkxqrixNjAVvI/d8LWCMhdnRAowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDkyZDE2ZjItOWI0Ni00YTExLWFjNTktNDJiM2RkZWUx
MTA2LzAvODgzOTMxQUFCOEIxMzYzMDE1QkM4RkRERjBCNTgyMzIxNzY3NDQwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lEa3hxcml4TmpBVnZJX2Q4TFdDTWhk
blJBby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5MmQxNmYyLTliNDYt
NGExMS1hYzU5LTQyYjNkZGVlMTEwNi8wL0FTMjEzNjA1LmFzYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNCZTANBgkq
hkiG9w0BAQsFAAOCAQEAvanwLzrCVbS/ol9xQ649XWM14g8amhCIY4VXuu8maqYR
wWI02lsxbkav3mKXdLkKSR/ZbmxSdWtyFsTfaVozaZA4kARf52cFBtyVR5y7qpZx
xHMYmP/gyYVNBdC2I7dvpVf5QNav6E2EdHwJpBi/OG+LQeAJ3sfpe3b9nNdg4+CV
8sFTw4L0jbn+N/UKwSv/jL2nT5joZ66xowyUgwQ0TrIL0WSR4pa5oIKE2STBWptD
VQ8puzKQgR8nkKb+VfRGHzJ180Z0xrFrYW5RtZFC38Z6VBMyX1Snk2RiARzZu0yv
Dkbvs+jad/8dRBLnXYhACY+aVtVwdeHTfDdLcuZn+g==
-----END CERTIFICATE-----
Generated at Thu Jun 11 21:50:04 2026 by rpki-client