Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/AS203843.asa
File:                     AS203843.asa (raw, json)
Hash identifier:          V8ALni8uGvnQlob1ieX97WK3dqsrOaJM1khRqBJJdKg=
Subject key identifier:   33:E3:CD:B4:AB:E4:AA:14:E1:87:68:50:62:FD:E0:9D:2E:73:B5:8C
Certificate issuer:       /CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
Certificate serial:       728347B44E46EC87FE2BAD47CA8C866CF61E2BEF
Authority key identifier: D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/AS203843.asa
Signing time:             Thu 25 Jun 2026 09:34:04 +0000
ASPA not before:          Thu 25 Jun 2026 09:29:04 +0000
ASPA not after:           Thu 24 Jun 2027 09:34:04 +0000
Customer ASID:            203843
Providers:                AS: 6939
                          AS: 7720
                          AS: 17433
                          AS: 32595
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:83:47:b4:4e:46:ec:87:fe:2b:ad:47:ca:8c:86:6c:f6:1e:2b:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
        Validity
            Not Before: Jun 25 09:29:04 2026 GMT
            Not After : Jun 24 09:34:04 2027 GMT
        Subject: CN=33E3CDB4ABE4AA14E187685062FDE09D2E73B58C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:42:36:67:72:7f:73:aa:ca:25:10:cf:c5:dc:
                    f8:43:6d:d9:ca:7c:d8:7e:ba:d4:f7:69:80:d9:07:
                    8d:19:71:85:15:b4:d7:c8:33:b2:3d:02:ef:96:30:
                    2d:31:1e:ec:99:48:d2:f2:6a:69:0b:7f:d0:a7:36:
                    16:29:36:e4:6b:66:af:88:8b:64:08:8f:69:b2:3b:
                    1a:35:73:bd:b2:96:30:5a:64:86:88:a9:d7:8c:aa:
                    e3:e8:ec:9b:44:9b:ff:77:a2:de:6f:dc:ad:e0:e0:
                    f1:16:28:78:da:af:3d:bf:cd:0c:82:1d:aa:0c:61:
                    63:5c:74:88:43:a0:7b:ad:32:1f:cc:d8:66:30:a2:
                    4b:52:19:1a:6a:55:31:f8:b4:4c:af:90:c4:11:07:
                    fc:74:e3:01:f0:65:5a:ed:8b:b3:1c:9b:50:48:93:
                    da:1f:48:b4:3a:3e:a8:e1:fb:57:24:87:0d:40:94:
                    da:d0:ed:e7:ac:68:c7:40:f9:c3:3d:08:54:1e:76:
                    4c:60:90:cb:a4:d1:15:df:10:6b:54:6c:d9:83:3b:
                    06:7c:52:da:76:3f:bd:b0:32:bc:0d:f7:4c:de:8c:
                    fd:fc:7c:eb:53:fe:da:50:a1:16:0b:4b:96:5b:f1:
                    ce:2e:a5:eb:7a:24:f8:34:f8:57:ca:ee:6d:4a:28:
                    31:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E3:CD:B4:AB:E4:AA:14:E1:87:68:50:62:FD:E0:9D:2E:73:B5:8C
            X509v3 Authority Key Identifier:
                keyid:D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/AS203843.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203843

    Signature Algorithm: sha256WithRSAEncryption
         bb:a7:3d:92:7e:da:7b:a8:44:e5:f3:33:bc:67:97:1b:3c:97:
         66:86:08:61:13:f5:7b:02:c5:3e:93:8a:fb:b8:a2:c4:01:7c:
         81:60:c5:29:2c:09:0b:27:08:15:0b:ab:81:a4:5e:29:1a:15:
         f3:27:97:e7:96:3e:a6:0a:8c:75:14:5b:c8:7c:95:02:a9:5c:
         dd:a0:49:18:67:50:4a:80:bf:69:0b:f6:3f:e5:5d:8a:5f:46:
         a5:29:1f:cd:cd:54:58:e9:9f:7c:bd:72:69:63:d3:64:4b:94:
         8d:c5:3a:53:f4:4c:b3:ed:19:66:36:ac:6a:d2:df:66:6c:3b:
         af:a5:31:75:d2:43:8a:be:cd:0a:1a:d1:52:bf:e6:b7:f0:60:
         5a:6d:77:48:10:80:5b:74:84:3d:a6:e4:42:3e:d5:3a:a8:37:
         b3:06:6a:22:c8:19:42:58:c7:d9:19:8a:3d:97:e0:da:a1:fe:
         4d:5b:99:66:6d:45:92:40:47:53:af:e5:2d:b6:6d:01:cb:e2:
         60:ec:2e:54:87:f2:4f:dc:f1:fe:47:5c:ad:71:9c:88:92:3e:
         8e:2a:d7:3f:8a:17:c1:fc:a0:9e:f5:b4:b6:e6:69:92:23:6b:
         98:84:3c:b9:e5:c5:10:be:78:20:1e:bd:64:71:72:8c:a3:ef:
         43:a7:b8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 09:38:19 2026 by rpki-client