Autonomous System Provider Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/AS210352.asa
File:                     AS210352.asa (raw, json)
Hash identifier:          x0Mzp9uNbhYBNVbao9h99kMNB+s8WR3cShhsKi7t0Wk=
Subject key identifier:   DA:97:57:DD:FC:EE:CF:44:57:35:B0:6D:69:C7:F9:F5:74:4F:C9:6C
Certificate issuer:       /CN=bd7fd75977189e0d4325b6027a02b6f18a71ef3b
Certificate serial:       1780AEADC9115A52410E994993071AF9B1072359
Authority key identifier: BD:7F:D7:59:77:18:9E:0D:43:25:B6:02:7A:02:B6:F1:8A:71:EF:3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vX_XWXcYng1DJbYCegK28Ypx7zs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/AS210352.asa
Signing time:             Tue 25 Aug 2026 16:25:00 +0000
ASPA not before:          Tue 25 Aug 2026 16:20:00 +0000
ASPA not after:           Tue 24 Aug 2027 16:25:00 +0000
Customer ASID:            210352
Providers:                AS: 7720
                          AS: 11421
                          AS: 20473
                          AS: 44324
                          AS: 53808
                          AS: 62246
                          AS: 63199
                          AS: 151673
                          AS: 199310
                          AS: 204921
                          AS: 206069
                          AS: 207529
                          AS: 211575
                          AS: 213605
                          AS: 214439
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vX_XWXcYng1DJbYCegK28Ypx7zs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 31 Aug 2026 23:28:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:80:ae:ad:c9:11:5a:52:41:0e:99:49:93:07:1a:f9:b1:07:23:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd7fd75977189e0d4325b6027a02b6f18a71ef3b
        Validity
            Not Before: Aug 25 16:20:00 2026 GMT
            Not After : Aug 24 16:25:00 2027 GMT
        Subject: CN=DA9757DDFCEECF445735B06D69C7F9F5744FC96C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:bb:e8:5c:9c:e1:bd:4b:13:28:24:5a:07:50:
                    e9:a0:97:73:2f:4a:f9:84:4e:98:1c:be:c9:7b:b9:
                    59:05:18:77:d0:86:70:d7:44:c8:79:67:14:c5:cd:
                    b3:28:51:54:37:c3:3e:de:88:e5:f5:b2:f0:71:91:
                    69:4e:19:e5:79:62:bc:65:6f:de:09:1b:84:50:47:
                    05:04:6b:0f:8c:3f:4b:06:51:5e:cd:21:fc:c6:6e:
                    d6:62:8c:c4:57:7d:25:5a:34:1f:75:f4:bc:8e:42:
                    21:73:d7:07:cd:3e:b2:45:b3:a5:0d:44:04:30:22:
                    44:e9:4f:b8:5b:0b:a0:f0:d3:bc:fd:c9:5f:8f:40:
                    4e:41:5c:79:e3:85:9f:99:a2:e0:c0:ac:b6:04:cb:
                    c7:f6:17:7e:21:70:03:ff:08:40:bf:81:02:99:a0:
                    09:9c:ce:0c:f7:fe:2d:ab:6e:4c:ea:2c:ee:27:a1:
                    9a:f2:0a:1a:31:be:81:38:c8:38:0e:27:64:cf:da:
                    1b:10:f8:3a:c2:6c:87:ce:d1:ed:27:a0:04:d9:7a:
                    a8:00:a9:8c:34:79:e5:28:dc:dd:59:3b:09:23:16:
                    10:b3:4d:36:bb:0a:53:1b:f7:4f:81:bc:77:61:c0:
                    0e:0d:d6:aa:c3:08:35:39:5a:68:12:cf:9c:1b:ba:
                    48:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:97:57:DD:FC:EE:CF:44:57:35:B0:6D:69:C7:F9:F5:74:4F:C9:6C
            X509v3 Authority Key Identifier:
                keyid:BD:7F:D7:59:77:18:9E:0D:43:25:B6:02:7A:02:B6:F1:8A:71:EF:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX_XWXcYng1DJbYCegK28Ypx7zs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/AS210352.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210352

    Signature Algorithm: sha256WithRSAEncryption
         05:39:08:22:a4:04:5f:b4:4c:6e:ca:a0:98:85:d1:39:3a:12:
         42:31:f0:ab:67:ad:12:2f:bb:f8:89:47:f2:a8:b6:dc:47:89:
         d4:d9:07:42:bb:0b:7f:f0:d4:16:93:de:7e:57:df:a4:af:72:
         7e:ee:1d:48:2f:2e:e4:2e:fb:49:b1:c4:d5:ea:b5:d2:15:0e:
         87:f9:6f:f0:dd:3e:d9:4c:b8:50:35:e8:56:6e:9b:aa:c6:d2:
         db:df:be:f9:1d:ca:a1:cb:41:ee:66:56:5a:32:5a:0c:84:2f:
         a1:4c:7d:d5:f8:5b:0d:fc:68:81:4d:3a:33:ff:b8:6d:88:8f:
         7f:82:62:4c:7a:1c:0b:b7:7d:1f:3d:4d:17:83:44:21:30:18:
         64:8f:08:1a:95:ae:3d:81:d5:64:9b:45:e4:52:6d:35:02:e7:
         75:a8:34:21:7c:40:ad:4b:b2:79:ba:0b:45:05:5e:ce:08:76:
         9d:18:02:49:8d:ac:bf:d3:a6:1b:82:b5:5b:2b:ce:05:8e:36:
         7d:5e:ef:d7:a6:9b:f9:8c:29:54:52:9c:0a:bd:7a:61:92:fc:
         dd:e3:cb:f0:8f:bf:df:fd:91:50:94:43:91:d7:fb:3b:78:60:
         66:5e:f4:c7:48:b1:ca:5a:c6:8b:01:30:57:de:e8:e5:0e:a3:
         63:ae:5d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 10:49:49 2026 by rpki-client