Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/AS215216.asa
File:                     AS215216.asa (raw, json)
Hash identifier:          0S0UZXwUh8izwqjeqSWK8dmeJh+jfpdEMtPa5HnqZwE=
Subject key identifier:   C8:2F:91:1D:FF:40:99:DF:0D:0D:17:28:44:EE:3B:3A:ED:52:5A:27
Certificate issuer:       /CN=a9dd9f6b65491d90c4e19e9c960252466c2c9d12
Certificate serial:       41812E8BB5BA5FC0B8DE39A303CBC16FA5DA460C
Authority key identifier: A9:DD:9F:6B:65:49:1D:90:C4:E1:9E:9C:96:02:52:46:6C:2C:9D:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qd2fa2VJHZDE4Z6clgJSRmwsnRI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/AS215216.asa
Signing time:             Mon 03 Aug 2026 20:33:50 +0000
ASPA not before:          Mon 03 Aug 2026 20:28:50 +0000
ASPA not after:           Mon 02 Aug 2027 20:33:50 +0000
Customer ASID:            215216
Providers:                AS: 6939
                          AS: 34927
                          AS: 41051
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qd2fa2VJHZDE4Z6clgJSRmwsnRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:81:2e:8b:b5:ba:5f:c0:b8:de:39:a3:03:cb:c1:6f:a5:da:46:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9dd9f6b65491d90c4e19e9c960252466c2c9d12
        Validity
            Not Before: Aug  3 20:28:50 2026 GMT
            Not After : Aug  2 20:33:50 2027 GMT
        Subject: CN=C82F911DFF4099DF0D0D172844EE3B3AED525A27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d4:20:95:f0:00:53:cf:ac:d1:1c:56:9b:91:
                    43:b5:d6:4f:a6:89:51:65:f0:00:0d:4a:96:0d:24:
                    1c:e6:1d:2c:2d:a6:26:85:00:60:59:80:d3:56:df:
                    70:6a:3a:fa:54:ce:33:c2:b0:e4:17:af:6f:74:f9:
                    5a:84:68:87:42:47:df:37:5c:ef:71:8b:6c:c8:09:
                    b2:83:58:20:1f:92:45:c0:55:28:6d:d1:84:1b:f4:
                    e3:3b:42:91:df:58:29:e3:54:77:da:bb:3a:e4:dc:
                    11:ca:38:3e:18:78:b6:e9:4f:48:d8:12:e2:8a:6b:
                    03:99:26:1b:b7:14:ce:74:dd:8f:af:a5:a3:79:66:
                    84:c5:af:7b:51:ac:42:b1:5e:1c:f2:9f:12:66:5a:
                    4f:2e:73:df:53:f8:48:e6:b6:b7:f3:9f:d3:c9:d5:
                    8c:2b:07:be:5f:0d:65:59:39:2a:a7:b2:cf:0c:c8:
                    68:d0:49:06:2c:f6:8a:7b:74:9d:22:da:58:f5:b0:
                    d4:73:a9:3c:e2:ea:95:cd:3b:38:e0:dd:b1:7e:6b:
                    2c:42:46:0a:2d:36:ac:d6:1d:a1:86:2d:2b:54:bd:
                    b9:e7:63:42:9b:ad:07:6c:2e:cb:a5:14:77:67:85:
                    3d:78:d4:eb:42:08:74:bf:92:20:6b:fc:d3:8c:02:
                    f2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:2F:91:1D:FF:40:99:DF:0D:0D:17:28:44:EE:3B:3A:ED:52:5A:27
            X509v3 Authority Key Identifier:
                keyid:A9:DD:9F:6B:65:49:1D:90:C4:E1:9E:9C:96:02:52:46:6C:2C:9D:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qd2fa2VJHZDE4Z6clgJSRmwsnRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/AS215216.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215216

    Signature Algorithm: sha256WithRSAEncryption
         32:b0:46:b0:e0:9c:24:47:cb:93:ec:62:d6:1d:e9:77:a7:63:
         e5:b6:e9:bd:ba:79:36:78:3d:62:93:67:24:0d:8f:90:c3:31:
         2e:f8:a3:50:38:32:06:cc:55:b4:bf:1b:70:89:42:93:e5:5b:
         f8:08:bb:1d:e6:3d:80:a7:57:13:b8:32:59:cf:2a:d1:64:e9:
         65:a8:f0:59:c4:0c:be:47:c1:a0:73:02:e3:f1:e4:56:87:af:
         36:8b:a0:b7:0b:a0:06:2e:55:78:c2:25:9a:2f:2b:64:f8:ea:
         dd:53:09:48:82:c4:da:89:ba:61:9c:26:d1:46:4a:71:b2:e9:
         d6:ed:d0:6e:b2:c8:0d:c5:10:6e:75:70:4c:43:61:66:3b:c6:
         c9:ae:62:a6:22:5b:a3:8d:22:f1:1c:a8:fd:96:b9:38:79:77:
         88:a7:63:4f:41:33:52:bb:5a:a1:ac:7d:eb:fe:f5:26:24:42:
         04:16:04:71:43:51:0c:23:5e:45:0e:12:26:71:f1:14:ab:13:
         c2:53:a6:a7:a3:c1:ba:a6:b2:e2:ce:1f:b6:e6:d7:5a:d9:c9:
         9b:b6:8e:d9:05:6e:1d:a6:af:7b:81:7d:82:65:3e:cc:83:1e:
         89:b2:7c:a1:7d:5e:4e:70:cb:ec:c3:a5:6f:be:e5:04:7b:b0:
         76:9e:d6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 12:19:09 2026 by rpki-client