Autonomous System Provider Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/AS215085.asa
File:                     AS215085.asa (raw, json)
Hash identifier:          H9lDTGKcl0CBBPreEFyuQCs9bvqxSyfGxBz82Rjt5hI=
Subject key identifier:   AF:35:B8:CA:22:0E:90:69:43:1A:C1:EE:E2:83:78:CD:47:84:C5:89
Certificate issuer:       /CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
Certificate serial:       07ACC3A4BBDE82C23E509F013165728E4A58ECA8
Authority key identifier: DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/AS215085.asa
Signing time:             Sun 30 Aug 2026 11:44:30 +0000
ASPA not before:          Sun 30 Aug 2026 11:39:30 +0000
ASPA not after:           Sun 29 Aug 2027 11:44:30 +0000
Customer ASID:            215085
Providers:                AS: 6830
                          AS: 34927
                          AS: 35133
                          AS: 42093
                          AS: 203291
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 16:16:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:ac:c3:a4:bb:de:82:c2:3e:50:9f:01:31:65:72:8e:4a:58:ec:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
        Validity
            Not Before: Aug 30 11:39:30 2026 GMT
            Not After : Aug 29 11:44:30 2027 GMT
        Subject: CN=AF35B8CA220E9069431AC1EEE28378CD4784C589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:be:cf:f1:f6:14:18:f1:21:5e:ec:b3:42:6c:
                    69:ac:3c:2b:fb:7c:bc:3b:26:51:bb:13:34:75:27:
                    02:b9:10:e3:bc:59:4a:ec:0b:4c:e0:dd:83:73:cd:
                    aa:95:96:ce:d5:20:16:4f:ea:9e:7a:c1:31:54:b8:
                    64:2b:80:2a:01:b7:cb:e4:f8:24:43:9c:7b:5b:1b:
                    c7:da:63:54:c4:51:df:7b:d6:09:dc:ae:55:51:73:
                    45:0f:8c:94:ab:7a:9e:8c:e3:1e:69:10:eb:76:ba:
                    43:63:d5:28:93:34:b4:53:69:dd:89:bf:91:2b:23:
                    b6:09:04:aa:de:a0:9c:78:36:2e:a9:00:a7:b4:fd:
                    00:25:6b:73:8a:4a:06:8b:4b:3f:ca:23:22:97:a8:
                    87:dd:87:39:2b:9f:a8:5e:10:9a:12:a1:ef:8c:da:
                    88:cf:0d:36:db:e8:a8:fd:c7:8c:f6:41:11:f0:83:
                    56:6f:48:7a:85:3e:df:3b:df:c9:46:71:46:27:b5:
                    d2:d0:88:2a:ed:44:76:3d:fa:a2:7a:5e:60:ce:d0:
                    cc:6e:75:1d:83:ce:92:eb:81:9e:ff:17:20:76:1a:
                    f7:7c:77:cb:cb:ed:08:50:b1:a8:19:2b:1d:4b:b5:
                    e2:cb:12:14:4f:8e:55:34:db:5f:73:ee:5d:aa:e3:
                    6c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:35:B8:CA:22:0E:90:69:43:1A:C1:EE:E2:83:78:CD:47:84:C5:89
            X509v3 Authority Key Identifier:
                keyid:DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/AS215085.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215085

    Signature Algorithm: sha256WithRSAEncryption
         10:ad:e3:68:ae:df:c3:e3:02:d5:22:06:61:a6:bd:52:a0:00:
         ba:40:96:9f:96:0d:b1:c5:32:5d:be:f1:25:0d:fb:61:3f:83:
         8e:df:88:f0:7a:59:e8:8c:7c:2c:e9:6f:02:a3:24:fe:ed:4f:
         c9:81:ea:02:93:28:0f:db:ee:4d:7d:a6:91:e9:98:0d:73:55:
         b3:31:18:a1:72:77:82:b7:fa:13:df:4a:8e:0e:7b:45:58:b3:
         30:ea:fe:fc:80:4d:56:a4:15:cc:52:fe:8a:1f:13:1d:d1:8e:
         4b:85:64:32:d9:89:9f:58:32:1c:90:19:9f:e9:8a:39:7a:a0:
         b1:4b:6f:0d:9b:05:d7:b3:1d:cc:40:32:92:7e:42:54:f0:0a:
         ca:68:30:af:b0:ce:47:12:9c:d1:3d:8f:ce:f9:c2:ec:a2:98:
         40:9d:01:02:2a:97:2b:c6:24:db:f6:a9:bb:de:3d:6d:79:cd:
         50:d1:ad:39:20:f2:85:9c:22:50:39:90:26:39:01:42:e4:71:
         bd:39:b4:cf:70:79:00:dc:57:a5:f0:c2:a2:73:f1:63:12:0f:
         ca:62:67:4a:7b:ab:d9:d9:48:82:16:45:fd:06:96:4b:f9:28:
         28:34:6c:9b:c5:df:4e:c1:e9:2a:1e:fb:b3:7b:cd:f0:27:19:
         2e:7a:b7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 04:02:52 2026 by rpki-client