Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/AS215085.asa
File:                     AS215085.asa (raw, json)
Hash identifier:          7a341G7Gffj4oyeRnUz7yyrxEMobRVGoAA9D3EAfXXU=
Subject key identifier:   A1:4B:26:C0:19:99:40:08:65:76:41:9C:2D:73:57:1A:3D:31:30:2E
Certificate issuer:       /CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
Certificate serial:       2EC951F11B9395CFF1237B184E3FA6DE77B24B3D
Authority key identifier: DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/AS215085.asa
Signing time:             Sat 28 Mar 2026 10:22:51 +0000
ASPA not before:          Sat 28 Mar 2026 10:17:51 +0000
ASPA not after:           Sat 27 Mar 2027 10:22:51 +0000
Customer ASID:            215085
Providers:                AS: 35133
                          AS: 42093
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 Apr 2026 06:48:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:c9:51:f1:1b:93:95:cf:f1:23:7b:18:4e:3f:a6:de:77:b2:4b:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
        Validity
            Not Before: Mar 28 10:17:51 2026 GMT
            Not After : Mar 27 10:22:51 2027 GMT
        Subject: CN=A14B26C0199940086576419C2D73571A3D31302E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:49:31:0a:fc:89:2b:e2:de:6d:e9:66:62:b3:
                    13:bf:0b:39:17:12:a4:e4:1a:4c:d4:99:ac:98:10:
                    1f:3f:1b:d6:bd:a8:f5:d6:3e:ee:09:84:8f:df:aa:
                    74:fd:69:75:12:ed:8e:5a:66:0f:55:a2:b7:9d:98:
                    10:ad:6c:e2:58:db:13:5b:6b:7c:ac:be:6c:04:52:
                    25:b8:56:7a:17:d3:18:e2:65:10:f5:89:40:ff:f4:
                    2f:f4:b0:58:31:a7:86:29:bd:ec:e1:25:12:11:bf:
                    28:de:e4:34:5b:09:87:98:2d:b1:9f:ab:aa:e7:77:
                    fe:5a:4f:d3:8b:f6:f2:d3:79:7c:8b:05:dd:cd:21:
                    e7:fc:44:27:43:a3:d1:86:4e:9a:e0:b7:d4:5c:64:
                    6e:86:ce:dc:6a:37:60:90:5a:87:fd:69:9c:43:50:
                    7d:f5:cf:e5:81:d2:d1:0a:2f:33:d6:f5:ae:d4:75:
                    25:2d:17:c4:0a:95:bb:d6:15:37:e8:76:12:86:4e:
                    12:99:46:69:f4:5c:74:44:b3:49:48:31:31:cf:b6:
                    49:4c:7f:cf:0f:cf:48:89:de:a6:b4:bf:d5:71:c2:
                    2f:c0:25:c7:28:3b:d4:1a:73:ae:07:39:f5:8d:4e:
                    00:cd:f8:ba:a4:63:23:63:fb:11:42:21:d5:d6:ca:
                    1e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:4B:26:C0:19:99:40:08:65:76:41:9C:2D:73:57:1A:3D:31:30:2E
            X509v3 Authority Key Identifier:
                keyid:DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/AS215085.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215085

    Signature Algorithm: sha256WithRSAEncryption
         71:40:8f:75:b7:a5:6f:70:00:a5:ed:c0:a5:70:7e:f4:40:f4:
         50:9c:68:c9:62:df:8d:20:0b:f5:ce:44:20:ca:ce:d0:23:70:
         31:6c:3f:5c:12:6d:c0:02:6d:45:a8:42:ae:30:0e:96:9b:91:
         52:03:35:7f:58:12:58:55:35:63:f6:6e:c1:67:5b:75:d4:8c:
         c6:e0:ba:55:fa:95:be:72:28:03:fa:a8:34:a7:cd:5c:eb:c8:
         9b:d3:18:0c:a3:be:14:bc:41:fc:95:9c:cc:d9:61:20:cf:80:
         00:ea:d3:b3:54:a4:48:f8:c0:f1:0a:bb:fb:98:ac:6f:1e:06:
         63:c7:67:b8:7a:ca:ac:8e:13:3e:22:c5:82:71:fb:ff:5a:c9:
         0f:23:45:97:31:a5:66:97:c6:33:c3:60:ba:64:11:2d:02:46:
         fe:da:5f:7d:36:bb:8e:20:22:03:4e:7f:72:34:9f:4d:f6:9c:
         fc:0c:9c:e1:41:67:11:4e:f0:9d:54:0c:68:93:1d:7f:8a:a6:
         5b:08:84:d5:97:fc:23:01:29:fc:b0:e8:93:f9:89:42:7e:9f:
         12:ed:cd:5a:88:7a:13:5f:44:e7:83:fc:c8:37:72:c0:fd:9b:
         8f:6b:01:d1:d3:70:30:02:fc:c0:1f:82:fb:7a:4f:85:73:b8:
         0c:d3:56:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 11:25:44 2026 by rpki-client