Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/AS202939.asa
File:                     AS202939.asa (raw, json)
Hash identifier:          Wh7u6Tu0+paX+Mifjikwoj4EuHAk8qVqWT/0ZP4zyUc=
Subject key identifier:   4E:D9:23:4D:8B:B1:60:6D:F4:0F:B1:76:2B:C7:C4:00:80:34:CB:01
Certificate issuer:       /CN=40f02fb7dfe9ac800a1b1b693709c2f03c5ed98b
Certificate serial:       1E7CCA5E0F7D6CA4A8DC7511E8F8396ADD0BBB6E
Authority key identifier: 40:F0:2F:B7:DF:E9:AC:80:0A:1B:1B:69:37:09:C2:F0:3C:5E:D9:8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/AS202939.asa
Signing time:             Thu 05 Mar 2026 09:27:13 +0000
ASPA not before:          Thu 05 Mar 2026 09:22:13 +0000
ASPA not after:           Thu 04 Mar 2027 09:27:13 +0000
Customer ASID:            202939
Providers:                AS: 6939
                          AS: 7720
                          AS: 14447
                          AS: 17433
                          AS: 31898
                          AS: 34927
                          AS: 41051
                          AS: 44324
                          AS: 62246
                          AS: 209533
                          AS: 211509
                          AS: 212895
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Mar 2026 17:15:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:7c:ca:5e:0f:7d:6c:a4:a8:dc:75:11:e8:f8:39:6a:dd:0b:bb:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f02fb7dfe9ac800a1b1b693709c2f03c5ed98b
        Validity
            Not Before: Mar  5 09:22:13 2026 GMT
            Not After : Mar  4 09:27:13 2027 GMT
        Subject: CN=4ED9234D8BB1606DF40FB1762BC7C4008034CB01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:62:bc:a6:ce:3e:cb:64:75:fa:13:ba:cd:d1:
                    42:99:e0:1b:9c:ef:4c:2b:03:82:a0:a3:93:a4:17:
                    22:b2:7f:d3:2a:73:9f:b7:07:79:02:6c:e2:2b:2f:
                    8d:81:9c:90:f0:d7:d1:43:6b:c7:20:37:09:22:5b:
                    4e:1c:1e:4e:ab:21:b8:ca:f1:d5:2c:08:d6:eb:c3:
                    16:db:09:9f:a2:01:00:de:16:b5:3e:5b:c8:9b:56:
                    ee:86:ca:5f:f4:75:ab:7c:cb:f1:57:7a:22:b9:82:
                    bf:10:98:4e:c7:95:89:18:e5:73:6d:20:e4:67:a3:
                    1a:91:7d:ff:ab:10:a9:1b:52:35:be:eb:b3:69:e0:
                    18:2d:06:29:cf:4b:70:75:a6:b6:d2:8a:d2:e5:04:
                    22:b7:b1:c2:e5:3b:c6:8f:90:21:86:a1:82:d0:33:
                    1b:27:64:ab:67:55:ce:5a:26:0b:24:72:7e:bb:3e:
                    c5:c6:14:3c:42:22:7c:b8:31:01:2c:88:2a:77:97:
                    e8:6a:06:0c:1c:96:47:95:1e:5d:74:ed:35:50:8e:
                    88:ba:76:a9:30:fd:9e:9e:9b:49:dd:82:cd:eb:06:
                    52:03:f2:a7:75:6a:b3:4c:04:0e:80:85:06:9a:0a:
                    34:81:9f:ad:0e:c4:0c:01:3f:3c:69:a6:ea:c9:36:
                    d8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D9:23:4D:8B:B1:60:6D:F4:0F:B1:76:2B:C7:C4:00:80:34:CB:01
            X509v3 Authority Key Identifier:
                keyid:40:F0:2F:B7:DF:E9:AC:80:0A:1B:1B:69:37:09:C2:F0:3C:5E:D9:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/AS202939.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202939

    Signature Algorithm: sha256WithRSAEncryption
         68:4a:ae:cc:fd:1e:67:55:2c:db:e0:88:06:c4:93:f8:95:fa:
         5b:a0:5a:b3:2d:e0:d0:d5:d3:7d:57:37:85:69:f3:d9:4f:28:
         e3:6a:5c:70:39:53:b1:e7:6b:77:e5:67:3c:a3:b0:5f:bc:53:
         9a:72:cd:43:13:4a:45:34:30:eb:6a:a3:2d:14:46:53:5f:94:
         d5:3d:7e:a6:b5:c5:43:c7:e3:54:bc:7c:90:e5:78:cf:a4:c4:
         2b:64:99:54:4b:fe:d2:b1:30:c7:62:ed:2b:5d:92:5a:20:10:
         ed:e0:76:8f:27:6e:c7:ee:9d:8f:bf:5d:0e:46:3d:87:c8:15:
         c2:03:d6:bd:bf:a3:ad:13:f5:a0:73:72:8a:10:2d:35:01:23:
         26:8b:83:6a:42:0a:83:ae:0d:f2:bf:70:ce:2a:8d:ec:ff:11:
         b5:17:bf:90:86:15:09:13:c9:50:d5:c4:37:42:2d:36:da:81:
         bd:11:19:25:24:a2:9e:03:d4:d7:90:2f:b0:8b:c0:22:ef:06:
         02:4e:45:a8:a1:d5:97:f2:86:ef:ff:3e:41:08:13:60:95:74:
         02:66:ec:5e:2e:18:86:e6:c4:86:4c:e0:89:d0:65:41:0e:87:
         c6:5a:f2:88:87:4c:20:f2:b8:43:54:e9:c0:ee:45:53:69:43:
         90:50:43:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 07:05:21 2026 by rpki-client