Autonomous System Provider Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/2/AS218904.asa
File:                     AS218904.asa (raw, json)
Hash identifier:          DggW9I8u0x3M7b7xubWLUXEg9zgRHrBZtwW5sdzEoIg=
Subject key identifier:   9A:15:01:18:D6:99:4E:26:91:5E:73:17:F3:A3:AC:BE:9D:88:9F:DE
Certificate issuer:       /CN=db1e7c4215d9a1eea81f0b1299f6760d27562610
Certificate serial:       13A4B6DED407FC138B0C772E3B623FCE4DA970A3
Authority key identifier: DB:1E:7C:42:15:D9:A1:EE:A8:1F:0B:12:99:F6:76:0D:27:56:26:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2x58QhXZoe6oHwsSmfZ2DSdWJhA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/2/AS218904.asa
Signing time:             Sun 11 Oct 2026 05:18:12 +0000
ASPA not before:          Sun 11 Oct 2026 05:13:12 +0000
ASPA not after:           Sun 10 Oct 2027 05:18:12 +0000
Customer ASID:            218904
Providers:                AS: 6939
                          AS: 11967
                          AS: 20473
                          AS: 201398
                          AS: 204464
                          AS: 205941
                          AS: 212895
                          AS: 215030
                          AS: 215120
                          AS: 215828
                          AS: 218832
                          AS: 219157
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/2/DB1E7C4215D9A1EEA81F0B1299F6760D27562610.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/2/DB1E7C4215D9A1EEA81F0B1299F6760D27562610.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2x58QhXZoe6oHwsSmfZ2DSdWJhA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 14:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:a4:b6:de:d4:07:fc:13:8b:0c:77:2e:3b:62:3f:ce:4d:a9:70:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db1e7c4215d9a1eea81f0b1299f6760d27562610
        Validity
            Not Before: Oct 11 05:13:12 2026 GMT
            Not After : Oct 10 05:18:12 2027 GMT
        Subject: CN=9A150118D6994E26915E7317F3A3ACBE9D889FDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:72:19:28:4c:bc:37:9a:3a:f7:bd:15:6e:77:
                    03:a3:98:25:34:63:85:51:35:20:80:f9:e1:df:89:
                    d1:a6:71:e9:87:78:12:4b:1a:16:53:ae:6c:a0:e7:
                    58:04:15:19:f3:34:3d:76:b5:70:3d:db:f8:de:bb:
                    e1:b6:24:3c:f4:6b:75:7f:39:4e:7b:87:a2:01:df:
                    dd:39:57:c7:e5:cf:87:36:cd:c3:3a:c8:04:4b:e7:
                    27:58:23:93:2c:07:c0:64:2a:2c:22:a9:ec:79:68:
                    f2:f6:8d:d5:16:3d:d5:78:88:62:45:19:7d:b4:bc:
                    72:a5:2b:28:0d:4e:c5:83:d2:e1:80:ca:b9:1d:42:
                    8f:91:92:64:4d:c3:fd:de:39:04:42:99:95:ac:45:
                    d8:a9:bc:62:e1:4e:1a:cf:ec:a2:a6:3a:48:73:6c:
                    0f:3c:c5:de:a3:77:d8:39:2f:8c:f2:5d:cb:a5:62:
                    2a:bc:76:64:09:20:a3:ec:32:f7:51:4b:db:91:40:
                    04:68:80:d1:17:38:66:4d:eb:c7:fb:41:0b:79:1d:
                    22:72:74:c7:37:a0:73:b8:c0:99:6b:55:cd:3d:06:
                    23:02:a7:7d:67:a3:88:a2:47:2d:7f:99:91:c9:8c:
                    e0:ef:81:92:51:c8:88:7c:49:7b:87:b3:32:d9:61:
                    43:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:15:01:18:D6:99:4E:26:91:5E:73:17:F3:A3:AC:BE:9D:88:9F:DE
            X509v3 Authority Key Identifier:
                keyid:DB:1E:7C:42:15:D9:A1:EE:A8:1F:0B:12:99:F6:76:0D:27:56:26:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/2/DB1E7C4215D9A1EEA81F0B1299F6760D27562610.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x58QhXZoe6oHwsSmfZ2DSdWJhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/2/AS218904.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  218904

    Signature Algorithm: sha256WithRSAEncryption
         b4:2e:77:42:fa:ad:b9:69:36:66:b9:79:e7:69:a9:10:24:da:
         84:a2:e6:58:03:ba:bc:27:4c:20:23:05:ab:43:da:19:45:03:
         06:5e:fc:6e:94:cd:46:ab:15:be:d5:d0:60:1c:f9:f3:9d:ad:
         1d:c7:85:28:78:1a:aa:bc:3b:ef:60:90:3c:91:b0:bf:5d:35:
         97:64:10:c0:89:45:32:07:09:3f:ff:6f:5d:e2:50:a2:50:8f:
         6d:41:d0:fe:0c:aa:12:f3:b3:33:4a:0f:6f:69:ad:48:b3:7a:
         88:61:d5:c0:b9:f2:88:af:a9:4a:0d:25:a1:fc:8e:5d:5d:c7:
         3a:a9:b3:1b:08:66:6d:44:c1:8a:3f:be:4f:a3:31:7b:6e:a9:
         f2:68:9e:68:09:d6:e4:f3:18:16:e4:73:14:76:5a:7d:18:64:
         da:d4:d0:26:3e:90:39:28:70:25:2c:f5:4c:f4:c1:12:27:58:
         1b:7f:11:9a:d8:42:6c:6f:af:3d:2f:31:d5:b2:8f:a2:bf:b6:
         89:65:a3:b7:e0:9d:70:c8:d0:94:09:11:63:7e:28:c4:31:d5:
         62:0f:59:90:b6:0d:42:b1:05:5e:22:c6:4e:89:2c:de:62:b5:
         b3:3b:9e:cf:79:0f:a1:9e:f9:0b:27:57:e7:47:e0:cf:3a:c0:
         cc:ab:04:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:35:51 2026 by rpki-client