Autonomous System Provider Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/5/AS218471.asa
File:                     AS218471.asa (raw, json)
Hash identifier:          oEDVrJWRjNCWnuVa3DCWgxOo031mLKM8MZDGrgMmg0w=
Subject key identifier:   55:1E:59:3A:6F:FA:87:EF:22:C7:8E:77:08:7A:FC:06:70:0B:1A:CE
Certificate issuer:       /CN=d7a27fab9d4b7e5bd86345e7126c919875482e04
Certificate serial:       3AFA6501C69F445EEF99191681E984E64415AB28
Authority key identifier: D7:A2:7F:AB:9D:4B:7E:5B:D8:63:45:E7:12:6C:91:98:75:48:2E:04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/16J_q51LflvYY0XnEmyRmHVILgQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/5/AS218471.asa
Signing time:             Sun 11 Oct 2026 05:17:00 +0000
ASPA not before:          Sun 11 Oct 2026 05:12:00 +0000
ASPA not after:           Sun 10 Oct 2027 05:17:00 +0000
Customer ASID:            218471
Providers:                AS: 6939
                          AS: 11967
                          AS: 20473
                          AS: 201398
                          AS: 204464
                          AS: 205941
                          AS: 212895
                          AS: 215030
                          AS: 215120
                          AS: 215828
                          AS: 218832
                          AS: 218904
                          AS: 219157
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/5/D7A27FAB9D4B7E5BD86345E7126C919875482E04.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/5/D7A27FAB9D4B7E5BD86345E7126C919875482E04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/16J_q51LflvYY0XnEmyRmHVILgQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 20:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:fa:65:01:c6:9f:44:5e:ef:99:19:16:81:e9:84:e6:44:15:ab:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7a27fab9d4b7e5bd86345e7126c919875482e04
        Validity
            Not Before: Oct 11 05:12:00 2026 GMT
            Not After : Oct 10 05:17:00 2027 GMT
        Subject: CN=551E593A6FFA87EF22C78E77087AFC06700B1ACE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:88:2f:9d:b3:e2:ab:13:dd:79:1f:87:49:d3:
                    8c:05:04:a0:fc:e1:9c:2c:8a:d4:4d:ac:05:c5:97:
                    9d:af:7a:e2:2b:fc:3c:17:0c:fb:50:a5:2f:d0:2d:
                    a3:5d:e3:a3:19:f7:ba:d2:2e:90:aa:ad:64:c8:bf:
                    e2:cb:ac:0c:48:90:e7:60:9f:b3:a5:43:65:89:c4:
                    f6:c7:17:4a:64:34:cf:33:4a:ab:0a:18:5e:1d:e6:
                    d6:5d:d8:07:4c:eb:8f:bd:ec:65:a2:6d:1c:39:3f:
                    a4:8d:2d:96:96:f9:f4:30:af:e9:4f:28:d9:b9:df:
                    a4:a0:1b:e2:2e:fe:d2:4a:aa:c8:ee:d3:a8:ad:8a:
                    e2:ff:ca:f9:71:10:b1:2d:91:69:59:8b:88:60:7b:
                    ff:c7:a2:81:f6:b8:08:b1:a5:89:95:67:29:41:2d:
                    72:e1:e8:b3:dd:e3:3e:f2:ea:2f:02:22:1d:d7:04:
                    28:64:4d:2e:e4:26:16:21:83:c2:b9:94:f5:27:c4:
                    e6:6f:18:19:20:3c:6a:0d:6b:8f:ab:9c:e3:0a:e0:
                    55:98:bc:32:e9:92:86:28:f4:dc:2b:47:ce:ac:f2:
                    1d:95:dd:3f:7d:47:b5:1c:60:a0:00:99:56:27:b2:
                    1e:52:f7:b6:8a:26:68:aa:48:58:5b:db:cc:9d:a5:
                    d7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:1E:59:3A:6F:FA:87:EF:22:C7:8E:77:08:7A:FC:06:70:0B:1A:CE
            X509v3 Authority Key Identifier:
                keyid:D7:A2:7F:AB:9D:4B:7E:5B:D8:63:45:E7:12:6C:91:98:75:48:2E:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/5/D7A27FAB9D4B7E5BD86345E7126C919875482E04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/16J_q51LflvYY0XnEmyRmHVILgQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/5/AS218471.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  218471

    Signature Algorithm: sha256WithRSAEncryption
         18:e5:bb:82:49:bf:48:e4:2d:75:9d:99:a6:f7:4e:2b:20:9b:
         f7:cb:ef:7d:c8:94:a5:37:9d:6b:9c:9d:e5:69:51:74:1c:76:
         bc:17:ee:64:e1:73:d4:fb:5d:0c:93:3b:67:c7:71:9c:c4:73:
         71:7e:2b:7c:1a:be:5d:e8:e9:35:7f:b4:b6:aa:de:3f:b7:e5:
         3c:72:ec:4d:25:08:0c:03:65:a5:f5:4b:c4:9f:dc:d0:95:08:
         77:57:fd:de:2f:f1:84:aa:63:52:6f:82:7a:83:3a:b8:85:4f:
         2e:07:de:bc:7c:87:bf:99:b7:ce:db:8a:40:e0:5e:eb:67:d9:
         c6:02:13:b9:36:71:89:f0:55:f6:86:0b:df:70:d3:70:ea:c6:
         23:1b:d5:0d:dd:3e:af:0b:fe:26:ad:81:4a:1f:c1:a8:1e:6c:
         c5:d4:b0:a1:22:cf:bf:98:72:80:ba:bd:08:03:a3:93:47:dd:
         8e:c9:35:66:74:4f:86:01:ff:38:1a:45:55:de:e9:5f:43:10:
         4a:28:7c:88:66:38:c2:dc:d4:59:d7:91:23:71:d1:50:e9:aa:
         cb:7b:f8:8d:b6:d8:81:2b:17:6e:b8:b2:a8:a1:3c:8e:cc:a7:
         25:9d:41:9f:d7:53:33:cd:03:11:46:23:ec:1e:10:70:b3:49:
         e9:29:68:0f
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIUOvplAcafRF7vmRkWgemE5kQVqygwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDdhMjdmYWI5ZDRiN2U1YmQ4NjM0NWU3MTI2YzkxOTg3
NTQ4MmUwNDAeFw0yNjEwMTEwNTEyMDBaFw0yNzEwMTAwNTE3MDBaMDMxMTAvBgNV
BAMTKDU1MUU1OTNBNkZGQTg3RUYyMkM3OEU3NzA4N0FGQzA2NzAwQjFBQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRiC+ds+KrE915H4dJ04wFBKD8
4ZwsitRNrAXFl52veuIr/DwXDPtQpS/QLaNd46MZ97rSLpCqrWTIv+LLrAxIkOdg
n7OlQ2WJxPbHF0pkNM8zSqsKGF4d5tZd2AdM64+97GWibRw5P6SNLZaW+fQwr+lP
KNm536SgG+Iu/tJKqsju06itiuL/yvlxELEtkWlZi4hge//HooH2uAixpYmVZylB
LXLh6LPd4z7y6i8CIh3XBChkTS7kJhYhg8K5lPUnxOZvGBkgPGoNa4+rnOMK4FWY
vDLpkoYo9NwrR86s8h2V3T99R7UcYKAAmVYnsh5S97aKJmiqSFhb28ydpddBAgMB
AAGjggIFMIICATAdBgNVHQ4EFgQUVR5ZOm/6h+8ix453CHr8BnALGs4wHwYDVR0j
BBgwFoAU16J/q51LflvYY0XnEmyRmHVILgQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvM2NiZmFkOTYtNzk0Ny00ZTQ5LWFjZTEtOGJmODk5OTNi
ZDQyLzUvRDdBMjdGQUI5RDRCN0U1QkQ4NjM0NUU3MTI2QzkxOTg3NTQ4MkUwNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE2Sl9xNTFMZmx2WVkwWG5FbXlSbUhW
SUxnUS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzNjYmZhZDk2LTc5NDct
NGU0OS1hY2UxLThiZjg5OTkzYmQ0Mi81L0FTMjE4NDcxLmFzYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNVZzANBgkq
hkiG9w0BAQsFAAOCAQEAGOW7gkm/SOQtdZ2ZpvdOKyCb98vvfciUpTeda5yd5WlR
dBx2vBfuZOFz1PtdDJM7Z8dxnMRzcX4rfBq+XejpNX+0tqreP7flPHLsTSUIDANl
pfVLxJ/c0JUId1f93i/xhKpjUm+CeoM6uIVPLgfevHyHv5m3ztuKQOBe62fZxgIT
uTZxifBV9oYL33DTcOrGIxvVDd0+rwv+Jq2BSh/BqB5sxdSwoSLPv5hygLq9CAOj
k0fdjsk1ZnRPhgH/OBpFVd7pX0MQSih8iGY4wtzUWdeRI3HRUOmqy3v4jbbYgSsX
briyqKE8jsynJZ1Bn9dTM80DEUYj7B4QcLNJ6SloDw==
-----END CERTIFICATE-----
Generated at Sun Oct 25 03:16:44 2026 by rpki-client