Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/AS214955.asa
File:                     AS214955.asa (raw, json)
Hash identifier:          pJ7+xLkRqPDuQTZ4CjdQziRCbw0R4LvxfMvSG4sXOdg=
Subject key identifier:   3F:B8:10:66:67:11:8E:34:6E:6C:52:68:63:46:B2:8B:47:E7:87:5D
Certificate issuer:       /CN=ce964f98379f0320a7191e6d6788800535885928
Certificate serial:       3B88FC5F560ED4C9B1892799DF2EA87A6B81ADB5
Authority key identifier: CE:96:4F:98:37:9F:03:20:A7:19:1E:6D:67:88:80:05:35:88:59:28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/AS214955.asa
Signing time:             Mon 08 Sep 2025 04:41:01 +0000
ASPA not before:          Mon 08 Sep 2025 04:36:01 +0000
ASPA not after:           Mon 07 Sep 2026 04:41:01 +0000
Customer ASID:            214955
Providers:                AS: 20473
                          AS: 44324
                          AS: 53667
                          AS: 207529
                          AS: 213605
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Sep 2025 04:20:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:88:fc:5f:56:0e:d4:c9:b1:89:27:99:df:2e:a8:7a:6b:81:ad:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce964f98379f0320a7191e6d6788800535885928
        Validity
            Not Before: Sep  8 04:36:01 2025 GMT
            Not After : Sep  7 04:41:01 2026 GMT
        Subject: CN=3FB8106667118E346E6C52686346B28B47E7875D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:6f:1c:fe:ac:5e:63:e9:15:d3:48:6f:7b:7c:
                    7b:1e:eb:a7:29:75:aa:24:22:5c:d0:b6:02:8c:c7:
                    7d:02:db:75:f8:2a:f4:51:77:41:2a:5a:0c:00:d4:
                    a1:2b:c7:4b:84:10:6f:1a:ff:54:4e:43:14:e1:18:
                    8b:5a:59:c7:65:95:f8:a3:cb:38:4e:ba:bf:09:fe:
                    f4:a6:86:88:d4:e5:9e:f4:8f:8d:bd:d5:a4:c3:8b:
                    9e:1e:28:e4:51:bd:28:a7:42:52:cd:ff:2b:60:76:
                    a0:e9:04:28:d2:19:41:fd:5f:db:10:24:1e:67:eb:
                    ee:f3:19:47:9d:ad:03:ec:c6:8b:9c:e3:26:3c:40:
                    b2:11:c9:39:7a:9f:eb:0a:9d:17:bb:b4:6b:6d:0a:
                    b7:ed:2f:12:6d:57:61:85:55:67:22:c2:81:47:15:
                    22:0d:ab:28:8e:c8:47:1c:68:53:e2:94:3f:df:27:
                    2e:40:2d:24:aa:f6:5f:ec:a7:62:b5:db:97:48:08:
                    73:84:73:4a:a0:63:e8:c9:ed:50:f3:6e:21:a0:30:
                    2f:c7:be:88:1d:f8:90:a0:61:ae:ac:87:b7:0e:5d:
                    99:29:e0:d3:ba:05:0d:b4:97:22:d4:f9:1e:69:60:
                    54:02:00:e5:56:d3:fe:c7:8c:1d:09:0a:29:8a:6f:
                    0a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:B8:10:66:67:11:8E:34:6E:6C:52:68:63:46:B2:8B:47:E7:87:5D
            X509v3 Authority Key Identifier:
                keyid:CE:96:4F:98:37:9F:03:20:A7:19:1E:6D:67:88:80:05:35:88:59:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/AS214955.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214955

    Signature Algorithm: sha256WithRSAEncryption
         6a:81:de:84:93:b0:5e:e0:5f:f3:30:db:b0:d2:30:c6:47:d2:
         bc:6a:50:d4:9b:0b:b5:05:0f:84:cf:b5:b3:e5:07:5f:ba:9c:
         60:f3:73:56:ec:44:22:69:7a:85:13:5e:68:41:54:c2:4b:39:
         f2:c4:9f:aa:e2:bf:3d:39:90:0e:55:cc:c3:b6:72:e8:af:32:
         a8:c5:e9:e8:fc:32:d9:13:b4:98:5d:b0:ff:78:59:4d:e1:e7:
         d9:93:47:03:75:30:d6:fb:09:37:6c:60:dc:37:ba:a4:d4:3f:
         25:eb:c9:d7:25:e7:17:2c:d4:df:ea:1b:aa:14:cd:0d:42:e1:
         f1:a7:c7:39:09:b5:bc:6c:fa:69:65:3a:50:a1:9c:d2:78:9a:
         48:0a:24:eb:4b:82:7d:ff:cb:3f:f2:ee:f4:4d:2d:df:87:0e:
         6e:54:69:96:4a:b5:fa:e8:d4:34:01:88:0a:b2:11:ef:bc:71:
         2e:6c:29:bd:73:e4:16:e4:f2:68:a1:03:fe:43:34:43:4c:eb:
         c8:b4:cc:46:35:9c:40:2b:87:e2:6c:9e:f1:6d:ab:db:2a:f3:
         62:18:4c:92:19:bb:6e:e2:5c:a0:25:55:ad:ec:cb:64:14:86:
         3f:46:21:01:e4:13:f6:04:a6:96:f5:54:29:67:18:43:33:d9:
         e2:2e:7e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 18:03:51 2025 by rpki-client