Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40d66d4d-5cd4-4337-8615-5b277f41d88f/0/AS206604.asa
File:                     AS206604.asa (raw, json)
Hash identifier:          p/zkPVwWcYVgSwM7nOTLWujUzSb+MTStj/KStVYsoaM=
Subject key identifier:   E0:54:92:55:81:95:7A:B5:A0:A8:15:BB:93:71:4D:48:2F:8A:3F:9D
Certificate issuer:       /CN=3301e959dd39845a0173c08066f1c898edff0b7f
Certificate serial:       4EEE0ED856074E74363D91FE0263D8DBE5CB98D4
Authority key identifier: 33:01:E9:59:DD:39:84:5A:01:73:C0:80:66:F1:C8:98:ED:FF:0B:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MwHpWd05hFoBc8CAZvHImO3_C38.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/40d66d4d-5cd4-4337-8615-5b277f41d88f/0/AS206604.asa
Signing time:             Mon 15 Sep 2025 10:05:29 +0000
ASPA not before:          Mon 15 Sep 2025 10:00:29 +0000
ASPA not after:           Mon 14 Sep 2026 10:05:29 +0000
Customer ASID:            206604
Providers:                AS: 11967
                          AS: 34927
                          AS: 60326
                          AS: 205941
                          AS: 209533
                          AS: 212895
                          AS: 213413
                          AS: 214757
                          AS: 214809
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/40d66d4d-5cd4-4337-8615-5b277f41d88f/0/3301E959DD39845A0173C08066F1C898EDFF0B7F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/40d66d4d-5cd4-4337-8615-5b277f41d88f/0/3301E959DD39845A0173C08066F1C898EDFF0B7F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MwHpWd05hFoBc8CAZvHImO3_C38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Sep 2025 11:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ee:0e:d8:56:07:4e:74:36:3d:91:fe:02:63:d8:db:e5:cb:98:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3301e959dd39845a0173c08066f1c898edff0b7f
        Validity
            Not Before: Sep 15 10:00:29 2025 GMT
            Not After : Sep 14 10:05:29 2026 GMT
        Subject: CN=E054925581957AB5A0A815BB93714D482F8A3F9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ad:a6:c4:c1:73:bb:e3:fa:11:c9:b1:50:3e:
                    8e:8c:14:60:5c:7d:0e:e7:29:1f:7b:ee:9f:19:cd:
                    e8:83:96:0e:9f:5c:5d:89:fc:ae:7e:18:c9:16:3a:
                    81:42:72:10:7e:4d:9a:db:84:1a:ff:1c:b6:cb:48:
                    ac:af:9d:6d:1d:95:8c:53:c4:03:6b:ec:6d:33:e3:
                    df:3f:59:75:d2:5c:75:db:53:5a:17:00:d8:02:0c:
                    11:14:3e:ea:2a:04:dd:7a:ff:bd:f3:b6:94:88:a1:
                    28:a0:70:b4:68:e2:fa:ee:5c:0b:b9:ac:28:9c:bb:
                    86:a4:74:c7:c2:ec:31:2f:24:24:8f:a6:2e:70:c3:
                    95:c1:10:25:06:88:a8:1c:c0:c6:ad:f6:4c:05:ca:
                    ca:ce:c6:2b:2d:bd:6d:6b:ce:89:cb:2a:93:9c:71:
                    64:f3:3b:21:c7:9c:d4:d5:44:09:b3:4b:12:94:76:
                    fb:69:e3:87:0c:e6:4b:e8:fc:8d:f0:3b:4f:30:bc:
                    fb:a2:81:c1:21:af:8e:35:e4:34:65:22:28:4d:7d:
                    cf:8f:9f:af:91:a0:ca:61:a7:b2:80:d3:26:87:20:
                    a0:b3:06:8d:42:47:5a:33:9d:51:f0:47:26:b8:73:
                    e0:ba:cd:23:31:7b:3f:d0:41:90:67:5d:51:78:c1:
                    6d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:54:92:55:81:95:7A:B5:A0:A8:15:BB:93:71:4D:48:2F:8A:3F:9D
            X509v3 Authority Key Identifier:
                keyid:33:01:E9:59:DD:39:84:5A:01:73:C0:80:66:F1:C8:98:ED:FF:0B:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/40d66d4d-5cd4-4337-8615-5b277f41d88f/0/3301E959DD39845A0173C08066F1C898EDFF0B7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MwHpWd05hFoBc8CAZvHImO3_C38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40d66d4d-5cd4-4337-8615-5b277f41d88f/0/AS206604.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206604

    Signature Algorithm: sha256WithRSAEncryption
         b1:2a:89:ac:8b:88:01:b0:80:2d:87:5b:5f:50:2c:fc:64:74:
         be:07:36:f9:2b:18:9d:42:fd:2f:4b:ed:50:b2:d8:c3:dd:50:
         74:8e:d6:87:df:55:5f:99:7c:30:65:a3:a4:90:d7:a5:cd:88:
         28:44:3f:cd:a1:e1:96:74:cc:be:2e:8b:02:a2:07:03:10:74:
         70:70:5a:42:0a:03:d5:87:6a:ce:79:e5:5f:50:25:4a:03:d3:
         53:9c:d6:29:78:c9:24:e2:b9:f2:20:33:b7:84:cb:f3:cf:2d:
         27:16:87:d1:b3:81:04:e9:e0:e6:51:fd:93:8e:f6:4e:42:e0:
         56:81:0a:2c:92:4e:3b:86:33:66:64:67:eb:9c:8f:48:e9:d7:
         e6:74:64:2e:76:6e:57:3d:bd:a4:96:a9:e0:b8:fd:0b:87:de:
         ae:99:94:5c:f2:36:72:fd:7f:68:d6:21:0c:18:9f:5c:4d:e4:
         b4:69:8c:a0:71:11:37:7e:a0:79:4c:37:84:46:b6:53:17:39:
         e1:04:bd:86:4b:0b:7a:ad:8d:5c:4a:b2:6f:f3:96:be:b8:ca:
         1f:92:62:e8:6e:56:d5:69:b2:7b:38:fd:8b:01:6d:1a:c1:30:
         60:dc:84:a6:ab:95:f5:85:a2:7c:4d:26:bb:ee:e7:c2:7f:01:
         d4:ae:23:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 18:03:48 2025 by rpki-client