Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/AS213900.asa
File:                     AS213900.asa (raw, json)
Hash identifier:          vZ4nFV2ZuxtxXZLEvZl+LEgTwQtkx6mKUShfFutxF0Q=
Subject key identifier:   F0:55:BA:EB:4C:3D:3D:B7:70:67:76:B8:11:A7:D0:91:7F:9F:D2:1B
Certificate issuer:       /CN=acb5dff8a45df5cdafa2a95c715f10c5fe5f91a3
Certificate serial:       55E4D49A9574DDC567728C098F0B51B5120721CB
Authority key identifier: AC:B5:DF:F8:A4:5D:F5:CD:AF:A2:A9:5C:71:5F:10:C5:FE:5F:91:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/AS213900.asa
Signing time:             Thu 09 Apr 2026 14:49:40 +0000
ASPA not before:          Thu 09 Apr 2026 14:44:40 +0000
ASPA not after:           Thu 08 Apr 2027 14:49:40 +0000
Customer ASID:            213900
Providers:                AS: 174
                          AS: 1239
                          AS: 206262
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 10 Apr 2026 16:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:e4:d4:9a:95:74:dd:c5:67:72:8c:09:8f:0b:51:b5:12:07:21:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acb5dff8a45df5cdafa2a95c715f10c5fe5f91a3
        Validity
            Not Before: Apr  9 14:44:40 2026 GMT
            Not After : Apr  8 14:49:40 2027 GMT
        Subject: CN=F055BAEB4C3D3DB7706776B811A7D0917F9FD21B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:39:be:94:96:1c:f5:55:93:96:8b:c9:8b:48:
                    8c:27:c0:5c:33:3c:2e:82:54:40:62:e5:fa:b4:89:
                    d5:d5:b8:59:73:f3:dd:ae:bb:0a:36:5f:ef:dd:b2:
                    72:d2:22:c8:f8:56:c1:f9:18:38:10:dd:7a:0b:eb:
                    84:b3:6f:7e:0d:1b:e1:db:25:3a:56:f4:a6:3b:67:
                    a1:1e:64:b9:27:88:2b:88:35:62:a5:ed:9f:f4:77:
                    a1:6b:6c:63:e7:96:0a:e4:60:09:de:70:db:87:67:
                    ad:29:d5:91:b1:ef:80:4b:06:22:e4:cf:b3:ee:a6:
                    25:e4:9e:bf:5c:77:a0:da:51:dd:d7:b3:44:2f:8b:
                    eb:11:37:9f:c5:ef:3c:fd:f4:74:64:c7:e6:32:18:
                    69:18:e8:cf:0b:d3:51:a9:06:9f:9f:e9:46:4d:54:
                    23:f7:1b:b2:85:2b:4b:08:9b:78:74:0d:40:f8:43:
                    28:93:a4:38:ef:fa:a9:27:7c:53:c5:1e:8e:f8:e4:
                    6d:8c:a2:bd:d7:f5:fa:bd:b8:8f:cb:36:a5:a8:36:
                    3a:a2:6d:a3:66:44:86:7a:a7:29:07:1d:f4:cd:f3:
                    5a:ef:25:c1:d4:9c:6c:ea:25:a4:6c:ab:5a:33:d0:
                    72:76:0a:61:b3:f2:f2:a5:9a:3b:02:13:90:f1:21:
                    bf:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:55:BA:EB:4C:3D:3D:B7:70:67:76:B8:11:A7:D0:91:7F:9F:D2:1B
            X509v3 Authority Key Identifier:
                keyid:AC:B5:DF:F8:A4:5D:F5:CD:AF:A2:A9:5C:71:5F:10:C5:FE:5F:91:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/AS213900.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213900

    Signature Algorithm: sha256WithRSAEncryption
         34:f9:bf:9f:e6:af:2c:6b:3e:e3:8c:ad:9e:57:91:25:0c:f7:
         8f:3f:85:82:3e:2d:e1:f4:ec:c2:a9:59:3c:f6:ae:0c:3b:e6:
         65:bb:f4:71:2e:53:19:4b:af:c0:4a:bc:a0:57:aa:39:4e:1f:
         25:7d:cf:11:03:64:db:62:4e:76:38:4f:05:17:e7:4b:72:07:
         5d:96:9a:94:68:b3:db:5a:ad:44:ac:38:6e:83:9c:e2:f6:54:
         63:de:58:69:fd:3d:a7:1c:f8:96:a5:c2:c1:b0:27:95:21:64:
         25:7b:26:a8:cf:89:11:d5:c4:45:a7:30:d6:5f:fb:dd:db:ee:
         1b:f0:91:9f:1b:3f:9b:38:1c:a6:af:b9:68:f7:b0:a0:ab:1a:
         0a:e3:27:0a:3f:ac:a3:46:ee:8a:d3:c0:ef:48:09:a9:0c:e3:
         f5:e2:05:93:a9:9e:bd:1d:03:20:c7:be:96:dc:78:3b:6a:a3:
         64:d0:cb:12:20:de:d0:8f:4b:be:df:25:79:2b:06:23:15:85:
         69:48:30:1a:85:0f:74:62:07:92:be:d6:13:3b:03:2c:a3:f0:
         5e:42:d1:28:da:6e:22:2b:54:cf:f5:fb:f8:f9:2d:c1:b4:b5:
         ae:e3:a2:ea:22:99:c0:51:cf:cb:cc:4a:49:1f:22:13:1a:5d:
         86:c0:3c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 10 01:34:56 2026 by rpki-client