Autonomous System Provider Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/3/AS201398.asa
File:                     AS201398.asa (raw, json)
Hash identifier:          Nu5Mnm/LnAleljbcNN0oijd4fdc+m9S/aEoYCOXUXmI=
Subject key identifier:   C2:56:D2:F2:AF:A9:91:F5:1D:9E:9D:45:9B:20:BD:F3:2C:99:61:5E
Certificate issuer:       /CN=c09b9b6b6b65abe29d9f086b07c6de1f1ed8ceeb
Certificate serial:       1A9E5E676FC0294413C5980646793645F9E60DCE
Authority key identifier: C0:9B:9B:6B:6B:65:AB:E2:9D:9F:08:6B:07:C6:DE:1F:1E:D8:CE:EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wJuba2tlq-KdnwhrB8beHx7Yzus.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/3/AS201398.asa
Signing time:             Sun 06 Sep 2026 18:06:36 +0000
ASPA not before:          Sun 06 Sep 2026 18:01:36 +0000
ASPA not after:           Sun 05 Sep 2027 18:06:36 +0000
Customer ASID:            201398
Providers:                AS: 6939
                          AS: 34872
                          AS: 52025
                          AS: 212895
                          AS: 214757
                          AS: 215638
                          AS: 215828
                          AS: 219331
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/3/C09B9B6B6B65ABE29D9F086B07C6DE1F1ED8CEEB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/3/C09B9B6B6B65ABE29D9F086B07C6DE1F1ED8CEEB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wJuba2tlq-KdnwhrB8beHx7Yzus.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 14 Sep 2026 13:30:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:9e:5e:67:6f:c0:29:44:13:c5:98:06:46:79:36:45:f9:e6:0d:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c09b9b6b6b65abe29d9f086b07c6de1f1ed8ceeb
        Validity
            Not Before: Sep  6 18:01:36 2026 GMT
            Not After : Sep  5 18:06:36 2027 GMT
        Subject: CN=C256D2F2AFA991F51D9E9D459B20BDF32C99615E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:35:3a:ef:e2:df:66:54:0a:a7:3b:38:ea:93:
                    7a:71:75:48:8b:c1:5a:e6:2a:23:58:dc:ed:59:c1:
                    2c:68:49:6f:6e:d5:33:34:9b:e9:3c:88:b6:35:bd:
                    26:f9:19:6c:6b:83:6a:db:bb:08:46:c5:ce:0b:ff:
                    58:89:57:b7:dd:6f:04:a1:86:ce:54:40:1c:56:93:
                    d8:d6:ae:c7:64:0c:29:1b:02:d0:fe:9e:71:de:5f:
                    3c:2e:23:e0:6a:a7:b4:bc:9a:56:a2:da:f6:44:27:
                    db:dc:d6:0c:ed:84:be:3a:8b:b2:a4:3e:7b:83:10:
                    95:5e:f4:9d:6f:86:b8:c6:b4:68:16:0e:e2:f1:b2:
                    18:1d:7c:aa:d5:fb:69:e9:4b:ca:04:8b:90:e4:8f:
                    af:85:49:4a:88:fb:26:ad:10:60:75:43:ab:ec:d3:
                    fb:28:48:f4:60:6e:9f:a7:43:dc:9a:48:f3:cb:79:
                    44:00:6f:7b:d0:e8:8d:1e:4b:bd:6c:6e:9c:97:52:
                    a1:61:81:30:3d:0a:0a:21:c6:38:ce:73:23:f8:a0:
                    eb:4d:40:a2:13:ee:8b:81:96:d2:46:75:cb:3d:0c:
                    77:ff:b4:58:8f:1a:7d:11:fa:79:89:d7:06:ec:cf:
                    5e:f2:01:06:23:06:3b:b6:86:46:7a:d6:4c:51:62:
                    75:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:56:D2:F2:AF:A9:91:F5:1D:9E:9D:45:9B:20:BD:F3:2C:99:61:5E
            X509v3 Authority Key Identifier:
                keyid:C0:9B:9B:6B:6B:65:AB:E2:9D:9F:08:6B:07:C6:DE:1F:1E:D8:CE:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/3/C09B9B6B6B65ABE29D9F086B07C6DE1F1ED8CEEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJuba2tlq-KdnwhrB8beHx7Yzus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/3/AS201398.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201398

    Signature Algorithm: sha256WithRSAEncryption
         56:8c:f5:aa:65:e8:05:f8:49:ca:0f:8e:c0:37:f0:a7:03:2f:
         cc:e2:50:2a:72:f2:c7:03:cc:9f:10:a4:cb:53:11:4c:b3:22:
         85:9a:74:0f:bc:f7:72:de:25:c7:cd:bb:c4:40:72:a1:2b:50:
         62:70:9b:08:67:05:1a:64:27:3f:23:f8:d5:0d:0e:fe:14:e3:
         0b:91:41:af:f7:f9:28:04:53:16:5d:e9:c5:cb:27:95:3f:d0:
         bf:ce:42:fb:ed:49:3a:28:99:2f:ee:f3:4b:a5:80:06:a1:81:
         b2:c0:72:37:0c:cc:4a:0e:92:4d:08:81:5c:ad:f8:ab:3f:9c:
         1b:4b:81:29:83:39:67:a7:9d:e7:c2:b3:45:dd:01:55:91:a8:
         66:87:6e:8c:24:66:21:b9:5a:e9:b4:16:5f:58:93:ae:42:b7:
         7a:f9:3c:18:ab:ec:6d:b5:11:ae:99:99:be:17:cd:f1:63:55:
         45:32:15:a5:15:3e:f3:17:3a:39:e5:f4:06:ce:ba:e3:fa:78:
         b8:bf:04:1e:a6:91:0b:d1:5d:67:d1:44:1d:6c:71:f7:5e:5d:
         8b:9b:97:0c:13:b3:54:62:11:ad:81:af:ac:67:c0:1f:31:8e:
         d5:40:14:fd:df:33:0e:b3:2c:68:5a:b3:13:a1:3c:d8:f1:93:
         4f:02:fc:38
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIUGp5eZ2/AKUQTxZgGRnk2RfnmDc4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzA5YjliNmI2YjY1YWJlMjlkOWYwODZiMDdjNmRlMWYx
ZWQ4Y2VlYjAeFw0yNjA5MDYxODAxMzZaFw0yNzA5MDUxODA2MzZaMDMxMTAvBgNV
BAMTKEMyNTZEMkYyQUZBOTkxRjUxRDlFOUQ0NTlCMjBCREYzMkM5OTYxNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxNTrv4t9mVAqnOzjqk3pxdUiL
wVrmKiNY3O1ZwSxoSW9u1TM0m+k8iLY1vSb5GWxrg2rbuwhGxc4L/1iJV7fdbwSh
hs5UQBxWk9jWrsdkDCkbAtD+nnHeXzwuI+Bqp7S8mlai2vZEJ9vc1gzthL46i7Kk
PnuDEJVe9J1vhrjGtGgWDuLxshgdfKrV+2npS8oEi5Dkj6+FSUqI+yatEGB1Q6vs
0/soSPRgbp+nQ9yaSPPLeUQAb3vQ6I0eS71sbpyXUqFhgTA9CgohxjjOcyP4oOtN
QKIT7ouBltJGdcs9DHf/tFiPGn0R+nmJ1wbsz17yAQYjBju2hkZ61kxRYnXjAgMB
AAGjggIFMIICATAdBgNVHQ4EFgQUwlbS8q+pkfUdnp1FmyC98yyZYV4wHwYDVR0j
BBgwFoAUwJuba2tlq+KdnwhrB8beHx7YzuswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmNmZDlhMmMtODdmMS00OGE5LWI2ZWEtMjhhZDA5N2I3
NWQzLzMvQzA5QjlCNkI2QjY1QUJFMjlEOUYwODZCMDdDNkRFMUYxRUQ4Q0VFQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dKdWJhMnRscS1LZG53aHJCOGJlSHg3
WXp1cy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzZjZmQ5YTJjLTg3ZjEt
NDhhOS1iNmVhLTI4YWQwOTdiNzVkMy8zL0FTMjAxMzk4LmFzYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMStjANBgkq
hkiG9w0BAQsFAAOCAQEAVoz1qmXoBfhJyg+OwDfwpwMvzOJQKnLyxwPMnxCky1MR
TLMihZp0D7z3ct4lx827xEByoStQYnCbCGcFGmQnPyP41Q0O/hTjC5FBr/f5KART
Fl3pxcsnlT/Qv85C++1JOiiZL+7zS6WABqGBssByNwzMSg6STQiBXK34qz+cG0uB
KYM5Z6ed58KzRd0BVZGoZodujCRmIbla6bQWX1iTrkK3evk8GKvsbbURrpmZvhfN
8WNVRTIVpRU+8xc6OeX0Bs664/p4uL8EHqaRC9FdZ9FEHWxx915di5uXDBOzVGIR
rYGvrGfAHzGO1UAU/d8zDrMsaFqzE6E82PGTTwL8OA==
-----END CERTIFICATE-----
Generated at Sun Sep 13 23:57:21 2026 by rpki-client