Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/AS215685.asa
File:                     AS215685.asa (raw, json)
Hash identifier:          w4KwhUrCEWEbAZ5XQsaxlfF0DuiwIqmvA5FzmwAgvBA=
Subject key identifier:   E2:8A:C5:B0:DF:1B:84:93:59:3C:65:30:87:57:60:62:3C:EF:70:25
Certificate issuer:       /CN=391f20f26aa6d63598ff3025cddbdb4b9c9ab67d
Certificate serial:       06C8683A62898165EDFCB4D76542E86328777A56
Authority key identifier: 39:1F:20:F2:6A:A6:D6:35:98:FF:30:25:CD:DB:DB:4B:9C:9A:B6:7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OR8g8mqm1jWY_zAlzdvbS5yatn0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/AS215685.asa
Signing time:             Mon 03 Aug 2026 15:44:12 +0000
ASPA not before:          Mon 03 Aug 2026 15:39:12 +0000
ASPA not after:           Mon 02 Aug 2027 15:44:12 +0000
Customer ASID:            215685
Providers:                AS: 1299
                          AS: 5405
                          AS: 6939
                          AS: 34927
                          AS: 52025
                          AS: 62255
                          AS: 207252
                          AS: 214757
                          AS: 215828
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OR8g8mqm1jWY_zAlzdvbS5yatn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 16:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:c8:68:3a:62:89:81:65:ed:fc:b4:d7:65:42:e8:63:28:77:7a:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391f20f26aa6d63598ff3025cddbdb4b9c9ab67d
        Validity
            Not Before: Aug  3 15:39:12 2026 GMT
            Not After : Aug  2 15:44:12 2027 GMT
        Subject: CN=E28AC5B0DF1B8493593C6530875760623CEF7025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:58:5a:64:19:17:47:dc:bd:95:9c:40:da:73:
                    57:52:7d:a1:3b:14:1a:53:7c:65:8e:ad:db:5b:74:
                    ed:38:c3:54:bf:8f:96:72:92:22:c3:10:17:37:27:
                    e2:a4:cd:8e:82:8a:41:f4:6a:0b:0f:31:ca:0d:f2:
                    42:30:09:52:7c:b8:9e:91:f1:f9:ba:f8:fa:44:20:
                    c5:b0:60:62:38:e2:3f:7b:85:c5:4d:85:d9:97:a3:
                    58:3e:0e:28:e1:b8:72:a1:2a:4f:79:5a:2c:ea:eb:
                    d3:e5:96:19:ad:b2:44:35:00:c9:83:9b:fc:13:e7:
                    f0:2f:24:04:30:e6:41:d3:d6:9a:46:9c:83:0b:4a:
                    4b:0d:2f:8f:09:d7:68:26:3c:d2:f0:b7:c6:f7:08:
                    3e:0b:82:31:6f:b7:b1:a4:07:e3:ae:9c:51:d8:71:
                    ff:2c:34:28:f4:6e:8c:eb:42:df:23:56:42:8e:39:
                    e8:51:05:71:4c:2c:ee:41:be:b3:50:f9:ec:5f:d9:
                    77:15:6b:be:df:32:9d:44:70:42:3e:ad:6c:76:fc:
                    8c:1f:91:b9:cb:d8:db:d5:9b:3c:29:6c:8e:d9:26:
                    7c:0d:7e:64:ed:1d:56:0d:93:7d:59:3a:0c:a1:ad:
                    ba:a4:c4:90:1a:ac:86:3a:f8:f4:48:ca:c3:34:37:
                    fb:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:8A:C5:B0:DF:1B:84:93:59:3C:65:30:87:57:60:62:3C:EF:70:25
            X509v3 Authority Key Identifier:
                keyid:39:1F:20:F2:6A:A6:D6:35:98:FF:30:25:CD:DB:DB:4B:9C:9A:B6:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OR8g8mqm1jWY_zAlzdvbS5yatn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/AS215685.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215685

    Signature Algorithm: sha256WithRSAEncryption
         22:de:26:bd:40:19:e4:0f:32:73:37:45:c5:eb:04:ed:87:97:
         58:3b:41:c7:9a:81:f2:37:f1:db:6b:34:5d:21:7a:f2:98:c3:
         5e:d0:6a:46:e3:eb:ab:c2:7f:4a:59:f5:48:c2:1f:b2:f5:32:
         0a:a9:57:8f:e4:d7:95:67:1b:b0:be:59:af:64:ca:27:06:fd:
         0f:bb:82:c4:88:a3:5c:c3:04:ff:d9:1b:f2:16:6e:37:e9:f9:
         52:48:4b:bd:29:1e:6e:13:55:ad:d2:ea:ef:e3:a1:8d:3b:d8:
         fa:be:45:45:40:f7:ab:25:0f:70:31:9c:c3:60:3f:59:33:0b:
         44:1b:c7:04:e4:72:bf:a3:0d:9d:80:2a:2c:89:46:cb:57:7b:
         c5:b4:4f:bf:52:a0:78:8d:5e:f6:66:dc:f5:24:a8:46:ce:fc:
         fd:35:c2:9f:fb:33:ad:88:ad:ed:0d:c0:0a:34:a4:5d:ca:fb:
         8f:0e:dc:34:a9:88:ff:bb:15:bd:e4:d3:89:04:28:4e:57:a7:
         d8:70:80:5b:2f:5d:1d:9f:32:9f:bc:f3:97:83:e0:7a:99:50:
         19:05:49:91:88:5c:8b:f6:f4:7b:0d:e6:55:fe:aa:44:4b:04:
         8b:ac:62:d0:e5:92:60:38:5f:b3:ad:21:ca:22:b7:8d:54:cc:
         92:c9:f1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 23:07:01 2026 by rpki-client