Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/AS214809.asa
File:                     AS214809.asa (raw, json)
Hash identifier:          twDSgOmLlkZzcvx0mDRRIi71WRXYCfTsSol/H2pUsYI=
Subject key identifier:   75:DA:9B:BB:BE:A5:B9:63:79:C1:7F:62:15:B3:05:DF:AC:50:30:E2
Certificate issuer:       /CN=9b1e886308f3bca322bd4eecea88267713c5ceac
Certificate serial:       1A04ACAE3D930ED634D98D7F50A00E6E244A344B
Authority key identifier: 9B:1E:88:63:08:F3:BC:A3:22:BD:4E:EC:EA:88:26:77:13:C5:CE:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/AS214809.asa
Signing time:             Sat 06 Sep 2025 22:22:00 +0000
ASPA not before:          Sat 06 Sep 2025 22:17:00 +0000
ASPA not after:           Sat 05 Sep 2026 22:22:00 +0000
Customer ASID:            214809
Providers:                AS: 174
                          AS: 6204
                          AS: 6939
                          AS: 35133
                          AS: 50917
                          AS: 64289
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Sep 2025 11:38:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:04:ac:ae:3d:93:0e:d6:34:d9:8d:7f:50:a0:0e:6e:24:4a:34:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b1e886308f3bca322bd4eecea88267713c5ceac
        Validity
            Not Before: Sep  6 22:17:00 2025 GMT
            Not After : Sep  5 22:22:00 2026 GMT
        Subject: CN=75DA9BBBBEA5B96379C17F6215B305DFAC5030E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:32:2d:0d:1b:78:ec:65:30:5e:2d:dd:49:a1:
                    43:52:6b:4d:07:cd:2f:dc:f9:d3:8d:ee:85:95:09:
                    07:48:06:09:c0:2c:07:ae:b2:2f:8d:95:4a:84:6d:
                    33:03:72:9a:68:4d:a7:d4:5e:b0:68:45:46:ac:f9:
                    9f:d8:d5:b3:b2:1c:4d:a9:04:07:71:20:2e:00:84:
                    c0:0a:78:c1:a4:4b:93:85:60:67:2b:ec:c7:15:22:
                    ab:a7:c6:c5:92:dd:02:50:2b:9b:9e:eb:42:22:a1:
                    c7:85:bd:16:0b:d4:16:1d:6a:8e:66:99:96:14:2f:
                    bf:1a:a4:0e:c9:68:45:12:06:24:95:7d:e5:2d:8e:
                    cb:13:aa:d4:5a:05:22:6c:5b:ac:72:20:0f:7a:dc:
                    54:53:64:10:13:fd:9d:a0:30:e6:7e:eb:3c:5e:7b:
                    ff:f4:d9:1e:41:6c:4e:1b:9f:9c:9d:61:0a:0d:ef:
                    ae:21:6e:a6:36:8d:24:f8:f6:e2:83:7f:da:fb:79:
                    5f:8c:eb:b6:fd:fb:9c:1c:3a:10:96:49:4a:19:52:
                    29:78:86:01:df:aa:4c:ca:37:30:45:dc:2d:a6:60:
                    77:58:47:5d:c3:49:af:86:e9:1c:95:72:81:98:ea:
                    4a:8e:12:a0:f3:d2:65:3e:36:46:d6:9a:ea:8f:f5:
                    01:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:DA:9B:BB:BE:A5:B9:63:79:C1:7F:62:15:B3:05:DF:AC:50:30:E2
            X509v3 Authority Key Identifier:
                keyid:9B:1E:88:63:08:F3:BC:A3:22:BD:4E:EC:EA:88:26:77:13:C5:CE:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/AS214809.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214809

    Signature Algorithm: sha256WithRSAEncryption
         7a:a1:40:f7:fe:7d:91:56:fd:6f:89:b9:80:c1:6f:e6:4a:16:
         63:3c:bc:ad:9e:e6:6e:9f:81:d8:6a:1f:1f:21:5d:44:64:18:
         96:3c:b0:76:09:8a:c2:18:44:6b:ba:9b:50:f2:da:30:6e:ee:
         5f:84:ec:a2:44:13:78:fa:5e:6c:a6:58:4b:34:9e:13:04:7b:
         81:9a:53:f7:95:cd:56:c1:d5:11:05:04:71:e3:a0:ee:6a:6b:
         e1:0b:73:c3:fe:50:2e:01:1b:a4:00:f8:b5:0b:9b:28:9e:6a:
         47:2a:05:6e:4e:f7:ff:16:73:b2:d0:8d:a2:8e:b3:03:37:ce:
         44:d1:36:37:40:d7:04:0a:0c:52:1b:ab:c5:a1:f6:4a:3a:62:
         85:71:52:14:60:21:6c:44:6d:24:8e:84:5e:33:db:d7:56:a8:
         69:24:0a:40:d0:55:3c:c7:2b:14:fd:17:7b:ed:15:e0:e5:9b:
         58:e9:8e:38:87:45:45:3e:64:aa:37:ef:f3:12:a2:0f:c4:0d:
         3c:ad:cb:88:4c:d9:38:04:43:73:77:c7:69:73:b5:76:06:b7:
         59:1e:41:dd:0a:0c:6c:21:b7:56:b5:3a:d0:ba:f4:bc:d9:82:
         96:bd:a3:72:da:29:b9:0a:4f:41:cf:aa:85:c3:a7:13:c6:bb:
         d2:9a:91:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 18:03:49 2025 by rpki-client