Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/AS214420.asa
File:                     AS214420.asa (raw, json)
Hash identifier:          SKqjlhpYP9KMOWA5T/76smdcLt7PL/G11UEsEyYsQFM=
Subject key identifier:   40:28:9A:B2:AF:7E:DD:C6:7D:9C:F9:54:90:48:C1:C1:AF:62:92:B5
Certificate issuer:       /CN=ec342add81633658330112d2bf8b1de3ee19f684
Certificate serial:       30477CC07EDBC5A81B0031DF0E405C2F91CD5E23
Authority key identifier: EC:34:2A:DD:81:63:36:58:33:01:12:D2:BF:8B:1D:E3:EE:19:F6:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7DQq3YFjNlgzARLSv4sd4-4Z9oQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/AS214420.asa
Signing time:             Tue 23 Jun 2026 11:41:53 +0000
ASPA not before:          Tue 23 Jun 2026 11:36:53 +0000
ASPA not after:           Tue 22 Jun 2027 11:41:53 +0000
Customer ASID:            214420
Providers:                AS: 835
                          AS: 6939
                          AS: 34927
                          AS: 47272
                          AS: 52025
                          AS: 204464
                          AS: 215638
                          AS: 398999
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7DQq3YFjNlgzARLSv4sd4-4Z9oQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Jun 2026 18:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:47:7c:c0:7e:db:c5:a8:1b:00:31:df:0e:40:5c:2f:91:cd:5e:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec342add81633658330112d2bf8b1de3ee19f684
        Validity
            Not Before: Jun 23 11:36:53 2026 GMT
            Not After : Jun 22 11:41:53 2027 GMT
        Subject: CN=40289AB2AF7EDDC67D9CF9549048C1C1AF6292B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e5:ec:65:bf:23:f1:41:7c:0b:29:ad:88:68:
                    98:03:0a:a2:c6:31:9a:99:6f:f7:52:1b:6a:b6:ca:
                    55:f9:8b:5d:05:af:32:6d:91:37:10:52:ed:38:5c:
                    86:2a:30:27:5c:7d:c3:19:af:0b:40:81:67:33:dc:
                    75:44:f3:ee:57:db:b0:37:88:29:4a:ed:2b:87:7e:
                    43:54:96:31:b5:ca:a2:02:bf:ff:a0:45:aa:38:93:
                    f3:77:14:11:df:59:b4:9e:b5:be:12:b7:a0:f7:cf:
                    14:a9:a6:15:5c:78:a7:e9:0b:50:79:16:13:67:a6:
                    c1:cb:20:d1:a4:9a:81:82:7a:c9:4a:22:f7:95:3d:
                    f1:b5:34:12:92:e2:39:90:e7:d2:51:a6:9d:39:be:
                    94:f7:6d:23:c3:81:48:a4:ba:f7:1a:58:cf:20:45:
                    db:13:9d:eb:07:25:72:80:2d:4d:a9:e2:65:12:a5:
                    97:f8:62:64:65:cf:b3:39:59:b1:d7:b1:1e:71:2a:
                    18:bf:ba:2c:23:3a:cb:d9:21:2b:40:7f:6a:fe:6d:
                    48:3e:13:51:18:52:61:d9:61:66:12:35:e6:e1:b8:
                    0f:bd:d8:ae:c1:c2:d0:7f:fd:e1:54:27:a1:86:1f:
                    40:a9:2e:3b:0a:fc:17:55:a2:09:9d:00:37:76:9c:
                    95:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:28:9A:B2:AF:7E:DD:C6:7D:9C:F9:54:90:48:C1:C1:AF:62:92:B5
            X509v3 Authority Key Identifier:
                keyid:EC:34:2A:DD:81:63:36:58:33:01:12:D2:BF:8B:1D:E3:EE:19:F6:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DQq3YFjNlgzARLSv4sd4-4Z9oQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/AS214420.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214420

    Signature Algorithm: sha256WithRSAEncryption
         60:21:07:0e:7f:72:cc:70:b7:d1:5d:74:8c:80:e4:e7:44:b3:
         a0:94:fc:22:e9:88:d1:c5:89:02:d1:6a:7f:29:9b:26:e7:bd:
         24:29:90:e1:8d:dd:5e:4f:3d:ee:82:e4:84:19:ae:71:48:90:
         f7:0d:16:5e:09:0d:31:68:18:73:35:37:18:28:4f:03:29:14:
         cf:9c:7d:35:11:9e:ae:99:30:80:66:12:a9:dd:e3:7a:c0:26:
         fb:ca:72:f0:52:b1:b2:18:38:73:25:41:53:6f:22:3f:91:d1:
         db:0e:b3:94:5f:98:2a:67:79:73:cc:f6:9a:1e:00:42:e1:ad:
         3d:77:15:bb:3b:2f:7d:4c:4f:f4:63:32:be:70:18:26:4d:ba:
         64:1d:67:a8:31:41:5c:03:e9:08:6f:85:b1:e0:d1:fd:40:b2:
         19:d3:e6:16:23:25:e2:9c:f2:d5:17:ee:82:ee:c9:bc:8e:94:
         29:26:06:91:dd:c2:3a:62:1d:62:08:92:c1:02:fe:8f:e7:dd:
         53:7c:b1:07:83:62:3e:bf:f1:32:cc:7d:76:46:1c:4f:34:91:
         ad:94:61:5b:04:7c:dc:df:50:e2:f4:c5:ec:3b:b1:30:82:3e:
         10:65:3e:d8:db:c0:35:90:b4:e2:ab:0d:5d:a3:f2:61:73:10:
         61:4a:11:5f
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIUMEd8wH7bxagbADHfDkBcL5HNXiMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWMzNDJhZGQ4MTYzMzY1ODMzMDExMmQyYmY4YjFkZTNl
ZTE5ZjY4NDAeFw0yNjA2MjMxMTM2NTNaFw0yNzA2MjIxMTQxNTNaMDMxMTAvBgNV
BAMTKDQwMjg5QUIyQUY3RUREQzY3RDlDRjk1NDkwNDhDMUMxQUY2MjkyQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM5exlvyPxQXwLKa2IaJgDCqLG
MZqZb/dSG2q2ylX5i10FrzJtkTcQUu04XIYqMCdcfcMZrwtAgWcz3HVE8+5X27A3
iClK7SuHfkNUljG1yqICv/+gRao4k/N3FBHfWbSetb4St6D3zxSpphVceKfpC1B5
FhNnpsHLINGkmoGCeslKIveVPfG1NBKS4jmQ59JRpp05vpT3bSPDgUikuvcaWM8g
RdsTnesHJXKALU2p4mUSpZf4YmRlz7M5WbHXsR5xKhi/uiwjOsvZIStAf2r+bUg+
E1EYUmHZYWYSNebhuA+92K7BwtB//eFUJ6GGH0CpLjsK/BdVogmdADd2nJU1AgMB
AAGjggIFMIICATAdBgNVHQ4EFgQUQCiasq9+3cZ9nPlUkEjBwa9ikrUwHwYDVR0j
BBgwFoAU7DQq3YFjNlgzARLSv4sd4+4Z9oQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzI3YjVlZjctZDEyMS00YWUyLWJhYjYtNDEwZDIwNTM0
OWI4LzAvRUMzNDJBREQ4MTYzMzY1ODMzMDExMkQyQkY4QjFERTNFRTE5RjY4NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdEUXEzWUZqTmxnekFSTFN2NHNkNC00
WjlvUS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcyN2I1ZWY3LWQxMjEt
NGFlMi1iYWI2LTQxMGQyMDUzNDliOC8wL0FTMjE0NDIwLmFzYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNFlDANBgkq
hkiG9w0BAQsFAAOCAQEAYCEHDn9yzHC30V10jIDk50SzoJT8IumI0cWJAtFqfymb
Jue9JCmQ4Y3dXk897oLkhBmucUiQ9w0WXgkNMWgYczU3GChPAykUz5x9NRGerpkw
gGYSqd3jesAm+8py8FKxshg4cyVBU28iP5HR2w6zlF+YKmd5c8z2mh4AQuGtPXcV
uzsvfUxP9GMyvnAYJk26ZB1nqDFBXAPpCG+FseDR/UCyGdPmFiMl4pzy1Rfugu7J
vI6UKSYGkd3COmIdYgiSwQL+j+fdU3yxB4NiPr/xMsx9dkYcTzSRrZRhWwR83N9Q
4vTF7DuxMII+EGU+2NvANZC04qsNXaPyYXMQYUoRXw==
-----END CERTIFICATE-----
Generated at Mon Jun 29 09:38:18 2026 by rpki-client