Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/AS202301.asa
File:                     AS202301.asa (raw, json)
Hash identifier:          siRTvesU6WdTtpKDFLSJurV8GA1NYikKKo3zst2Ebk8=
Subject key identifier:   85:41:70:90:B5:1A:C7:A6:E4:1E:EC:56:69:36:1B:41:CD:46:C1:59
Certificate issuer:       /CN=42e508fba8960f48071b119accbf57bdbf3a8057
Certificate serial:       6193598C8F3BC7858318AD18B1F369F793EF4FA6
Authority key identifier: 42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/AS202301.asa
Signing time:             Fri 22 May 2026 04:41:14 +0000
ASPA not before:          Fri 22 May 2026 04:36:14 +0000
ASPA not after:           Fri 21 May 2027 04:41:14 +0000
Customer ASID:            202301
Providers:                AS: 26954
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 17:49:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:93:59:8c:8f:3b:c7:85:83:18:ad:18:b1:f3:69:f7:93:ef:4f:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42e508fba8960f48071b119accbf57bdbf3a8057
        Validity
            Not Before: May 22 04:36:14 2026 GMT
            Not After : May 21 04:41:14 2027 GMT
        Subject: CN=85417090B51AC7A6E41EEC5669361B41CD46C159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:71:39:cf:9a:e1:73:fd:b0:ab:9b:73:95:bb:
                    45:1c:03:00:c5:95:9d:9a:61:05:27:a7:61:10:6c:
                    90:34:4f:8e:9d:09:85:94:2a:45:24:48:36:23:a2:
                    e0:14:2b:e0:f9:51:20:fa:2c:33:87:65:e4:38:b9:
                    49:25:d4:c3:7d:b4:80:67:5e:25:62:47:17:69:51:
                    1e:93:ab:ca:98:f9:07:cb:66:57:9b:17:ea:a3:1d:
                    58:ed:65:a0:b3:a9:79:c1:0a:66:c2:c1:41:8c:8e:
                    12:c2:a1:2c:39:85:c3:74:5d:ca:b6:0b:1f:c0:9b:
                    3e:c7:c5:dd:61:30:9b:87:39:96:c8:0e:8f:08:76:
                    19:1d:bc:f4:08:b9:d7:8b:b8:ca:8a:58:fd:6d:48:
                    42:40:c8:d6:1a:b4:2a:cc:ac:3d:3b:47:82:1d:29:
                    c7:04:83:bc:5b:32:17:2e:01:5f:b4:4c:a4:3d:ca:
                    da:bf:2b:a2:ce:29:1c:83:5a:41:c9:62:25:68:f3:
                    b5:ee:47:b4:05:97:b8:7b:70:f9:ca:6c:8c:35:bf:
                    e1:46:bc:d2:60:c0:28:24:d1:cb:f9:d9:9f:1a:b7:
                    f8:ae:22:0c:14:e0:31:56:ff:12:88:09:72:88:2a:
                    0b:71:c8:17:e2:36:b9:6f:ab:29:a5:52:12:fb:e8:
                    21:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:41:70:90:B5:1A:C7:A6:E4:1E:EC:56:69:36:1B:41:CD:46:C1:59
            X509v3 Authority Key Identifier:
                keyid:42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/AS202301.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202301

    Signature Algorithm: sha256WithRSAEncryption
         13:21:91:70:c9:d9:54:75:28:72:e2:da:f4:54:ab:40:5a:62:
         0a:17:ec:b4:51:1a:84:c1:eb:15:7d:21:f0:7c:6b:7c:d6:fb:
         8c:e4:26:d5:ca:15:49:f6:5b:2c:d4:3e:70:e9:d6:84:50:a9:
         fb:ed:00:08:e1:c5:09:80:b0:d3:a6:e0:02:dc:f2:3a:5e:ea:
         79:92:f3:3d:de:72:66:ea:fb:59:a2:05:9e:32:18:ae:3c:69:
         9c:7d:90:56:d9:a4:60:af:7f:10:6f:7a:12:bf:90:88:0c:23:
         97:d3:be:1b:d6:57:af:63:e1:48:bf:05:f6:26:a3:c0:bb:36:
         e7:6f:80:e5:e6:f1:87:c4:58:41:e1:57:1e:88:6b:fe:10:ba:
         69:b3:e7:95:1e:85:51:7e:04:dc:9a:42:74:9f:95:f1:c3:7f:
         52:49:4c:0a:55:ad:4d:87:28:84:af:39:68:6a:27:0b:b2:98:
         c8:75:fc:f4:10:e8:38:51:fb:c6:eb:e5:7c:62:97:3f:76:d1:
         d1:db:f2:12:07:b2:36:b7:fb:3b:5b:df:54:74:5f:3b:e5:a6:
         7d:52:6c:55:12:18:bf:5a:4b:90:05:33:72:6f:6d:ca:fa:b0:
         b8:3d:d0:3c:19:db:93:36:c3:f0:44:17:b1:44:18:b2:52:23:
         35:e5:83:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 02:27:40 2026 by rpki-client