Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS214720.asa
File:                     AS214720.asa (raw, json)
Hash identifier:          e9vKYbc+X+ktSFT5HoUK94Krz/2fYFzWzjENWDvFH3M=
Subject key identifier:   DA:34:43:74:AE:2B:2F:80:B3:B1:07:02:18:0B:54:11:5C:90:75:38
Certificate issuer:       /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial:       3E4861ADB810D82E85D158094625B186F794BEA2
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS214720.asa
Signing time:             Tue 02 Jun 2026 12:18:29 +0000
ASPA not before:          Tue 02 Jun 2026 12:13:29 +0000
ASPA not after:           Tue 01 Jun 2027 12:18:29 +0000
Customer ASID:            214720
Providers:                AS: 40929
                          AS: 44324
                          AS: 53808
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 10:05:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:48:61:ad:b8:10:d8:2e:85:d1:58:09:46:25:b1:86:f7:94:be:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
        Validity
            Not Before: Jun  2 12:13:29 2026 GMT
            Not After : Jun  1 12:18:29 2027 GMT
        Subject: CN=DA344374AE2B2F80B3B10702180B54115C907538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e9:1d:e9:70:2b:34:f6:08:aa:2d:03:24:36:
                    99:d8:a2:e5:0e:bc:26:49:09:b2:74:28:44:5d:8c:
                    a7:e7:29:11:6c:46:f2:e0:df:4b:6d:8f:ae:b7:be:
                    a4:4f:5b:71:fa:44:d3:96:4b:d0:ab:a2:7e:c7:92:
                    68:d6:b1:da:9a:2f:9a:5d:a0:0d:75:09:5c:c0:cc:
                    f9:c3:10:06:f2:6b:9d:63:27:88:29:57:ae:37:ab:
                    a3:23:c5:31:7e:b1:b0:c0:5e:57:1a:91:8f:e1:ca:
                    f9:df:bf:29:7e:52:f2:33:b3:99:68:50:af:7f:83:
                    ba:8c:70:81:34:08:73:e4:8e:ef:d6:d6:25:1a:e5:
                    f5:40:23:73:51:96:43:a2:db:46:a8:23:5c:84:26:
                    e6:cf:d9:83:05:bd:d0:d7:5a:2e:63:f8:27:2a:c7:
                    11:cf:3e:e9:55:52:d4:39:b7:4d:f0:36:2c:c4:27:
                    a1:a0:1d:fe:87:d5:69:16:01:ae:ca:66:66:ee:f5:
                    1c:5f:a3:e7:92:84:d4:3a:16:ab:f0:a0:a0:fa:4a:
                    77:78:00:55:4a:ce:0e:8a:52:e8:99:26:e8:32:3f:
                    21:0d:9a:08:02:3c:f6:1f:b2:b0:32:35:0d:5b:33:
                    f7:0f:cf:11:d9:b7:67:f8:56:6b:ef:c1:ec:2e:cb:
                    97:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:34:43:74:AE:2B:2F:80:B3:B1:07:02:18:0B:54:11:5C:90:75:38
            X509v3 Authority Key Identifier:
                keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS214720.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214720

    Signature Algorithm: sha256WithRSAEncryption
         2e:66:35:fc:35:ca:9d:85:44:7b:e2:d5:2f:0e:f9:c2:61:f6:
         e3:cf:37:fe:f7:ce:c5:a7:ad:42:ae:82:76:07:88:d3:c6:63:
         8f:18:2e:14:0c:77:93:58:de:70:64:a2:5a:f7:f8:ce:f6:52:
         24:8e:0d:27:87:31:8e:ca:99:ec:ff:08:f1:06:6b:48:8a:7d:
         7d:14:4a:47:39:bf:58:41:58:ce:14:72:44:92:70:8e:7f:8b:
         9e:ed:85:f4:9d:4b:aa:10:45:96:0c:e0:53:d6:96:44:75:b6:
         16:05:e1:d3:00:e2:e2:a6:f0:c8:69:66:99:6c:c7:7a:03:96:
         64:fd:f0:3d:00:08:1e:5d:05:ec:a7:74:ad:5e:b1:5a:d6:be:
         61:78:24:b4:82:3b:f3:19:27:3f:2f:f7:f5:f1:e3:bc:f9:75:
         15:a5:28:45:db:ab:02:db:13:02:df:49:c5:cc:ab:55:e2:b6:
         7c:57:28:7f:e7:4b:73:d4:8c:0b:a2:42:13:e6:8e:9a:81:17:
         cd:cf:0c:a7:f2:75:d0:80:b6:9d:74:84:32:77:d1:44:a7:50:
         73:61:ae:fc:8a:df:78:4d:12:61:e8:77:ee:22:35:d7:75:65:
         67:78:1f:bd:43:08:5b:11:7e:84:7d:7a:a7:2b:fc:2a:2d:b5:
         78:c9:60:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:06:28 2026 by rpki-client