Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/AS211575.asa
File:                     AS211575.asa (raw, json)
Hash identifier:          CGXB/lWUv/3ldNLhyv9C3Fi4+ChYG3HvGuuCwAM2wt4=
Subject key identifier:   E2:F6:05:98:7A:94:22:7D:3E:63:6F:DA:28:3E:61:19:86:A4:F1:4C
Certificate issuer:       /CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e
Certificate serial:       22C2FB4E2B90B8598E678199AADA907D9F268276
Authority key identifier: 38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/AS211575.asa
Signing time:             Sat 30 Aug 2025 07:23:59 +0000
ASPA not before:          Sat 30 Aug 2025 07:18:59 +0000
ASPA not after:           Sat 29 Aug 2026 07:23:59 +0000
Customer ASID:            211575
Providers:                AS: 6939
                          AS: 20473
                          AS: 44324
                          AS: 53808
                          AS: 198025
                          AS: 212895
                          AS: 213605
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 01 Sep 2025 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:c2:fb:4e:2b:90:b8:59:8e:67:81:99:aa:da:90:7d:9f:26:82:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e
        Validity
            Not Before: Aug 30 07:18:59 2025 GMT
            Not After : Aug 29 07:23:59 2026 GMT
        Subject: CN=E2F605987A94227D3E636FDA283E611986A4F14C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:55:74:31:8c:bd:c6:6c:11:2b:cc:74:85:93:
                    9c:7e:8e:63:7b:ef:e2:62:05:3c:e1:bf:42:63:4b:
                    f8:c9:af:54:09:be:77:c4:1a:38:2d:37:96:8f:2b:
                    3d:d8:9d:92:3d:57:18:9f:fd:a2:97:4a:9e:09:4b:
                    d7:7d:65:ec:e0:07:f5:ac:cc:a3:f4:e6:4a:aa:68:
                    28:86:55:77:a6:64:b4:ea:6f:f5:8a:16:cb:33:45:
                    50:aa:9f:35:49:43:7d:3c:35:28:30:75:72:4a:94:
                    c4:c3:10:b1:58:e8:34:f1:05:eb:81:43:05:df:c6:
                    57:cf:c6:fd:27:94:ba:47:d6:5e:79:e9:77:30:02:
                    23:ea:f3:2e:7a:7e:cf:5b:2b:d3:0c:51:89:f1:17:
                    42:29:22:73:85:b3:57:c6:8c:c4:e6:10:32:1f:29:
                    4f:d4:4e:19:ca:3a:ce:58:06:64:3b:ca:e9:31:21:
                    98:9e:b8:10:9e:12:1c:2f:e4:8f:6e:3d:d7:dc:ae:
                    2f:38:3d:be:31:38:e2:76:f7:c1:37:d0:b3:cc:f5:
                    45:0c:bf:6b:08:5f:c2:35:cf:70:0b:8c:93:cb:c6:
                    63:c2:1c:23:88:54:74:f2:94:cd:61:ed:de:1b:b9:
                    ca:a8:8a:54:94:0c:55:96:f3:f6:b4:cc:59:b3:a3:
                    2c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F6:05:98:7A:94:22:7D:3E:63:6F:DA:28:3E:61:19:86:A4:F1:4C
            X509v3 Authority Key Identifier:
                keyid:38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/AS211575.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211575

    Signature Algorithm: sha256WithRSAEncryption
         2f:7d:a3:4d:4f:76:cd:2d:75:46:36:18:24:46:9a:d3:14:a8:
         1e:4d:05:d5:ed:7f:70:83:5b:3d:0b:6f:f2:ec:8d:13:61:7f:
         5c:d7:82:ab:3b:ff:43:60:fa:b7:2e:61:50:3d:a3:43:12:04:
         cd:69:d3:25:2e:90:98:44:ed:64:cc:a8:42:98:c4:79:8c:25:
         7c:d4:15:36:d2:c5:37:84:ca:45:be:f8:e8:43:56:3b:34:67:
         87:da:0d:e2:c8:e3:4c:d9:29:73:04:18:6b:be:06:3b:8e:56:
         4d:fc:44:ab:e1:dc:e5:25:ef:37:f2:d5:6c:d5:a7:95:ef:de:
         d0:94:32:49:e3:53:72:68:6e:8c:54:30:1d:49:5c:5d:70:3d:
         9c:09:95:17:f6:34:ab:48:f9:a2:04:b4:b7:e3:d5:bc:e2:57:
         91:83:45:a0:f5:a1:51:e2:5e:3e:c4:40:0e:3b:3b:44:3a:ea:
         3a:8b:86:cf:44:21:43:db:8e:a5:eb:2e:31:d2:95:3e:e9:7e:
         17:5b:3a:72:8b:04:3d:e1:6f:e6:11:aa:4a:a6:aa:d4:e0:c8:
         2f:44:27:04:73:b5:9e:71:98:f0:80:d3:84:1b:31:71:89:97:
         35:71:04:8a:67:11:86:ec:8c:46:6c:c9:49:5b:86:12:65:cf:
         c1:89:82:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 31 13:14:28 2025 by rpki-client