Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/AS215849.asa
File:                     AS215849.asa (raw, json)
Hash identifier:          QZI6Yvoi4hUBSRXS5p8Ju6CY1eYmF0fNOYB66ntflGk=
Subject key identifier:   80:C0:42:EA:A3:1A:35:F5:EC:98:B5:1A:D0:50:AE:49:55:13:C7:5E
Certificate issuer:       /CN=7d7059638411e3231e759e74a813bf9376209e77
Certificate serial:       093E71B6548B44A9D77C9CE7A4191A38DB6B4BD3
Authority key identifier: 7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/AS215849.asa
Signing time:             Tue 14 Jul 2026 11:44:12 +0000
ASPA not before:          Tue 14 Jul 2026 11:39:12 +0000
ASPA not after:           Tue 13 Jul 2027 11:44:12 +0000
Customer ASID:            215849
Providers:                AS: 204464
                          AS: 215375
                          AS: 215828
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 05:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:3e:71:b6:54:8b:44:a9:d7:7c:9c:e7:a4:19:1a:38:db:6b:4b:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d7059638411e3231e759e74a813bf9376209e77
        Validity
            Not Before: Jul 14 11:39:12 2026 GMT
            Not After : Jul 13 11:44:12 2027 GMT
        Subject: CN=80C042EAA31A35F5EC98B51AD050AE495513C75E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ac:67:d9:90:19:78:b5:e1:ae:56:fc:33:74:
                    78:e5:0e:2b:a4:b8:d2:38:76:54:4d:a7:02:c1:08:
                    2d:93:b2:9f:46:2c:6b:b3:ee:10:54:d5:8e:ed:8d:
                    ad:3c:33:6b:a2:48:cf:66:7c:67:01:53:15:22:a4:
                    50:08:3d:6e:49:4c:4f:63:97:78:41:0b:2b:73:ea:
                    9a:b7:8c:76:0c:ca:01:81:4e:0b:db:e0:57:00:a3:
                    e9:d1:7f:4e:fc:e9:f0:bd:e4:e1:08:1d:b6:3b:84:
                    e3:96:1c:82:0f:4a:ff:0a:fa:75:d8:a8:9a:62:c4:
                    c3:da:ef:da:bd:4d:11:58:ea:b1:35:4c:54:39:c0:
                    b3:fa:39:95:13:91:35:23:2a:60:a5:cc:01:44:e7:
                    b5:ba:49:6a:9b:61:23:cd:2e:97:cb:1f:26:b2:72:
                    6f:9c:90:bf:e0:31:43:e9:a8:f2:26:42:b7:d2:c7:
                    43:92:46:0c:78:34:61:94:da:39:17:7d:c1:39:0f:
                    52:b7:6c:4b:23:19:83:11:77:74:bf:8f:2a:f5:b4:
                    05:e9:31:e1:d1:aa:45:a7:66:18:09:0c:c9:71:50:
                    d0:97:5f:b2:07:08:a1:56:b7:32:19:31:92:0d:fe:
                    2b:cd:66:e9:70:21:13:99:7d:1b:14:eb:1a:7d:ad:
                    b6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C0:42:EA:A3:1A:35:F5:EC:98:B5:1A:D0:50:AE:49:55:13:C7:5E
            X509v3 Authority Key Identifier:
                keyid:7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/AS215849.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215849

    Signature Algorithm: sha256WithRSAEncryption
         57:b5:62:d2:b3:46:33:c6:67:b1:22:38:99:9b:b7:75:1c:4d:
         9b:cd:31:41:30:36:54:a4:06:58:ec:44:c6:f5:36:96:58:c2:
         e6:9d:46:a1:16:5f:30:41:20:3a:94:58:d4:15:3d:72:7f:3d:
         13:df:8d:fc:1d:8a:71:a1:52:e1:b4:d3:51:d5:b0:33:bd:6b:
         bc:e7:23:44:c9:1a:a4:e0:7d:76:3d:38:17:54:38:f6:61:d5:
         d5:0e:2b:cc:fa:d1:05:3b:c3:e4:4c:6d:70:2a:52:72:95:ea:
         eb:e2:d3:e6:ad:f2:3a:46:66:5f:bb:20:91:b7:11:98:3f:70:
         56:19:a5:70:e3:0f:80:ae:02:d3:aa:d2:53:dd:07:f6:c4:1a:
         ac:7f:1f:9d:8f:f9:10:a2:ee:eb:b6:49:fc:27:42:45:10:d8:
         ac:05:ae:8d:60:22:d8:8f:1a:cd:ec:55:bf:77:8b:c9:90:5e:
         e4:5b:fa:ce:40:cb:2c:0c:57:dd:3d:1d:f9:e1:92:44:a3:20:
         2b:cf:ea:d0:9d:60:d3:86:f2:52:80:c9:f5:08:8e:72:ec:27:
         49:ff:f4:3b:03:39:a3:c4:7c:d0:53:e7:32:f5:b6:1f:b7:2f:
         0a:33:6c:9e:8d:34:e2:c9:cd:93:c0:8b:89:59:a2:ac:95:17:
         3c:fe:85:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:16:13 2026 by rpki-client