Autonomous System Provider Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/0/AS214344.asa
File:                     AS214344.asa (raw, json)
Hash identifier:          MTG4483TnxhtVizAAx5mLe36e4zkVFntEMOSVMq07eU=
Subject key identifier:   99:03:D4:C3:E3:4A:DB:E2:E9:1D:7B:6A:33:93:40:06:4E:95:0A:14
Certificate issuer:       /CN=f7dd807e33980d7322171230874230c1db2a1a7f
Certificate serial:       7F231A7F25CF7813D4EF222F29622AB03356F5C1
Authority key identifier: F7:DD:80:7E:33:98:0D:73:22:17:12:30:87:42:30:C1:DB:2A:1A:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/992AfjOYDXMiFxIwh0IwwdsqGn8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/0/AS214344.asa
Signing time:             Wed 19 Aug 2026 12:16:59 +0000
ASPA not before:          Wed 19 Aug 2026 12:11:59 +0000
ASPA not after:           Wed 18 Aug 2027 12:16:59 +0000
Customer ASID:            214344
Providers:                AS: 6939
                          AS: 11967
                          AS: 33387
                          AS: 34927
                          AS: 40792
                          AS: 44324
                          AS: 47272
                          AS: 52025
                          AS: 63473
                          AS: 142064
                          AS: 152900
                          AS: 212895
                          AS: 216211
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/0/F7DD807E33980D7322171230874230C1DB2A1A7F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/0/F7DD807E33980D7322171230874230C1DB2A1A7F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/992AfjOYDXMiFxIwh0IwwdsqGn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:23:1a:7f:25:cf:78:13:d4:ef:22:2f:29:62:2a:b0:33:56:f5:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7dd807e33980d7322171230874230c1db2a1a7f
        Validity
            Not Before: Aug 19 12:11:59 2026 GMT
            Not After : Aug 18 12:16:59 2027 GMT
        Subject: CN=9903D4C3E34ADBE2E91D7B6A339340064E950A14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:2f:6c:7e:0f:c5:a1:e6:da:ab:c4:54:ef:f7:
                    d5:ca:37:8d:3b:6c:3e:60:c0:7a:d1:47:f9:c2:ed:
                    d4:b9:03:96:7e:49:39:98:ec:77:73:e7:81:74:a0:
                    6c:f7:f0:d0:f3:d8:56:f4:5d:67:a2:67:0c:ee:bb:
                    ae:3e:b9:10:32:d1:47:51:5a:21:4e:11:fe:51:b2:
                    c1:32:16:ff:c5:b5:39:ad:12:96:4f:d2:ea:63:67:
                    c1:64:22:52:7d:49:98:fa:c7:f8:e8:c3:81:ea:b2:
                    88:58:6b:34:c2:17:91:2e:29:e7:c7:ea:d1:ed:c2:
                    25:ff:21:2d:98:2b:90:52:07:9b:89:7f:3e:1a:e4:
                    79:44:be:11:27:10:fb:d9:94:1c:54:51:92:f4:4b:
                    83:b3:fa:d9:82:ad:af:ec:63:03:43:e9:e7:a4:b1:
                    3d:fd:bb:dd:4a:8e:bf:fb:e2:a7:ac:94:7c:d1:31:
                    0e:0a:2a:e5:57:a4:a4:9e:ba:cb:86:1c:b2:ac:ce:
                    f7:18:e4:55:64:05:a2:7e:79:24:51:ba:ab:47:db:
                    36:ef:b3:d9:ea:86:66:d9:cd:52:c7:2c:6c:63:22:
                    c7:88:29:d5:25:d7:bd:d3:e8:66:ec:bc:cd:3b:4d:
                    24:b2:2a:bb:3e:0d:c5:b4:0c:df:73:cd:1e:e6:b4:
                    eb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:03:D4:C3:E3:4A:DB:E2:E9:1D:7B:6A:33:93:40:06:4E:95:0A:14
            X509v3 Authority Key Identifier:
                keyid:F7:DD:80:7E:33:98:0D:73:22:17:12:30:87:42:30:C1:DB:2A:1A:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/0/F7DD807E33980D7322171230874230C1DB2A1A7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/992AfjOYDXMiFxIwh0IwwdsqGn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/0/AS214344.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214344

    Signature Algorithm: sha256WithRSAEncryption
         9b:3d:b3:be:bc:ad:c3:e6:e5:0c:c3:6e:9a:96:70:9e:36:81:
         6a:6f:3a:cf:e4:f9:5a:d6:bf:bc:90:b4:d2:7d:e1:73:3c:3d:
         ae:18:3c:5d:ba:a3:ee:1e:12:a7:c6:75:49:48:9a:9a:c9:52:
         4f:c9:2b:32:b7:0a:1e:46:e2:eb:70:e8:41:a4:b6:6d:25:cc:
         3c:2f:2c:e8:43:48:e4:4b:4f:80:37:4f:5a:5c:19:d3:7e:d9:
         15:4b:ae:be:13:f1:9f:b3:e7:b8:a9:d4:c5:f0:7a:82:ee:f1:
         8a:15:00:5e:11:81:7b:f5:f7:3b:1b:6e:06:b7:44:b5:c5:de:
         a0:7a:30:a1:7a:f4:f8:45:ea:1e:50:44:ed:41:8a:f8:bd:00:
         f7:27:6f:f2:e4:ab:7d:d0:b8:ac:1f:52:c6:0c:28:a3:96:4d:
         fb:4d:4f:29:11:78:34:62:77:b8:0d:66:38:21:cd:01:66:85:
         72:84:71:4f:18:e9:96:2b:d0:2f:d8:9f:24:18:41:f6:ad:23:
         04:53:35:fa:b8:14:fb:e6:73:a1:3d:bb:b8:24:dc:d4:a9:74:
         57:2a:e1:f9:f6:95:03:84:f1:26:de:3a:e4:50:42:58:11:6f:
         03:1a:fc:44:73:46:17:15:04:29:15:72:fb:23:eb:85:27:09:
         0b:db:37:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:51:54 2026 by rpki-client