Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/AS205848.asa
File:                     AS205848.asa (raw, json)
Hash identifier:          byHj8V8+dZsMDMexV561rIcgjjbafjxJ7s3hHFIHNC4=
Subject key identifier:   71:30:AA:87:6A:5B:F4:32:4A:54:F8:82:25:E4:E3:5F:AD:80:CC:73
Certificate issuer:       /CN=ddda7c4c6a985c465e66bfde4c3e11bd0cfe08ff
Certificate serial:       2B9F9D5E0FBAB73700E302AA2F11D33FCE8299B3
Authority key identifier: DD:DA:7C:4C:6A:98:5C:46:5E:66:BF:DE:4C:3E:11:BD:0C:FE:08:FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3dp8TGqYXEZeZr_eTD4RvQz-CP8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/AS205848.asa
Signing time:             Mon 20 Apr 2026 15:39:59 +0000
ASPA not before:          Mon 20 Apr 2026 15:34:59 +0000
ASPA not after:           Mon 19 Apr 2027 15:39:59 +0000
Customer ASID:            205848
Providers:                AS: 924
                          AS: 1299
                          AS: 6939
                          AS: 34549
                          AS: 34927
                          AS: 35133
                          AS: 36231
                          AS: 37988
                          AS: 47272
                          AS: 52025
                          AS: 61138
                          AS: 208453
                          AS: 209022
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3dp8TGqYXEZeZr_eTD4RvQz-CP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:9f:9d:5e:0f:ba:b7:37:00:e3:02:aa:2f:11:d3:3f:ce:82:99:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddda7c4c6a985c465e66bfde4c3e11bd0cfe08ff
        Validity
            Not Before: Apr 20 15:34:59 2026 GMT
            Not After : Apr 19 15:39:59 2027 GMT
        Subject: CN=7130AA876A5BF4324A54F88225E4E35FAD80CC73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:29:05:48:0c:f4:8c:90:b5:57:04:d3:ce:31:
                    9c:8c:de:cd:93:94:1b:1d:a1:65:6c:f0:25:64:23:
                    ea:87:c2:cd:28:25:9e:5e:86:7b:3a:05:31:e1:4c:
                    38:3e:cd:11:1d:f0:7a:7f:7a:f8:8d:5a:12:c8:29:
                    5b:4e:0a:68:9b:13:ab:55:11:79:0d:ef:fc:c0:df:
                    0f:2e:1e:e4:a9:e7:42:77:23:d7:d0:88:1f:d3:6c:
                    b1:bc:a6:55:2c:6c:ce:02:3c:c9:37:80:52:68:b3:
                    d8:62:5f:9e:8c:f6:20:b2:12:02:81:24:23:9b:f1:
                    9c:1a:da:20:77:51:1b:64:57:56:13:a9:49:f8:16:
                    7a:f9:60:68:cf:94:1c:d6:a3:0b:42:64:12:5a:28:
                    87:bf:d1:ff:e1:58:77:cc:44:58:dc:3e:56:75:f6:
                    43:e8:f9:2e:e9:75:6d:51:c5:e4:58:d2:31:fa:67:
                    a8:13:fd:7d:0b:1c:e5:fa:e5:c6:9f:3a:26:7b:33:
                    cc:59:8a:20:7a:3d:b8:a1:d1:ce:f9:87:e1:02:69:
                    0e:7f:17:e6:21:3b:3c:d2:a4:92:fa:29:82:88:cc:
                    9a:98:cb:e7:c7:39:19:bc:98:2f:a0:ac:ff:40:f0:
                    7b:a0:96:95:b2:ff:07:a6:e3:28:ef:4c:0f:86:4c:
                    eb:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:30:AA:87:6A:5B:F4:32:4A:54:F8:82:25:E4:E3:5F:AD:80:CC:73
            X509v3 Authority Key Identifier:
                keyid:DD:DA:7C:4C:6A:98:5C:46:5E:66:BF:DE:4C:3E:11:BD:0C:FE:08:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dp8TGqYXEZeZr_eTD4RvQz-CP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/AS205848.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205848

    Signature Algorithm: sha256WithRSAEncryption
         0f:e5:cf:db:19:e1:ff:2c:6d:43:e9:22:dd:56:12:ba:d6:b4:
         64:e0:8f:06:18:c4:11:45:c1:52:2a:dd:a1:26:b5:7f:3b:b0:
         fa:75:fc:21:a6:02:b3:4e:46:17:7e:ac:f3:cd:5f:11:95:eb:
         7b:47:8f:52:74:b7:41:a0:2f:76:01:f3:3b:09:c9:36:63:ab:
         82:ef:a5:65:9f:9f:c1:81:38:ad:5d:7d:f3:90:27:29:2a:a3:
         f7:86:55:2a:52:10:a9:1e:8d:47:e5:4d:bd:dd:3c:b0:7c:4f:
         d0:b8:c5:f2:7d:b7:23:44:63:4e:f6:32:ad:69:f5:50:e0:89:
         3c:9c:ae:e8:79:68:22:90:fa:a8:7d:d7:5f:c0:60:61:04:d2:
         87:c0:b1:6a:0e:ec:eb:dd:de:c2:89:ba:73:ca:f2:43:e1:16:
         8c:7e:b3:51:e7:96:20:79:70:2f:f2:9b:ec:2e:90:bf:2c:23:
         4d:5c:5d:6e:2b:87:31:fc:5b:ad:df:70:f1:05:a0:c2:4b:34:
         c2:00:ea:c9:48:b2:c4:07:5b:c7:95:84:ba:15:76:89:61:21:
         1c:1b:97:33:83:10:5a:31:75:cb:58:80:da:e1:94:3b:a0:8c:
         7e:68:5c:87:32:8e:b5:7a:55:97:2c:ca:88:68:b0:73:49:a9:
         e3:e5:ee:39
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIUK5+dXg+6tzcA4wKqLxHTP86CmbMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGRkYTdjNGM2YTk4NWM0NjVlNjZiZmRlNGMzZTExYmQw
Y2ZlMDhmZjAeFw0yNjA0MjAxNTM0NTlaFw0yNzA0MTkxNTM5NTlaMDMxMTAvBgNV
BAMTKDcxMzBBQTg3NkE1QkY0MzI0QTU0Rjg4MjI1RTRFMzVGQUQ4MENDNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnKQVIDPSMkLVXBNPOMZyM3s2T
lBsdoWVs8CVkI+qHws0oJZ5ehns6BTHhTDg+zREd8Hp/eviNWhLIKVtOCmibE6tV
EXkN7/zA3w8uHuSp50J3I9fQiB/TbLG8plUsbM4CPMk3gFJos9hiX56M9iCyEgKB
JCOb8Zwa2iB3URtkV1YTqUn4Fnr5YGjPlBzWowtCZBJaKIe/0f/hWHfMRFjcPlZ1
9kPo+S7pdW1RxeRY0jH6Z6gT/X0LHOX65cafOiZ7M8xZiiB6Pbih0c75h+ECaQ5/
F+YhOzzSpJL6KYKIzJqYy+fHORm8mC+grP9A8HuglpWy/wem4yjvTA+GTOsnAgMB
AAGjggIFMIICATAdBgNVHQ4EFgQUcTCqh2pb9DJKVPiCJeTjX62AzHMwHwYDVR0j
BBgwFoAU3dp8TGqYXEZeZr/eTD4RvQz+CP8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTU5ZThjMmYtZTU5MC00YTRmLTg0NjMtODMxN2MyYTFj
MDQ4LzAvREREQTdDNEM2QTk4NUM0NjVFNjZCRkRFNEMzRTExQkQwQ0ZFMDhGRi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNkcDhUR3FZWEVaZVpyX2VURDRSdlF6
LUNQOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E1OWU4YzJmLWU1OTAt
NGE0Zi04NDYzLTgzMTdjMmExYzA0OC8wL0FTMjA1ODQ4LmFzYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMkGDANBgkq
hkiG9w0BAQsFAAOCAQEAD+XP2xnh/yxtQ+ki3VYSuta0ZOCPBhjEEUXBUirdoSa1
fzuw+nX8IaYCs05GF36s881fEZXre0ePUnS3QaAvdgHzOwnJNmOrgu+lZZ+fwYE4
rV1985AnKSqj94ZVKlIQqR6NR+VNvd08sHxP0LjF8n23I0RjTvYyrWn1UOCJPJyu
6HloIpD6qH3XX8BgYQTSh8Cxag7s693ewom6c8ryQ+EWjH6zUeeWIHlwL/Kb7C6Q
vywjTVxdbiuHMfxbrd9w8QWgwks0wgDqyUiyxAdbx5WEuhV2iWEhHBuXM4MQWjF1
y1iA2uGUO6CMfmhchzKOtXpVlyzKiGiwc0mp4+XuOQ==
-----END CERTIFICATE-----
Generated at Thu Apr 30 11:59:22 2026 by rpki-client