Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab51b1b2-5e14-4c36-86aa-ab1ad1d7dd30/0/AS206604.asa
File:                     AS206604.asa (raw, json)
Hash identifier:          XxWNEP0RcW6dznnH21B+BOTSbywUXdGchLuUFg2aZo8=
Subject key identifier:   4A:D7:24:4E:CC:77:B9:A9:2B:7F:B8:90:F6:21:F0:51:04:E8:10:D2
Certificate issuer:       /CN=9a83b3daf9a8897d7fb6fd17f264d3453e1c5aca
Certificate serial:       3E7D15B81597CB824D9125DBC1E872016A873AB3
Authority key identifier: 9A:83:B3:DA:F9:A8:89:7D:7F:B6:FD:17:F2:64:D3:45:3E:1C:5A:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/moOz2vmoiX1_tv0X8mTTRT4cWso.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ab51b1b2-5e14-4c36-86aa-ab1ad1d7dd30/0/AS206604.asa
Signing time:             Wed 29 Oct 2025 18:08:25 +0000
ASPA not before:          Wed 29 Oct 2025 18:03:25 +0000
ASPA not after:           Wed 28 Oct 2026 18:08:25 +0000
Customer ASID:            206604
Providers:                AS: 11967
                          AS: 34872
                          AS: 34927
                          AS: 60326
                          AS: 210457
                          AS: 211358
                          AS: 214757
                          AS: 214809
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ab51b1b2-5e14-4c36-86aa-ab1ad1d7dd30/0/9A83B3DAF9A8897D7FB6FD17F264D3453E1C5ACA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ab51b1b2-5e14-4c36-86aa-ab1ad1d7dd30/0/9A83B3DAF9A8897D7FB6FD17F264D3453E1C5ACA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/moOz2vmoiX1_tv0X8mTTRT4cWso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 00:44:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:7d:15:b8:15:97:cb:82:4d:91:25:db:c1:e8:72:01:6a:87:3a:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a83b3daf9a8897d7fb6fd17f264d3453e1c5aca
        Validity
            Not Before: Oct 29 18:03:25 2025 GMT
            Not After : Oct 28 18:08:25 2026 GMT
        Subject: CN=4AD7244ECC77B9A92B7FB890F621F05104E810D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:68:3f:f7:89:d8:99:1b:7a:47:ea:79:86:8d:
                    f2:3d:4f:42:29:26:2e:ce:fc:ca:5b:6e:81:3c:22:
                    32:96:eb:fb:d7:af:4c:62:78:ae:5f:1d:ef:89:59:
                    89:34:4d:45:b3:22:63:30:62:2c:60:d2:ab:cc:58:
                    56:b3:5a:f9:dc:80:ae:e3:6f:a6:a5:97:eb:51:74:
                    fd:0f:d3:3c:2c:05:ad:dc:03:9a:9b:72:4e:79:a0:
                    20:b7:2a:5f:75:b8:a8:30:df:2c:4d:98:cb:bc:24:
                    57:99:e8:2b:ef:07:fb:aa:03:bf:8b:c0:56:19:ea:
                    7a:06:43:e8:69:ce:93:56:32:9e:a0:96:e0:4c:2f:
                    3d:85:cf:33:45:cb:35:7d:ad:a4:7a:89:4c:63:11:
                    ef:89:79:7b:ea:7b:da:5c:99:1a:e6:2a:7d:8e:f4:
                    2c:cf:66:52:b4:bb:ab:e9:7e:c1:de:7c:c3:a5:95:
                    e1:50:1e:77:78:bd:fa:62:95:fd:21:4e:db:59:02:
                    7e:5d:ce:12:70:ea:ae:db:04:52:8c:71:13:2a:0e:
                    26:47:7b:13:28:0a:95:78:89:54:73:8b:da:06:01:
                    f5:a1:d7:c3:05:b7:0d:fa:29:fe:8f:ba:f2:b7:24:
                    5d:82:9b:8c:bf:f9:c7:87:e4:80:16:c8:9f:d9:55:
                    2f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:D7:24:4E:CC:77:B9:A9:2B:7F:B8:90:F6:21:F0:51:04:E8:10:D2
            X509v3 Authority Key Identifier:
                keyid:9A:83:B3:DA:F9:A8:89:7D:7F:B6:FD:17:F2:64:D3:45:3E:1C:5A:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ab51b1b2-5e14-4c36-86aa-ab1ad1d7dd30/0/9A83B3DAF9A8897D7FB6FD17F264D3453E1C5ACA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/moOz2vmoiX1_tv0X8mTTRT4cWso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab51b1b2-5e14-4c36-86aa-ab1ad1d7dd30/0/AS206604.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206604

    Signature Algorithm: sha256WithRSAEncryption
         4d:76:f6:07:be:b8:34:40:6e:79:5a:82:46:80:9d:aa:50:d3:
         ec:ed:0d:c3:d1:20:e3:92:16:9e:14:03:23:76:80:a5:7c:3a:
         51:10:f2:0c:f5:dd:14:f2:75:db:01:7b:88:79:4b:73:90:81:
         d1:e9:82:e4:d1:ca:f5:93:dc:17:d0:a8:29:44:ed:5f:b5:b4:
         5b:fd:68:16:30:a2:b2:ff:70:f4:f7:96:df:c2:fd:aa:3c:de:
         64:b6:9a:aa:a5:cb:96:64:df:c5:a2:68:63:c0:b2:2b:54:98:
         9d:36:82:2c:fe:0c:77:58:55:3e:d5:22:f7:1b:7d:9a:1c:1e:
         f1:ba:af:fd:30:94:c9:f4:02:19:d9:22:40:78:b1:77:2e:37:
         7f:03:9a:10:f4:36:dd:de:ea:6b:f4:34:22:10:85:7e:fa:e2:
         88:d0:91:d0:60:12:67:96:2e:f2:a4:97:1c:94:82:5e:d2:4e:
         ca:82:17:4c:95:47:6c:93:82:ba:8c:2a:e9:6e:73:dd:d1:6b:
         34:1b:0e:7e:33:29:39:00:83:f3:3d:0f:29:65:8c:21:9a:3a:
         da:fb:35:99:ec:e4:5c:06:d9:0f:a6:9a:44:99:7c:89:3d:d3:
         bc:41:2e:77:89:fc:96:1c:81:91:8c:9b:03:06:f4:e9:ff:ba:
         9e:c6:63:65
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIUPn0VuBWXy4JNkSXbwehyAWqHOrMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWE4M2IzZGFmOWE4ODk3ZDdmYjZmZDE3ZjI2NGQzNDUz
ZTFjNWFjYTAeFw0yNTEwMjkxODAzMjVaFw0yNjEwMjgxODA4MjVaMDMxMTAvBgNV
BAMTKDRBRDcyNDRFQ0M3N0I5QTkyQjdGQjg5MEY2MjFGMDUxMDRFODEwRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBaD/3idiZG3pH6nmGjfI9T0Ip
Ji7O/MpbboE8IjKW6/vXr0xieK5fHe+JWYk0TUWzImMwYixg0qvMWFazWvncgK7j
b6all+tRdP0P0zwsBa3cA5qbck55oCC3Kl91uKgw3yxNmMu8JFeZ6CvvB/uqA7+L
wFYZ6noGQ+hpzpNWMp6gluBMLz2FzzNFyzV9raR6iUxjEe+JeXvqe9pcmRrmKn2O
9CzPZlK0u6vpfsHefMOlleFQHnd4vfpilf0hTttZAn5dzhJw6q7bBFKMcRMqDiZH
exMoCpV4iVRzi9oGAfWh18MFtw36Kf6PuvK3JF2Cm4y/+ceH5IAWyJ/ZVS9HAgMB
AAGjggIFMIICATAdBgNVHQ4EFgQUStckTsx3uakrf7iQ9iHwUQToENIwHwYDVR0j
BBgwFoAUmoOz2vmoiX1/tv0X8mTTRT4cWsowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWI1MWIxYjItNWUxNC00YzM2LTg2YWEtYWIxYWQxZDdk
ZDMwLzAvOUE4M0IzREFGOUE4ODk3RDdGQjZGRDE3RjI2NEQzNDUzRTFDNUFDQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL21vT3oydm1vaVgxX3R2MFg4bVRUUlQ0
Y1dzby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FiNTFiMWIyLTVlMTQt
NGMzNi04NmFhLWFiMWFkMWQ3ZGQzMC8wL0FTMjA2NjA0LmFzYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMnDDANBgkq
hkiG9w0BAQsFAAOCAQEATXb2B764NEBueVqCRoCdqlDT7O0Nw9Eg45IWnhQDI3aA
pXw6URDyDPXdFPJ12wF7iHlLc5CB0emC5NHK9ZPcF9CoKUTtX7W0W/1oFjCisv9w
9PeW38L9qjzeZLaaqqXLlmTfxaJoY8CyK1SYnTaCLP4Md1hVPtUi9xt9mhwe8bqv
/TCUyfQCGdkiQHixdy43fwOaEPQ23d7qa/Q0IhCFfvriiNCR0GASZ5Yu8qSXHJSC
XtJOyoIXTJVHbJOCuowq6W5z3dFrNBsOfjMpOQCD8z0PKWWMIZo62vs1mezkXAbZ
D6aaRJl8iT3TvEEud4n8lhyBkYybAwb06f+6nsZjZQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:54:57 2025 by rpki-client