Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/0/AS210796.asa
File:                     AS210796.asa (raw, json)
Hash identifier:          UUIMqt8ZmaK9oM2cGglTc+0B5+iNW+0belJbJzZMcCg=
Subject key identifier:   76:0F:15:B8:12:19:EF:82:CA:40:CA:69:29:3B:4C:55:36:A6:88:CC
Certificate issuer:       /CN=e1456d788fe94866c9fe0b87758a8ab1e221e8db
Certificate serial:       3BFFEDC782FD7A3101A406C9309F733F3B01CF60
Authority key identifier: E1:45:6D:78:8F:E9:48:66:C9:FE:0B:87:75:8A:8A:B1:E2:21:E8:DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4UVteI_pSGbJ_guHdYqKseIh6Ns.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/0/AS210796.asa
Signing time:             Sat 08 Nov 2025 14:12:48 +0000
ASPA not before:          Sat 08 Nov 2025 14:07:48 +0000
ASPA not after:           Sat 07 Nov 2026 14:12:48 +0000
Customer ASID:            210796
Providers:                AS: 215147
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/0/E1456D788FE94866C9FE0B87758A8AB1E221E8DB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/0/E1456D788FE94866C9FE0B87758A8AB1E221E8DB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4UVteI_pSGbJ_guHdYqKseIh6Ns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 03:17:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ff:ed:c7:82:fd:7a:31:01:a4:06:c9:30:9f:73:3f:3b:01:cf:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1456d788fe94866c9fe0b87758a8ab1e221e8db
        Validity
            Not Before: Nov  8 14:07:48 2025 GMT
            Not After : Nov  7 14:12:48 2026 GMT
        Subject: CN=760F15B81219EF82CA40CA69293B4C5536A688CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3f:68:e3:48:58:4e:b5:5d:ed:01:65:05:44:
                    ec:4e:3a:51:d5:00:92:02:10:d9:f8:17:d2:a2:0b:
                    94:ed:30:5f:b7:00:a0:bc:17:c0:ce:5b:0d:f5:80:
                    70:d4:f9:ab:89:84:d1:40:d9:62:51:fb:60:c1:ec:
                    a0:63:a7:3c:14:08:8b:54:0e:35:f3:e5:1c:08:9b:
                    39:8e:4c:f3:4f:2d:17:94:08:5c:e2:67:de:45:f5:
                    d7:c2:46:10:30:f4:f3:4b:d4:a1:33:a2:b2:15:7d:
                    cc:5b:8e:7e:0f:b7:89:72:95:13:4e:46:8a:99:cd:
                    e8:5e:01:40:43:40:b6:85:5c:e8:b8:b9:f3:e7:90:
                    9e:8c:60:11:75:8d:a7:d9:91:84:f3:ab:f0:90:e2:
                    15:c1:a8:cc:ff:59:76:58:c6:41:47:28:28:0d:a8:
                    3f:95:aa:41:61:ad:d3:f2:a9:6e:f9:45:bd:f6:66:
                    8b:d2:fe:93:7e:af:52:20:42:32:e3:af:8f:94:23:
                    85:22:db:16:08:8f:94:d3:fa:fd:67:77:55:04:19:
                    39:1b:20:67:35:4d:91:a0:16:08:4a:ca:78:16:18:
                    c2:e7:ba:1d:3a:95:f7:fb:c3:dc:a0:91:b1:df:28:
                    f3:bc:4b:e6:79:d3:92:55:e2:01:4b:6d:69:76:26:
                    78:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:0F:15:B8:12:19:EF:82:CA:40:CA:69:29:3B:4C:55:36:A6:88:CC
            X509v3 Authority Key Identifier:
                keyid:E1:45:6D:78:8F:E9:48:66:C9:FE:0B:87:75:8A:8A:B1:E2:21:E8:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/0/E1456D788FE94866C9FE0B87758A8AB1E221E8DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UVteI_pSGbJ_guHdYqKseIh6Ns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/0/AS210796.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210796

    Signature Algorithm: sha256WithRSAEncryption
         3f:84:8d:c7:17:9b:cf:8f:af:10:c1:9d:ff:71:f0:af:07:61:
         b2:8a:3e:7b:45:e6:c3:7c:79:47:cb:75:6e:43:9e:80:c6:7e:
         4b:a6:b3:13:60:12:fc:10:74:17:06:46:b9:16:42:05:95:92:
         cc:62:f0:f0:60:70:08:c3:e5:fa:82:ac:c4:9e:90:2b:14:4c:
         04:b5:77:9d:52:33:a6:80:14:fb:01:03:42:86:e6:2e:b1:d6:
         a2:1a:92:ca:13:1a:0c:3b:a7:94:73:b9:42:1f:33:ab:00:a2:
         a9:23:b1:d0:01:a8:4c:a5:2d:0d:da:a7:6b:09:f8:2a:3f:66:
         09:f7:64:ec:45:82:b1:90:72:70:cf:05:63:fc:0a:ff:c7:84:
         00:da:51:e2:41:fe:b5:1b:4e:0b:18:ba:7b:57:ff:30:11:b8:
         b5:67:c8:2d:48:99:a2:bf:7c:0a:cd:ff:97:39:7b:89:61:ac:
         aa:97:1f:72:65:fa:c3:a9:3b:b8:0b:f2:99:69:9e:4a:c5:8b:
         da:a3:ec:e3:f5:9f:32:a4:ce:13:85:0b:67:a8:1e:dc:9a:09:
         e1:31:b8:01:ab:36:89:ec:95:38:ef:04:69:50:c5:92:40:b2:
         3b:8c:02:02:1e:80:08:e6:bb:68:82:da:ce:1c:a2:ae:70:13:
         a3:89:5d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:16:14 2025 by rpki-client