Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/0/AS214344.asa
File:                     AS214344.asa (raw, json)
Hash identifier:          TGsKXPFdV/uAOjQtkxycyfn9PCvFZ2/XuR5vzeEy330=
Subject key identifier:   FE:9B:E6:01:75:44:F6:66:8B:C7:52:4A:BB:02:F4:47:99:DE:F1:3C
Certificate issuer:       /CN=3ec842120c803d17c39a3075557753cd9f7a67f1
Certificate serial:       2A774B31593CF7A5FB027442ACA731EE84D4A6A1
Authority key identifier: 3E:C8:42:12:0C:80:3D:17:C3:9A:30:75:55:77:53:CD:9F:7A:67:F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PshCEgyAPRfDmjB1VXdTzZ96Z_E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/0/AS214344.asa
Signing time:             Thu 14 May 2026 16:01:09 +0000
ASPA not before:          Thu 14 May 2026 15:56:09 +0000
ASPA not after:           Thu 13 May 2027 16:01:09 +0000
Customer ASID:            214344
Providers:                AS: 835
                          AS: 6939
                          AS: 14447
                          AS: 34927
                          AS: 44324
                          AS: 63473
                          AS: 137409
                          AS: 142064
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/0/3EC842120C803D17C39A3075557753CD9F7A67F1.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/0/3EC842120C803D17C39A3075557753CD9F7A67F1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PshCEgyAPRfDmjB1VXdTzZ96Z_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:77:4b:31:59:3c:f7:a5:fb:02:74:42:ac:a7:31:ee:84:d4:a6:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ec842120c803d17c39a3075557753cd9f7a67f1
        Validity
            Not Before: May 14 15:56:09 2026 GMT
            Not After : May 13 16:01:09 2027 GMT
        Subject: CN=FE9BE6017544F6668BC7524ABB02F44799DEF13C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:64:18:f4:9e:7a:40:79:47:6b:ac:b0:07:23:
                    f2:a7:83:ab:0b:91:9f:b1:fc:43:67:7d:5f:dc:49:
                    d9:01:37:cf:0d:8f:5f:1f:3e:8b:14:b3:18:89:a5:
                    d6:ba:a9:81:d7:54:9e:0f:08:f6:b2:05:70:99:94:
                    3b:fa:2e:ad:3c:d1:1f:ce:2c:28:dc:17:a1:c2:d2:
                    4d:ca:c3:f5:31:45:a8:f9:40:ab:8c:60:3e:34:69:
                    c9:bb:e8:7a:38:0c:06:cb:f3:7e:68:1d:18:4b:96:
                    31:e3:04:7c:76:d1:5b:0e:11:97:1e:c7:3c:94:90:
                    04:ff:6e:f4:da:e7:0b:ab:d9:92:72:a4:1f:02:9b:
                    4e:43:4d:10:fa:b4:ae:68:10:5a:2f:71:79:cd:7b:
                    22:0b:3c:ef:02:ad:fa:36:ec:27:43:c9:d7:9b:c7:
                    a6:c4:ff:10:e6:3f:8b:b3:11:53:14:aa:b7:a4:c4:
                    fb:c0:12:d4:16:6d:e1:f1:5f:79:bf:3c:15:65:f3:
                    6c:4b:6e:aa:82:7e:c3:09:0e:d3:28:40:c5:df:04:
                    79:df:da:0f:74:c0:ff:6e:a1:c9:a3:96:b4:ce:9a:
                    02:05:f6:1e:8a:db:de:7e:10:b7:53:19:c6:da:68:
                    ce:92:eb:e2:51:60:20:82:5f:10:89:6f:cf:47:cd:
                    71:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:9B:E6:01:75:44:F6:66:8B:C7:52:4A:BB:02:F4:47:99:DE:F1:3C
            X509v3 Authority Key Identifier:
                keyid:3E:C8:42:12:0C:80:3D:17:C3:9A:30:75:55:77:53:CD:9F:7A:67:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/0/3EC842120C803D17C39A3075557753CD9F7A67F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PshCEgyAPRfDmjB1VXdTzZ96Z_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/0/AS214344.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214344

    Signature Algorithm: sha256WithRSAEncryption
         1a:9b:99:14:8a:cd:07:12:d4:eb:72:9c:71:09:c3:ce:bb:00:
         e8:dc:18:42:a1:a2:8a:5f:7e:07:80:38:18:0d:30:e6:c5:f1:
         47:58:63:38:aa:d2:eb:11:3f:20:55:aa:ff:71:b3:96:20:41:
         be:41:7b:36:78:29:fa:70:2b:f3:7b:7b:9b:a8:b2:c3:25:f0:
         fd:87:7c:34:8b:6c:d1:03:b2:b0:bf:25:59:4d:cc:24:55:69:
         69:e0:72:84:39:a5:2c:f1:e4:1f:67:6f:42:7a:55:58:32:58:
         ce:96:3e:62:f2:b6:82:e7:d9:ed:d9:e1:a9:d2:2b:3f:4e:29:
         37:3b:45:5a:3a:f7:ca:9a:30:23:f9:ad:dd:8c:49:ed:da:fa:
         db:7f:9e:3c:b0:1e:ac:e4:e3:41:89:d7:7e:ad:f5:7e:8d:e2:
         e8:84:52:1e:28:c1:01:6a:77:a2:04:e8:fe:80:eb:be:05:27:
         40:03:b4:b7:6e:de:60:a0:86:16:a2:47:a8:9e:89:f5:83:0d:
         02:29:c7:d6:1f:6f:d7:e5:0b:40:c6:5d:da:19:76:32:0e:9a:
         62:23:b2:87:44:1a:8a:55:7a:ac:d8:8b:d4:4f:d8:e2:18:e9:
         c9:95:25:21:50:5f:24:ab:09:04:23:00:0e:d6:32:42:a5:1a:
         29:57:b1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 05:35:53 2026 by rpki-client