Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/AS215288.asa
File:                     AS215288.asa (raw, json)
Hash identifier:          +M2OelxzWMdvs7C8TWLEAVCzoJw+PehI60QsibMmUe0=
Subject key identifier:   B4:ED:11:AC:A7:AE:7D:76:C0:76:49:D2:09:B1:FF:58:C0:B2:18:3F
Certificate issuer:       /CN=7fd1dd522f6134f070195c5c0e2d4c11cfa6a97d
Certificate serial:       2172C4BBEA77375B05A6564633DC270102F3BDE8
Authority key identifier: 7F:D1:DD:52:2F:61:34:F0:70:19:5C:5C:0E:2D:4C:11:CF:A6:A9:7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/AS215288.asa
Signing time:             Thu 02 Jul 2026 15:00:06 +0000
ASPA not before:          Thu 02 Jul 2026 14:55:06 +0000
ASPA not after:           Thu 01 Jul 2027 15:00:06 +0000
Customer ASID:            215288
Providers:                AS: 6517
                          AS: 207054
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 09:27:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:72:c4:bb:ea:77:37:5b:05:a6:56:46:33:dc:27:01:02:f3:bd:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd1dd522f6134f070195c5c0e2d4c11cfa6a97d
        Validity
            Not Before: Jul  2 14:55:06 2026 GMT
            Not After : Jul  1 15:00:06 2027 GMT
        Subject: CN=B4ED11ACA7AE7D76C07649D209B1FF58C0B2183F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0b:ea:ba:1b:8f:34:f6:ec:79:c3:28:5d:de:
                    40:5e:8a:a4:6d:4e:58:2f:4f:11:0e:08:0e:e7:4c:
                    0b:ab:f7:30:1c:95:f3:4e:98:27:ff:27:bf:1c:f7:
                    29:fe:87:ec:37:6e:cd:00:5a:da:3d:14:68:f9:14:
                    31:ad:a6:a0:e4:da:56:ff:a7:af:12:6f:b5:db:5c:
                    24:63:0b:98:04:48:0b:4b:c5:46:f4:de:f8:95:0c:
                    9f:9f:d4:6c:6b:3d:09:78:23:07:f4:7b:54:83:ac:
                    2a:ca:63:d8:a4:42:7d:c2:82:af:90:4b:21:f8:b9:
                    0e:1f:a2:a5:21:31:87:3b:bd:f8:b6:c4:6e:80:35:
                    b3:99:d0:af:c9:85:57:2f:6d:cd:ec:9d:54:b8:96:
                    b3:67:57:ff:d8:8f:ed:c7:79:6c:97:1c:df:d0:24:
                    56:3a:76:ae:72:f1:c0:69:a6:11:42:32:da:0d:0e:
                    48:5e:02:4e:25:e0:a4:1d:e0:70:d9:a7:0c:89:11:
                    df:06:0d:15:68:59:17:1b:62:1f:b3:53:91:81:ba:
                    71:3b:7a:0e:8e:81:2c:d9:a4:78:ce:78:b3:3f:12:
                    ba:90:82:af:df:59:9a:2f:7f:e1:fc:c2:14:5f:2f:
                    8f:8f:6b:76:c6:44:48:5e:97:6e:87:91:b8:7d:fe:
                    90:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:ED:11:AC:A7:AE:7D:76:C0:76:49:D2:09:B1:FF:58:C0:B2:18:3F
            X509v3 Authority Key Identifier:
                keyid:7F:D1:DD:52:2F:61:34:F0:70:19:5C:5C:0E:2D:4C:11:CF:A6:A9:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/AS215288.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215288

    Signature Algorithm: sha256WithRSAEncryption
         74:f7:2b:c5:2e:a1:22:0d:cc:53:8e:f9:0c:c7:29:b9:da:8e:
         d9:c6:99:c2:2e:9b:38:22:da:a0:52:69:c5:4c:e5:38:e8:e2:
         8a:63:2b:31:26:c4:b6:6e:6d:9f:a4:dc:1e:c2:62:ce:53:41:
         7a:c0:2e:90:86:5a:73:11:05:82:70:d6:2d:44:c8:8f:b9:c0:
         9c:19:5a:26:ce:65:fb:20:f0:d4:70:19:6e:a9:3a:90:7e:83:
         2e:66:97:2f:a1:c8:22:3c:fd:cc:a0:92:6c:f0:3e:da:02:01:
         53:01:5b:0c:ff:78:84:22:22:5b:59:29:af:56:0e:18:3e:9b:
         14:33:96:25:25:2a:aa:27:b6:3f:1e:76:fb:0c:8a:a6:89:06:
         7a:9c:51:3a:7f:cc:86:9c:00:54:58:df:67:46:c4:99:a7:e4:
         27:9e:a5:f3:6c:5a:ff:28:9a:95:85:4b:01:2f:c6:74:3c:c7:
         ae:d4:be:df:1f:49:3b:91:2f:dc:c0:ad:49:e0:b3:9a:bb:83:
         e6:64:4c:44:fe:4f:31:de:64:04:92:47:86:ae:2b:b8:1e:d5:
         f7:1c:dd:1e:37:a8:35:eb:10:42:63:66:e7:a9:5c:27:87:51:
         20:78:53:65:5a:c5:84:85:20:7f:9a:85:7b:15:b3:21:33:24:
         e0:d1:8c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:50 2026 by rpki-client