Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/AS215248.asa
File:                     AS215248.asa (raw, json)
Hash identifier:          Xm55WBowrnIjTmXkppi0KmQQ4lxlvFPH8o7ZdE9YhK8=
Subject key identifier:   CA:3E:32:1B:B1:F1:EF:C0:C2:0B:C6:36:A0:FD:AE:B9:E4:AC:81:45
Certificate issuer:       /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Certificate serial:       46A6A0DE38F01834A0D8ADF5FE2EF33C30103F07
Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/AS215248.asa
Signing time:             Tue 16 Jun 2026 22:37:43 +0000
ASPA not before:          Tue 16 Jun 2026 22:32:43 +0000
ASPA not after:           Tue 15 Jun 2027 22:37:43 +0000
Customer ASID:            215248
Providers:                AS: 835
                          AS: 1299
                          AS: 3257
                          AS: 5405
                          AS: 6204
                          AS: 6939
                          AS: 8283
                          AS: 11967
                          AS: 25091
                          AS: 37739
                          AS: 42093
                          AS: 50263
                          AS: 50917
                          AS: 52025
                          AS: 58115
                          AS: 61049
                          AS: 64289
                          AS: 200132
                          AS: 400587
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:26:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:a6:a0:de:38:f0:18:34:a0:d8:ad:f5:fe:2e:f3:3c:30:10:3f:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
        Validity
            Not Before: Jun 16 22:32:43 2026 GMT
            Not After : Jun 15 22:37:43 2027 GMT
        Subject: CN=CA3E321BB1F1EFC0C20BC636A0FDAEB9E4AC8145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ba:fd:e6:a2:7b:fa:4b:a5:1f:4b:c2:01:c6:
                    1c:33:1d:2a:2e:60:4c:cd:60:be:82:3d:3e:05:83:
                    6e:15:d4:09:b2:34:42:81:9f:0a:ce:15:a9:07:d2:
                    d7:e4:de:33:d3:7b:5f:7b:12:b9:94:97:fc:fe:e3:
                    ad:cf:cb:5a:95:e9:5a:f1:e9:58:12:3d:de:1a:84:
                    11:6b:e9:90:1b:c0:b8:68:5e:63:0c:02:f0:f3:0a:
                    04:a9:2f:fb:cb:0b:10:52:f6:89:f4:7a:fc:48:61:
                    de:82:65:e3:c9:c5:d2:91:b4:56:99:20:7e:6c:b2:
                    cc:86:3a:14:7a:32:b9:ea:34:36:64:05:6d:cc:d1:
                    0f:e1:be:66:31:3f:af:eb:99:8d:c7:dd:83:db:aa:
                    64:45:e9:04:d0:b1:15:8a:fb:23:3c:97:fc:20:42:
                    fb:41:21:31:0d:97:5a:d0:a5:3e:75:2b:86:36:99:
                    89:da:f7:2c:a4:0b:b1:76:94:66:e6:83:b9:a4:fe:
                    e7:d8:dc:76:a0:23:53:ee:04:5c:77:b4:82:63:4d:
                    42:a1:a8:c8:f1:b8:0d:0a:56:53:6d:f8:a7:cb:50:
                    df:87:87:99:51:b1:8d:0e:42:52:ad:58:78:c4:d7:
                    48:44:ab:8c:0e:6f:29:cf:6b:71:e8:0b:cf:e0:00:
                    51:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:3E:32:1B:B1:F1:EF:C0:C2:0B:C6:36:A0:FD:AE:B9:E4:AC:81:45
            X509v3 Authority Key Identifier:
                keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/AS215248.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215248

    Signature Algorithm: sha256WithRSAEncryption
         96:87:67:c4:d8:c8:cb:16:e9:cf:b0:1e:51:c1:47:a0:a2:0a:
         78:8d:2d:6e:9b:5a:7f:26:f0:6b:d2:47:98:de:eb:7c:29:f9:
         ca:c0:cf:95:07:9e:14:74:5e:1b:11:e2:dc:45:bc:d6:71:c5:
         b7:01:fe:d4:40:cf:bf:a3:d4:de:7b:3e:27:ea:12:e0:69:60:
         9e:7e:87:08:64:cd:1b:0d:72:ed:07:a1:da:21:49:cf:f7:87:
         16:e1:ba:6d:e5:67:2b:45:c5:f3:23:19:3b:56:af:52:bf:e2:
         8b:c4:8f:20:14:64:3f:4b:84:c1:65:50:0f:97:ac:42:84:a3:
         7c:28:48:be:db:69:fe:d3:dd:1f:be:85:bc:bc:78:59:7e:0e:
         df:0a:22:b0:08:21:77:19:b7:2c:2e:0f:2f:ac:70:b5:de:a7:
         77:d1:ef:32:ea:c7:1e:0e:9a:8c:01:35:1b:5f:14:78:89:d7:
         03:e3:ce:c5:ad:8d:a8:ba:36:42:15:68:b4:66:bf:f3:9d:67:
         de:28:75:c7:c8:54:e7:4c:ce:85:b7:bf:b0:3a:ca:90:a2:87:
         82:25:07:63:80:78:26:61:6c:63:df:c5:24:4b:b1:7e:82:4e:
         cb:12:aa:ed:a9:1e:06:3f:c6:99:82:de:5b:d0:e2:50:3d:50:
         58:59:b0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 09:38:19 2026 by rpki-client