Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/AS214723.asa
File:                     AS214723.asa (raw, json)
Hash identifier:          rkKLIM3Jzl++4c/N1MAbX2VnZd8jPZSTe5gZ4DgYJLI=
Subject key identifier:   FE:50:A1:2C:E1:1D:CF:9E:1F:5A:27:04:42:22:16:4F:7C:EA:48:7B
Certificate issuer:       /CN=c4cad0efcbe305b4494ed2747bb4f82f43ac8c81
Certificate serial:       63E5EF2BB247F4FB25990A0A021D14522485F153
Authority key identifier: C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/AS214723.asa
Signing time:             Tue 10 Mar 2026 13:15:29 +0000
ASPA not before:          Tue 10 Mar 2026 13:10:29 +0000
ASPA not after:           Tue 09 Mar 2027 13:15:29 +0000
Customer ASID:            214723
Providers:                AS: 34872
                          AS: 44103
                          AS: 58057
                          AS: 209533
                          AS: 215085
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Mar 2026 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:e5:ef:2b:b2:47:f4:fb:25:99:0a:0a:02:1d:14:52:24:85:f1:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4cad0efcbe305b4494ed2747bb4f82f43ac8c81
        Validity
            Not Before: Mar 10 13:10:29 2026 GMT
            Not After : Mar  9 13:15:29 2027 GMT
        Subject: CN=FE50A12CE11DCF9E1F5A27044222164F7CEA487B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c5:62:5a:12:fe:bc:4e:3b:86:67:cc:2a:ed:
                    37:63:ad:2f:d4:ad:a0:31:e8:1b:12:36:05:c5:8d:
                    f6:74:a6:39:aa:91:e4:db:76:5d:27:fb:94:d5:8a:
                    c5:2a:fe:ba:6c:fd:a5:db:55:e7:62:b7:b5:b8:13:
                    82:42:c3:51:51:0e:cb:76:32:e0:3f:30:c5:dd:bb:
                    6b:0a:a6:8f:b8:38:fb:07:ae:7d:b3:6e:17:88:29:
                    65:c7:8e:e5:85:80:09:78:bd:c8:99:f1:2f:a0:50:
                    e9:ae:74:b6:59:c7:9d:98:61:9c:63:45:cd:58:f1:
                    15:47:e8:ac:04:40:dd:66:94:aa:25:e7:30:21:a8:
                    29:40:d8:93:88:dc:6b:e8:4a:e2:2c:7e:8a:6c:f1:
                    f6:05:53:43:7f:2d:cb:86:eb:e0:df:c8:33:88:7e:
                    9c:4b:a1:22:23:73:89:40:37:75:c2:75:3f:6b:d8:
                    d8:ba:b3:4d:7e:51:cd:5e:50:89:be:e3:ca:ce:02:
                    df:6b:29:18:77:4a:2a:95:03:eb:d7:0a:cd:1a:eb:
                    7a:28:f9:63:d2:52:2f:a4:8d:11:f0:c1:de:92:d1:
                    67:f3:84:9e:6d:be:a2:3a:d9:f7:f8:c3:6f:36:cd:
                    90:45:dd:3b:5f:6c:5c:58:66:1a:63:65:2c:54:5a:
                    c6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:50:A1:2C:E1:1D:CF:9E:1F:5A:27:04:42:22:16:4F:7C:EA:48:7B
            X509v3 Authority Key Identifier:
                keyid:C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/AS214723.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214723

    Signature Algorithm: sha256WithRSAEncryption
         60:e4:2d:4d:f0:81:c8:8c:85:fd:77:97:e1:ce:d3:a6:3c:99:
         8c:6c:2e:c5:43:46:af:1e:ae:a1:70:a2:5d:1c:5f:91:ee:c0:
         d1:2c:c4:10:ff:72:f0:7e:ff:ab:0e:51:81:7f:0a:c3:59:eb:
         03:37:d4:a4:02:21:c1:f0:4b:50:f6:4b:cd:e8:61:82:f7:d2:
         61:05:52:76:49:13:ad:26:ce:cb:59:41:b9:cd:83:92:65:12:
         33:f3:99:4a:4a:d0:95:98:5a:76:f3:ce:bc:5c:eb:e9:e0:27:
         1d:49:cb:30:74:f4:22:10:07:65:6e:60:c8:c4:05:6c:86:fe:
         85:52:b1:61:ea:03:81:d0:be:ef:fa:8e:59:5a:97:e2:0d:1b:
         aa:69:42:57:f4:a6:bf:64:8f:70:13:b1:ee:ac:c7:d3:27:0f:
         18:91:ec:db:7c:e3:e3:76:e4:64:92:7e:4a:49:c8:49:08:f1:
         d1:8a:c9:0e:03:27:de:84:04:06:25:60:cc:c9:f2:97:60:61:
         27:2a:f6:7e:58:0d:69:8e:2b:a9:39:3f:3d:22:0e:98:22:2b:
         b6:48:54:1c:e1:08:e7:5b:f5:f2:41:ed:ce:f3:f6:d2:95:fd:
         59:5b:9c:61:e5:80:bc:12:50:ab:cd:b9:8e:c7:24:8e:7d:f2:
         bc:a4:71:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:48:41 2026 by rpki-client