Autonomous System Provider Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/AS60431.asa
File:                     AS60431.asa (raw, json)
Hash identifier:          yzuZh5MfCWqR2uRReA/FjOq/XGqBpC6B3FbqdwB/+KY=
Subject key identifier:   5F:C3:84:62:2C:90:47:8A:DA:43:A2:24:EE:74:E1:B3:AE:62:35:5B
Certificate issuer:       /CN=547bc28c92a229a5ac78c0de287d89ce37726409
Certificate serial:       6311416C5AEBF02DAB3812A4960DDAFE26F56566
Authority key identifier: 54:7B:C2:8C:92:A2:29:A5:AC:78:C0:DE:28:7D:89:CE:37:72:64:09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/AS60431.asa
Signing time:             Fri 31 Jul 2026 18:55:18 +0000
ASPA not before:          Fri 31 Jul 2026 18:50:18 +0000
ASPA not after:           Fri 30 Jul 2027 18:55:18 +0000
Customer ASID:            60431
Providers:                AS: 174
                          AS: 6939
                          AS: 34927
                          AS: 41495
                          AS: 50917
                          AS: 56630
                          AS: 137409
                          AS: 209735
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:17:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:11:41:6c:5a:eb:f0:2d:ab:38:12:a4:96:0d:da:fe:26:f5:65:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=547bc28c92a229a5ac78c0de287d89ce37726409
        Validity
            Not Before: Jul 31 18:50:18 2026 GMT
            Not After : Jul 30 18:55:18 2027 GMT
        Subject: CN=5FC384622C90478ADA43A224EE74E1B3AE62355B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5f:5a:f4:68:83:3f:0b:f2:84:2a:2f:02:4f:
                    03:d4:d6:45:61:5c:b9:a1:cd:0e:3d:28:9b:3c:c6:
                    52:a0:be:3a:0d:5c:bf:24:f4:5b:7c:65:d0:d2:92:
                    34:7f:18:8c:f1:81:a2:ae:69:52:12:c6:b1:7b:95:
                    25:59:f6:eb:26:3e:aa:a4:d8:2f:d8:a8:c3:ee:0a:
                    f2:e7:58:19:e9:5f:76:ef:90:60:cd:ec:c3:15:df:
                    cf:c0:bd:f9:c8:39:8b:9b:9b:c4:6b:91:b3:11:b2:
                    2e:00:f0:01:b2:be:89:04:89:b5:e9:4d:eb:86:25:
                    96:33:7a:d9:83:c7:61:03:cc:b7:42:ac:c7:46:59:
                    a4:f2:16:6b:c8:c1:5a:7a:aa:96:2b:51:aa:00:9f:
                    7a:d8:69:24:50:fc:a5:7f:1b:64:56:36:af:e5:8e:
                    d7:20:45:d5:f1:9f:a4:1c:ca:c3:5a:12:18:4c:df:
                    50:93:8f:0f:e5:54:9e:48:0d:3e:2d:1b:43:18:7d:
                    52:90:d5:48:cb:85:5b:f6:2b:a1:b9:b7:38:1c:c4:
                    c9:34:c3:5f:4c:63:b2:cc:b8:d6:b6:f7:9b:64:a8:
                    1c:c2:92:34:57:70:1f:62:1a:28:ab:89:04:84:90:
                    1e:df:e2:2c:a9:84:1f:7c:7c:54:1d:3e:7d:f8:5f:
                    d7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C3:84:62:2C:90:47:8A:DA:43:A2:24:EE:74:E1:B3:AE:62:35:5B
            X509v3 Authority Key Identifier:
                keyid:54:7B:C2:8C:92:A2:29:A5:AC:78:C0:DE:28:7D:89:CE:37:72:64:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/AS60431.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60431

    Signature Algorithm: sha256WithRSAEncryption
         35:b6:75:eb:3d:07:8d:c3:5c:77:15:d5:28:9b:be:da:53:21:
         66:29:d3:f7:58:27:8c:7e:14:4f:6d:f0:31:ac:c0:ab:cf:80:
         e9:66:3f:e8:09:d1:86:7e:d1:c7:48:6c:ea:83:48:d3:d0:eb:
         3d:21:4d:92:00:68:1b:22:3f:45:9c:56:48:e1:ae:9c:86:44:
         8e:4c:49:90:5b:c0:a4:f4:3f:48:74:85:d5:4b:ec:57:99:0d:
         e8:e9:24:bc:a0:4e:41:5a:ec:6a:42:81:53:5c:21:44:e9:7d:
         67:15:e5:80:b5:12:a2:f4:a2:be:5b:c7:3e:e7:42:b0:11:53:
         87:22:c1:ae:f3:37:dd:33:a6:be:83:9f:b3:31:15:fa:21:7d:
         14:29:2a:2f:a9:84:5f:32:01:11:4a:f0:d1:82:05:8b:17:01:
         d7:f4:4c:bb:3d:e5:ab:1f:66:e3:c2:e9:0c:9d:21:ba:5d:e3:
         28:41:6e:7d:63:fd:0b:ce:b2:7d:28:e8:05:ce:87:9d:85:e8:
         96:53:45:73:5c:c6:f8:0b:1e:0f:a0:ef:52:c0:0c:90:66:b7:
         f4:90:40:64:73:d4:a9:ec:7a:26:c8:29:8e:10:f7:f8:4d:00:
         ca:e7:89:f2:3f:34:47:9a:72:bc:22:da:40:68:57:26:72:f4:
         a9:1c:4f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:07:21 2026 by rpki-client