Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/AS204211.asa
File:                     AS204211.asa (raw, json)
Hash identifier:          cBiue6WJ0sKdXPKGWgz30rC0A9oOIbih9n3rrpwWV+s=
Subject key identifier:   14:55:1A:5B:E6:A8:0A:21:2E:24:3C:90:0B:72:43:5B:92:A6:41:9B
Certificate issuer:       /CN=c18020bdc5e6ba4a5474d3aa0da4a962a68d98ab
Certificate serial:       1FF52DBED05205F589448D8B9EF96283455957F8
Authority key identifier: C1:80:20:BD:C5:E6:BA:4A:54:74:D3:AA:0D:A4:A9:62:A6:8D:98:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/AS204211.asa
Signing time:             Sat 06 Jun 2026 03:35:52 +0000
ASPA not before:          Sat 06 Jun 2026 03:30:52 +0000
ASPA not after:           Sat 05 Jun 2027 03:35:52 +0000
Customer ASID:            204211
Providers:                AS: 174
                          AS: 6939
                          AS: 40929
                          AS: 44324
                          AS: 47778
                          AS: 51087
                          AS: 53667
                          AS: 53808
                          AS: 62246
                          AS: 139317
                          AS: 151673
                          AS: 201944
                          AS: 206069
                          AS: 207529
                          AS: 210176
                          AS: 210352
                          AS: 210440
                          AS: 210773
                          AS: 213605
                          AS: 215172
                          AS: 401804
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:f5:2d:be:d0:52:05:f5:89:44:8d:8b:9e:f9:62:83:45:59:57:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c18020bdc5e6ba4a5474d3aa0da4a962a68d98ab
        Validity
            Not Before: Jun  6 03:30:52 2026 GMT
            Not After : Jun  5 03:35:52 2027 GMT
        Subject: CN=14551A5BE6A80A212E243C900B72435B92A6419B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:82:dd:e8:0f:c5:80:fd:f5:7f:7d:f8:f5:11:
                    91:1b:7f:b8:dc:e6:f8:33:3f:9b:f0:c1:2d:f2:a2:
                    3e:32:50:a4:b7:e6:52:fb:9c:21:32:ef:c7:aa:ab:
                    7c:40:97:bb:f9:e5:9b:3a:9f:32:12:a7:71:0c:07:
                    a4:a4:d3:58:7d:3a:17:36:b8:4c:e7:49:e3:c3:62:
                    a2:fb:10:5c:f0:8e:dd:73:ce:4a:d4:a0:59:d5:3c:
                    da:62:86:87:37:e3:57:ea:b3:c1:45:0a:0c:b8:45:
                    c3:f9:61:0a:64:2a:56:28:9e:71:4f:87:cb:d6:6e:
                    6c:f0:fb:81:eb:d9:f7:2d:e6:de:f5:85:09:89:49:
                    f5:a0:b3:f8:62:7e:aa:2a:81:d2:af:28:ca:71:5d:
                    0d:4f:7f:cc:8c:a5:cb:65:9f:29:ad:2d:c7:78:05:
                    62:cc:9e:32:09:6d:bc:23:86:4a:63:99:a8:e5:6b:
                    97:04:50:c3:52:9d:54:12:76:de:06:7d:24:78:26:
                    cf:47:41:a2:e8:68:72:d6:03:45:cb:06:0a:e3:26:
                    c3:0d:a4:b4:77:4e:62:ac:1a:c1:da:b0:b0:16:65:
                    ee:36:1d:79:bf:a7:68:9d:ad:3c:08:76:43:9a:08:
                    17:1d:cd:8a:95:5b:47:ff:61:06:ee:5b:f4:41:e4:
                    ea:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:55:1A:5B:E6:A8:0A:21:2E:24:3C:90:0B:72:43:5B:92:A6:41:9B
            X509v3 Authority Key Identifier:
                keyid:C1:80:20:BD:C5:E6:BA:4A:54:74:D3:AA:0D:A4:A9:62:A6:8D:98:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/AS204211.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204211

    Signature Algorithm: sha256WithRSAEncryption
         bf:a1:e3:31:ec:d9:6a:2b:c5:98:60:51:1d:a3:3a:af:8c:62:
         d4:bc:ce:46:db:7c:a8:bf:bc:d7:23:95:cb:7c:f2:79:5d:42:
         e5:82:c1:73:32:ab:fd:88:2a:18:76:b4:70:2c:1e:84:57:a5:
         ec:47:c9:22:55:f7:79:99:df:90:9c:67:a8:af:2b:21:7f:31:
         5d:1c:29:9f:e3:b7:86:22:ac:be:35:5e:01:5d:43:89:05:ce:
         d3:53:2f:04:64:2a:fc:07:8e:17:5f:9c:40:aa:06:ab:05:87:
         b3:d9:82:25:d8:b6:dc:f2:cb:89:e0:b0:d9:85:9b:7b:31:4d:
         81:00:12:d5:8f:d4:4b:81:91:1d:3e:90:7a:bd:16:15:87:66:
         98:6d:98:d5:ff:5c:e2:c9:02:d4:35:b1:9f:1b:30:4e:13:e1:
         12:bf:fa:a6:32:6d:c8:89:f8:1d:93:8d:50:df:3b:9d:d8:bd:
         1a:fd:28:a2:04:04:0c:cb:64:21:d1:19:0b:6c:90:c1:cf:84:
         1e:eb:a2:83:a7:83:99:8b:92:e5:fd:8c:b9:b2:f8:e6:86:55:
         e3:e2:69:75:83:fd:72:fb:53:21:cb:8e:ff:94:10:3a:fd:20:
         ce:fa:58:22:2b:44:37:17:df:e9:fa:69:7a:7f:f2:32:a2:15:
         67:9a:67:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:38:45 2026 by rpki-client