Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/AS215085.asa
File:                     AS215085.asa (raw, json)
Hash identifier:          U3O4zRuQeb7MG2IwgLoOGYNSGnZPEXOar9EBCzjvh3o=
Subject key identifier:   BE:22:39:62:8C:76:48:8A:6A:35:C2:1E:7D:C2:49:22:73:2E:35:7F
Certificate issuer:       /CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
Certificate serial:       4482845A3EAF404E0343E4266BAF5F164993D391
Authority key identifier: DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/AS215085.asa
Signing time:             Mon 13 Jul 2026 18:20:55 +0000
ASPA not before:          Mon 13 Jul 2026 18:15:55 +0000
ASPA not after:           Mon 12 Jul 2027 18:20:55 +0000
Customer ASID:            215085
Providers:                AS: 6939
                          AS: 34927
                          AS: 35133
                          AS: 42093
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 08:58:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:82:84:5a:3e:af:40:4e:03:43:e4:26:6b:af:5f:16:49:93:d3:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
        Validity
            Not Before: Jul 13 18:15:55 2026 GMT
            Not After : Jul 12 18:20:55 2027 GMT
        Subject: CN=BE2239628C76488A6A35C21E7DC24922732E357F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2e:c5:9d:a6:a3:92:31:af:91:ed:ae:ee:66:
                    77:ab:1b:f2:fd:b4:b4:d9:3f:29:0d:f4:0e:a2:7c:
                    7f:a7:60:93:54:ab:fb:2b:5b:cc:2e:78:b4:b6:99:
                    96:ae:ab:74:6b:05:d5:b1:13:40:17:ea:27:56:0b:
                    c0:54:ca:1c:04:7a:e4:ba:ad:48:94:ad:da:21:47:
                    34:7b:76:ac:d3:85:57:4a:15:7b:ed:d7:9c:27:fc:
                    14:00:3d:e4:89:66:4a:10:3a:1a:4b:e9:34:1f:71:
                    8b:01:f5:a8:15:b6:43:bc:ec:27:15:f9:72:6e:77:
                    0f:0e:9b:06:5e:41:fd:9d:b7:56:eb:56:8b:90:85:
                    77:d9:a6:77:c6:07:59:bf:07:17:ce:6e:98:1e:a3:
                    7b:53:ce:25:ff:1f:0a:9a:65:58:a3:04:04:12:9e:
                    ab:3c:88:e9:de:be:b8:ea:48:71:3c:de:c6:26:17:
                    d7:dd:42:8a:2c:f4:66:a9:bc:ad:3c:6d:12:71:b3:
                    21:d2:ef:0b:ec:e4:3c:f0:56:bb:ab:4e:d2:cd:88:
                    14:5c:9d:9d:f7:2d:bb:cc:3f:81:57:b9:18:a3:cf:
                    9e:34:01:9b:4b:73:61:3e:2a:ad:37:cf:5c:e2:6e:
                    37:94:c0:09:0b:0b:d4:0c:31:0f:2a:8b:c7:e0:74:
                    94:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:22:39:62:8C:76:48:8A:6A:35:C2:1E:7D:C2:49:22:73:2E:35:7F
            X509v3 Authority Key Identifier:
                keyid:DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/AS215085.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215085

    Signature Algorithm: sha256WithRSAEncryption
         18:b2:e9:d8:0d:b8:09:a8:41:65:8d:d7:7c:91:36:42:fa:1e:
         2f:cb:77:73:05:d6:61:76:e9:94:b3:f1:bc:78:53:45:e0:72:
         db:bb:ee:08:28:b3:78:77:6b:c9:04:e4:42:02:04:28:5e:93:
         ba:ad:e7:59:41:c2:d0:a6:fe:29:65:f5:c9:42:fa:12:a1:43:
         f4:61:4d:5d:67:c0:f5:63:a4:92:6d:86:a9:d2:e6:2f:38:38:
         4c:da:29:1d:1d:e1:85:84:41:3c:4e:2f:21:d6:5d:ad:da:af:
         81:4e:05:d3:70:9f:7b:cd:0f:06:c7:ea:2d:d1:e7:72:14:a6:
         5a:e7:69:1e:b6:35:3a:f7:99:11:ea:ef:0b:61:d3:80:33:3b:
         36:85:cc:14:0a:ba:f8:d0:9e:df:26:98:d0:3c:73:00:68:03:
         b2:0a:7c:9c:25:f6:66:b9:bb:ff:8b:68:c8:e8:18:aa:04:ca:
         d5:e0:12:6a:66:3f:ff:be:2b:da:67:c1:c2:0e:1c:f7:46:2a:
         0e:5e:94:85:ac:43:23:d6:cd:6d:4e:ae:40:65:59:91:f9:fa:
         cb:a0:af:94:1d:b9:0c:e8:c7:c4:4b:51:da:5e:b9:6a:a9:51:
         db:35:49:c3:d5:16:b2:47:ad:35:43:03:71:b2:70:b3:2e:53:
         eb:b1:ae:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:58:42 2026 by rpki-client