Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/AS207682.asa
File:                     AS207682.asa (raw, json)
Hash identifier:          fhh2Ure3D/HKdju+AW1OTNtro0XkWU+JYMcNSc6CWO0=
Subject key identifier:   59:8A:1D:2A:9B:75:9C:80:B1:01:5B:01:C1:A2:41:26:3D:D5:13:69
Certificate issuer:       /CN=317edb3410058e086217c50fb97009dde70a6f1a
Certificate serial:       15822E7A75FE1F97B28E2AF3C6C29669F4385D08
Authority key identifier: 31:7E:DB:34:10:05:8E:08:62:17:C5:0F:B9:70:09:DD:E7:0A:6F:1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/AS207682.asa
Signing time:             Mon 11 May 2026 17:44:39 +0000
ASPA not before:          Mon 11 May 2026 17:39:39 +0000
ASPA not after:           Mon 10 May 2027 17:44:39 +0000
Customer ASID:            207682
Providers:                AS: 20473
                          AS: 215085
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:82:2e:7a:75:fe:1f:97:b2:8e:2a:f3:c6:c2:96:69:f4:38:5d:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=317edb3410058e086217c50fb97009dde70a6f1a
        Validity
            Not Before: May 11 17:39:39 2026 GMT
            Not After : May 10 17:44:39 2027 GMT
        Subject: CN=598A1D2A9B759C80B1015B01C1A241263DD51369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:41:a2:5b:2a:53:8f:a2:61:3c:e0:c2:03:0b:
                    32:8b:c1:3c:48:72:f3:19:c0:83:50:13:09:2b:bd:
                    72:80:93:e2:c5:94:77:63:7c:e0:60:e6:56:1e:30:
                    da:9a:a4:51:23:77:67:a5:e4:b4:4a:66:10:b4:29:
                    19:43:00:67:d4:bc:3a:15:2a:23:bc:e6:7a:3d:92:
                    89:71:b1:53:9f:53:07:ea:61:30:7b:dd:34:c5:fa:
                    87:59:56:43:79:71:8e:89:3f:25:6b:f9:ed:67:d7:
                    bf:db:75:93:93:1c:52:61:ca:ff:76:34:0d:81:5c:
                    4d:dc:4a:84:8b:96:fa:67:01:b9:db:97:fc:28:bc:
                    65:fc:61:a2:66:5d:c0:53:b9:6b:62:e8:70:d7:94:
                    76:85:e1:0d:ce:d5:db:fa:e4:60:f3:68:a7:f9:25:
                    cc:f7:7d:e3:f8:99:51:11:4c:8e:26:ca:04:3f:19:
                    c9:e2:89:93:3c:95:b5:ed:3c:aa:f7:e3:2e:20:6e:
                    86:f3:a7:a1:63:32:35:58:63:cf:5f:5c:0c:32:e6:
                    a4:e9:e2:d7:70:9f:10:82:8b:12:2e:af:3f:8d:73:
                    56:ab:e0:b2:4b:fe:d3:df:aa:53:96:1b:9c:db:d6:
                    6a:0e:97:f9:bf:95:92:bb:d6:ee:a0:76:aa:95:22:
                    ea:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:8A:1D:2A:9B:75:9C:80:B1:01:5B:01:C1:A2:41:26:3D:D5:13:69
            X509v3 Authority Key Identifier:
                keyid:31:7E:DB:34:10:05:8E:08:62:17:C5:0F:B9:70:09:DD:E7:0A:6F:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/AS207682.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207682

    Signature Algorithm: sha256WithRSAEncryption
         0b:04:94:41:1e:2f:00:ca:aa:7e:35:0b:e3:7b:16:c9:c7:58:
         c5:f5:d7:0f:a6:07:81:c3:ab:31:69:b9:54:b3:ca:59:3f:7b:
         90:21:f4:d0:4c:89:bc:40:e3:ae:6a:13:c0:db:8d:ca:3b:1d:
         34:00:a4:1c:ed:6a:f0:c4:2f:32:4f:e3:4e:21:50:72:07:47:
         6b:9b:6d:54:73:9e:27:bd:7d:30:16:79:07:51:37:b0:6e:e7:
         81:9c:e2:14:55:32:2b:ac:30:b5:f3:c8:83:54:d8:05:34:18:
         46:b3:bf:89:9b:55:d5:26:3c:cd:0e:38:2a:e6:72:50:89:96:
         25:4b:62:c4:79:07:f4:cc:d3:50:20:d9:3a:ff:51:e5:2f:ed:
         fe:92:b5:c8:81:f3:19:5a:be:17:84:42:bf:43:46:d1:3c:db:
         4b:7f:6a:f9:3f:2f:57:94:77:07:3e:c5:6e:2a:a0:b2:ee:e6:
         8c:43:2f:bc:c3:4e:b0:25:98:0c:ff:e3:77:04:04:88:7f:3e:
         27:50:10:e5:fa:8f:e9:c6:d6:25:7e:86:fb:cd:52:c4:2f:a7:
         83:d9:e5:a8:2a:62:b0:05:bb:2c:bd:af:92:5a:96:77:0b:bb:
         56:cc:ab:e0:55:fa:fd:ac:1d:87:a6:32:5c:b7:90:35:11:09:
         f0:1e:54:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:12:37 2026 by rpki-client