Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/AS202939.asa
File:                     AS202939.asa (raw, json)
Hash identifier:          iDIu0hKaPS/zg+NagX3RrC3gMBM2QJ5Y4u7QGwmqP8U=
Subject key identifier:   4F:08:6B:2D:94:D3:29:CB:99:BA:35:86:72:A6:25:F2:81:8C:88:EE
Certificate issuer:       /CN=40f02fb7dfe9ac800a1b1b693709c2f03c5ed98b
Certificate serial:       353A401D1A7E421538DD1DBC594C0ED2866042B1
Authority key identifier: 40:F0:2F:B7:DF:E9:AC:80:0A:1B:1B:69:37:09:C2:F0:3C:5E:D9:8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/AS202939.asa
Signing time:             Wed 29 Apr 2026 02:45:36 +0000
ASPA not before:          Wed 29 Apr 2026 02:40:36 +0000
ASPA not after:           Wed 28 Apr 2027 02:45:36 +0000
Customer ASID:            202939
Providers:                AS: 6939
                          AS: 7720
                          AS: 14447
                          AS: 17433
                          AS: 27523
                          AS: 31898
                          AS: 34927
                          AS: 41051
                          AS: 44324
                          AS: 62246
                          AS: 202662
                          AS: 206069
                          AS: 209533
                          AS: 211509
                          AS: 212895
                          AS: 215172
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:3a:40:1d:1a:7e:42:15:38:dd:1d:bc:59:4c:0e:d2:86:60:42:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f02fb7dfe9ac800a1b1b693709c2f03c5ed98b
        Validity
            Not Before: Apr 29 02:40:36 2026 GMT
            Not After : Apr 28 02:45:36 2027 GMT
        Subject: CN=4F086B2D94D329CB99BA358672A625F2818C88EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:26:2f:6c:5e:16:a6:c8:fd:26:62:3c:79:f6:
                    a2:6c:88:1b:4e:d2:e9:67:ab:b4:ee:0a:e0:6a:ed:
                    34:a8:88:42:cf:ab:16:ab:d4:65:b5:2b:32:63:0e:
                    45:0e:2f:c8:c1:32:e3:40:b0:14:1c:ad:1e:fe:27:
                    a2:2f:ce:51:51:52:e7:25:2b:83:af:62:1a:a3:62:
                    cd:00:e8:16:95:1b:00:27:1d:ab:ca:3e:be:3b:5b:
                    d9:e9:00:ae:f1:51:45:42:47:8f:31:57:e2:9e:56:
                    3d:3a:ef:a6:1d:d3:04:1f:8c:57:39:5c:25:20:cc:
                    3c:91:03:af:aa:32:26:bd:dc:48:e3:13:70:68:83:
                    b0:92:06:ea:23:40:b5:82:15:09:ef:5f:a1:c7:b7:
                    f3:42:65:94:aa:d4:21:a2:17:9e:42:a6:3c:e0:ec:
                    1a:61:40:d5:3e:72:73:b6:b3:96:fb:16:65:84:7c:
                    17:3b:49:5b:a0:a3:18:ff:d6:94:65:79:cb:63:1a:
                    4f:91:f4:43:0b:cb:9d:00:35:d7:98:0d:95:01:23:
                    87:82:c2:a3:fe:84:03:8e:84:16:24:d7:db:01:bf:
                    ac:0f:ba:ed:7d:36:0c:3f:13:a0:40:37:ce:37:74:
                    aa:70:16:a0:74:af:70:20:3e:31:0f:7e:b1:05:f7:
                    63:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:08:6B:2D:94:D3:29:CB:99:BA:35:86:72:A6:25:F2:81:8C:88:EE
            X509v3 Authority Key Identifier:
                keyid:40:F0:2F:B7:DF:E9:AC:80:0A:1B:1B:69:37:09:C2:F0:3C:5E:D9:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/AS202939.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202939

    Signature Algorithm: sha256WithRSAEncryption
         a7:ec:20:87:5a:56:ab:fe:e0:84:a5:72:35:49:d3:75:de:75:
         9f:f0:7b:c5:71:0f:0c:2c:b1:fe:31:5e:4f:b0:cb:bc:5d:af:
         c0:a4:00:64:1d:5d:7b:b2:22:55:04:f0:33:1b:cd:0a:ec:8f:
         d7:93:8a:57:0c:4f:d8:da:4a:6d:8a:e7:13:43:54:d7:5a:9c:
         b1:b9:fa:3f:aa:22:d9:e8:ae:78:d7:c4:bd:44:02:f4:6b:ca:
         35:b9:d3:2c:1f:12:6b:23:96:a0:03:c2:32:07:08:ef:ac:ae:
         13:3b:0b:a1:5e:72:ac:9a:e5:67:b4:be:05:63:6d:0e:cd:24:
         b1:87:58:af:6c:ee:47:92:e8:8b:5e:97:9a:ac:88:5f:18:33:
         e7:0e:fa:2f:f5:62:30:1f:bf:0a:32:de:a2:a4:38:99:f6:30:
         23:07:a0:05:66:67:97:66:03:65:de:1f:6e:73:c4:85:e6:54:
         79:93:aa:e3:10:90:fc:18:3d:d1:5f:3f:60:df:60:eb:80:08:
         37:27:f2:3c:b0:0b:7e:8d:21:f8:00:72:c3:4d:6a:3b:fa:1d:
         dd:b4:e4:7c:8f:84:3a:a4:af:f1:cb:26:61:79:ea:a6:6d:e3:
         71:e7:ac:d2:75:ec:92:5c:bb:2e:9c:bd:ed:da:06:bd:2b:61:
         6d:1f:ce:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:13:47 2026 by rpki-client