Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/AS215375.asa
File:                     AS215375.asa (raw, json)
Hash identifier:          e0esF+VqvtsleiiMJnSuBMND1Z/LxmcXfmjsUwN+NLI=
Subject key identifier:   5F:C5:53:88:3C:36:68:C0:EC:29:C1:CF:DB:10:9C:94:79:7D:85:0B
Certificate issuer:       /CN=608c48b9a640c14c61aad439ab1fc44fa2a414ea
Certificate serial:       6B565EEE24970C27890F9A326F8C52DDBC3758EC
Authority key identifier: 60:8C:48:B9:A6:40:C1:4C:61:AA:D4:39:AB:1F:C4:4F:A2:A4:14:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/AS215375.asa
Signing time:             Thu 19 Mar 2026 18:20:32 +0000
ASPA not before:          Thu 19 Mar 2026 18:15:32 +0000
ASPA not after:           Thu 18 Mar 2027 18:20:32 +0000
Customer ASID:            215375
Providers:                AS: 212895
                          AS: 214138
                          AS: 215828
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 04:09:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:56:5e:ee:24:97:0c:27:89:0f:9a:32:6f:8c:52:dd:bc:37:58:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=608c48b9a640c14c61aad439ab1fc44fa2a414ea
        Validity
            Not Before: Mar 19 18:15:32 2026 GMT
            Not After : Mar 18 18:20:32 2027 GMT
        Subject: CN=5FC553883C3668C0EC29C1CFDB109C94797D850B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:92:0d:07:a3:0f:1b:58:9f:1a:bf:40:74:52:
                    f9:57:55:56:9b:76:55:13:ac:6a:0e:3a:04:53:34:
                    1f:b5:96:48:7d:1b:28:72:9d:c3:c7:9f:0f:f2:1e:
                    00:de:11:07:cb:1b:eb:db:66:80:2f:b5:fe:c2:cf:
                    c9:b1:0b:08:4a:92:bf:ac:d5:6f:e9:a4:94:de:b9:
                    78:c9:61:3a:9d:45:20:e3:72:e0:ca:3f:da:83:9a:
                    10:51:bd:b7:f4:a8:b3:61:a1:f3:01:2c:61:fc:7a:
                    bb:a1:d2:25:bb:cb:19:9a:a0:43:ad:b1:7e:48:d0:
                    bc:93:73:78:19:fc:ca:62:69:89:b5:68:13:48:23:
                    94:65:ed:45:61:96:59:3e:5e:fc:62:9b:4e:fb:21:
                    02:93:eb:21:00:5a:41:e6:d5:51:67:4a:07:bb:00:
                    36:e8:f6:54:c6:92:c3:2d:4d:c4:52:11:99:e7:a5:
                    89:48:50:2b:1a:ec:9b:19:c9:bb:54:62:87:8e:3d:
                    c6:7a:3e:1f:f7:0e:28:38:27:9b:c8:75:6b:80:33:
                    7c:6a:72:56:5e:5c:4f:1b:2e:6e:4f:fb:d4:d3:da:
                    f7:aa:0d:04:8d:00:ba:66:79:b1:da:25:9f:b9:de:
                    a5:6a:a9:9c:c2:e8:9f:26:41:6e:75:fd:99:dc:83:
                    da:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C5:53:88:3C:36:68:C0:EC:29:C1:CF:DB:10:9C:94:79:7D:85:0B
            X509v3 Authority Key Identifier:
                keyid:60:8C:48:B9:A6:40:C1:4C:61:AA:D4:39:AB:1F:C4:4F:A2:A4:14:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/AS215375.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215375

    Signature Algorithm: sha256WithRSAEncryption
         91:74:32:12:87:6c:68:c7:c0:a3:c9:04:d7:c0:a7:e2:5e:7a:
         50:f4:d8:be:44:de:f6:65:9d:5f:30:59:4a:7c:6c:14:18:f0:
         92:37:a9:68:b9:d4:57:ae:2c:73:c1:4e:91:c7:59:81:69:4e:
         95:49:33:7d:a7:66:bb:ff:48:a4:6d:14:52:87:ec:bf:b9:de:
         1a:72:fb:5c:f6:dd:de:6d:52:b3:96:3d:f2:74:82:4d:bf:ee:
         35:4a:24:be:3f:54:b9:3b:ca:a2:ce:a9:6c:b4:5b:0f:a6:e9:
         fa:4c:f5:2e:1b:aa:b6:5c:84:b7:50:42:3e:af:7f:0b:56:85:
         88:87:40:f9:4c:57:2f:ed:b5:22:27:cc:f6:4a:60:d9:66:94:
         20:bf:f9:13:b8:80:fe:9e:5a:2c:0e:b7:6a:ae:c1:06:d6:3c:
         3c:9c:58:84:bc:c1:ce:cb:d2:3f:dc:9d:bd:d3:30:f9:c6:1f:
         6b:d6:62:23:39:41:86:97:f7:27:3c:c7:d3:8e:41:12:57:34:
         9c:65:10:72:37:72:5e:17:2a:74:9c:13:89:48:2e:d8:ef:7e:
         25:1c:c3:d5:d6:ab:a7:dc:92:46:a5:3e:3c:8b:17:91:98:b6:
         f8:d5:59:81:c2:0d:27:4c:66:78:b5:25:32:e5:56:df:73:66:
         af:7e:ce:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 20:10:09 2026 by rpki-client