Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/AS202335.asa
File:                     AS202335.asa (raw, json)
Hash identifier:          0NdiPm1MTZqzdzR4lGr6HP2lgZbomN/E7sx//bw33I0=
Subject key identifier:   5A:FE:FE:F9:7B:ED:4B:91:DC:45:D1:F8:39:79:F9:23:C2:D7:D9:93
Certificate issuer:       /CN=13ed27ebf744512bb7c4303fd2fe8b94e4486242
Certificate serial:       3315C40DE2EF30AF225815AD6715D26A5318CBC9
Authority key identifier: 13:ED:27:EB:F7:44:51:2B:B7:C4:30:3F:D2:FE:8B:94:E4:48:62:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-0n6_dEUSu3xDA_0v6LlORIYkI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/AS202335.asa
Signing time:             Sun 15 Mar 2026 14:42:29 +0000
ASPA not before:          Sun 15 Mar 2026 14:37:29 +0000
ASPA not after:           Sun 14 Mar 2027 14:42:29 +0000
Customer ASID:            202335
Providers:                AS: 27523
                          AS: 40929
                          AS: 44324
                          AS: 47778
                          AS: 52025
                          AS: 53808
                          AS: 199310
                          AS: 202782
                          AS: 203314
                          AS: 215172
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-0n6_dEUSu3xDA_0v6LlORIYkI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 12:57:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:15:c4:0d:e2:ef:30:af:22:58:15:ad:67:15:d2:6a:53:18:cb:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ed27ebf744512bb7c4303fd2fe8b94e4486242
        Validity
            Not Before: Mar 15 14:37:29 2026 GMT
            Not After : Mar 14 14:42:29 2027 GMT
        Subject: CN=5AFEFEF97BED4B91DC45D1F83979F923C2D7D993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:09:94:0e:b1:97:7e:aa:3f:24:0d:a6:e5:ff:
                    2b:20:b6:7b:1a:c9:a4:a0:2f:ea:ac:ec:b2:0d:7c:
                    49:09:7b:84:30:1e:bf:29:c9:08:a2:c3:93:98:a4:
                    0e:4b:fc:33:e5:55:19:47:18:71:f9:87:5c:c2:bf:
                    3c:eb:37:6f:b3:b6:52:6f:eb:8b:51:62:71:7d:d4:
                    8f:c4:cc:cb:8c:46:44:e5:2f:b0:ad:32:19:0b:ed:
                    24:d7:4c:47:18:36:86:1d:e6:6c:43:25:17:4d:d9:
                    22:06:0d:49:f8:db:cc:dd:a9:70:39:2e:86:32:a0:
                    fc:4d:90:07:08:9b:09:f6:45:7d:05:37:1f:9e:97:
                    09:eb:9d:18:30:42:03:fd:9f:2c:f8:cd:64:1a:a2:
                    16:dd:6c:f6:96:9c:5e:56:29:3b:3a:78:e6:60:a7:
                    6f:42:0d:32:99:7a:07:4c:2b:21:6d:82:58:a9:8a:
                    e3:d5:ff:43:36:2e:2c:d4:e6:bf:f9:91:ac:87:0f:
                    39:bf:9a:03:1f:a1:e7:c2:1a:16:42:b4:c4:45:bb:
                    3d:3b:d8:78:9a:fa:b3:4f:9c:31:15:45:b3:7d:e9:
                    e1:40:02:40:6f:8a:db:fb:d0:2d:6c:c6:90:08:24:
                    ce:e3:ce:17:5c:eb:b2:5a:d0:9d:0e:58:e4:87:0b:
                    96:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:FE:FE:F9:7B:ED:4B:91:DC:45:D1:F8:39:79:F9:23:C2:D7:D9:93
            X509v3 Authority Key Identifier:
                keyid:13:ED:27:EB:F7:44:51:2B:B7:C4:30:3F:D2:FE:8B:94:E4:48:62:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-0n6_dEUSu3xDA_0v6LlORIYkI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/AS202335.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202335

    Signature Algorithm: sha256WithRSAEncryption
         6d:43:fc:d2:42:6d:9c:71:30:4e:71:25:64:8b:d8:3d:3b:a0:
         f7:5a:6b:01:47:7f:96:f7:fb:c7:47:3d:5a:7e:8c:0e:83:71:
         57:89:73:7f:10:fb:14:12:f8:55:0b:98:5a:55:8b:5b:cf:73:
         91:00:af:c0:5f:1a:01:ca:bf:fe:79:1a:c6:a1:73:22:05:fc:
         f6:28:b5:c9:be:19:91:25:d8:50:49:7a:c4:ca:94:94:db:9e:
         46:09:67:ea:1e:93:d9:f8:fd:5a:4f:8a:df:2f:b9:75:fe:bb:
         9c:e0:df:c0:e2:79:9b:fa:86:c4:38:97:78:f1:07:bb:a7:1b:
         73:23:3a:90:3a:89:a2:0d:1e:88:47:ac:ac:c5:6c:19:fd:1d:
         40:47:45:de:95:0a:ff:0e:bf:60:fe:a1:e5:32:e3:0f:25:a5:
         79:e1:6d:9c:7a:74:fd:f8:f8:55:9e:3a:97:17:fd:98:46:98:
         3f:ba:f3:69:89:dd:d7:84:eb:21:80:74:3a:08:47:98:7d:e9:
         04:ed:ac:ba:f1:1f:47:a0:56:03:9a:12:4f:57:a7:e0:c0:43:
         e1:e3:5f:29:07:e2:b0:c1:17:70:c4:24:67:ca:59:30:91:ea:
         49:ea:0c:eb:62:9a:e3:92:9c:7f:ca:71:81:07:fb:2e:b2:dc:
         e4:d3:62:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 20:04:50 2026 by rpki-client