Autonomous System Provider Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/AS216299.asa
File: AS216299.asa (raw, json)
Hash identifier: I866WwaCMkBkfDG0RdBvujZmrBd6yGQBEMDG+oFbDlQ=
Subject key identifier: 89:C9:F7:0C:4A:5B:3D:A9:A2:B6:0B:A6:CD:EB:8E:C7:4D:05:4D:ED
Certificate issuer: /CN=4ec249b7af3ee69c5bbdf3c7f4cbee1eaaec494f
Certificate serial: 19111A0B59A687DF4463EE35207616F826A16718
Authority key identifier: 4E:C2:49:B7:AF:3E:E6:9C:5B:BD:F3:C7:F4:CB:EE:1E:AA:EC:49:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/AS216299.asa
Signing time: Sun 12 Jul 2026 17:02:56 +0000
ASPA not before: Sun 12 Jul 2026 16:57:56 +0000
ASPA not after: Sun 11 Jul 2027 17:02:56 +0000
Customer ASID: 216299
Providers: AS: 6939
AS: 7720
AS: 17433
AS: 27523
AS: 40792
AS: 44324
AS: 47778
AS: 51087
AS: 52025
AS: 53667
AS: 53808
AS: 199310
AS: 201386
AS: 204539
AS: 206069
AS: 207529
AS: 209533
AS: 209554
AS: 213605
AS: 216211
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl
rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:11:1a:0b:59:a6:87:df:44:63:ee:35:20:76:16:f8:26:a1:67:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec249b7af3ee69c5bbdf3c7f4cbee1eaaec494f
Validity
Not Before: Jul 12 16:57:56 2026 GMT
Not After : Jul 11 17:02:56 2027 GMT
Subject: CN=89C9F70C4A5B3DA9A2B60BA6CDEB8EC74D054DED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8f:e4:c2:4e:52:0f:e4:a0:75:c9:2f:e4:2c:
88:ad:4e:26:00:40:62:23:c0:64:51:aa:31:d6:ec:
bb:db:ee:df:69:3f:55:32:5d:79:1a:f8:c0:3c:70:
d2:18:e3:e0:fe:a6:c4:7a:14:c0:f6:45:30:b5:04:
81:a1:c5:6e:b4:03:cb:89:0a:be:93:17:05:4f:84:
b9:6a:2a:9a:3a:89:a4:1e:fc:72:51:ed:68:e2:09:
8f:27:ac:4f:97:ce:61:a5:6c:5e:da:29:d3:6d:33:
e5:c7:1b:ef:44:52:44:d5:e2:da:10:92:f6:99:61:
a2:a5:ea:19:39:7e:cc:08:f0:b6:0c:d5:6b:90:4d:
99:9b:ae:94:83:3b:4e:7e:ed:b4:e7:6f:69:55:44:
09:58:bf:5d:6e:16:d4:fa:ac:03:b0:4f:e8:ac:fd:
e6:e1:ad:5a:99:30:7d:a2:e5:98:e0:74:98:48:4b:
6b:9e:77:00:77:a0:53:73:42:ba:06:d8:04:c6:1e:
fe:4e:74:bb:4e:bf:2a:33:f7:a2:56:08:40:58:2d:
db:9e:da:d4:52:4f:86:29:71:f0:9f:3e:2c:b0:5d:
3c:85:1f:31:2c:60:8b:0a:3a:7d:f4:2c:f6:47:af:
bc:4e:2b:30:82:42:ec:9c:2b:15:14:7a:5f:5c:d4:
29:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C9:F7:0C:4A:5B:3D:A9:A2:B6:0B:A6:CD:EB:8E:C7:4D:05:4D:ED
X509v3 Authority Key Identifier:
keyid:4E:C2:49:B7:AF:3E:E6:9C:5B:BD:F3:C7:F4:CB:EE:1E:AA:EC:49:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/AS216299.asa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216299
Signature Algorithm: sha256WithRSAEncryption
36:b8:60:dd:43:ce:b1:0f:df:69:34:99:65:df:a1:7c:f1:93:
08:2b:1c:15:5e:95:74:62:66:4b:4c:73:1d:6c:9e:fd:b1:00:
9e:77:db:bf:a0:bb:eb:56:58:82:7d:a0:d4:8b:75:43:2a:10:
72:d8:58:68:01:9c:85:49:5d:df:82:c3:49:1e:02:30:e0:d9:
07:5b:1e:73:5a:0f:db:10:77:76:7a:14:86:6a:fb:92:5c:9d:
46:25:20:d1:f7:f3:6d:65:21:55:64:5b:ae:52:a8:13:db:25:
e0:1c:16:bf:8f:46:7e:bc:e3:79:c1:88:2c:3f:47:51:f2:da:
87:24:c5:29:a5:50:76:53:a7:8c:1e:9e:db:b5:77:e8:2e:6c:
91:b7:4b:27:1e:25:e7:6b:aa:d2:c6:69:29:80:eb:e1:eb:19:
31:0b:e2:8e:58:de:82:61:80:31:5c:fb:31:7b:62:7f:87:b1:
49:23:60:3b:3d:0c:da:78:c6:eb:79:ae:ea:26:58:4c:97:55:
e2:af:65:4c:ac:bf:f2:5c:49:29:fe:bf:42:1b:9b:c5:17:78:
8d:75:33:fd:96:f3:b7:c7:a3:4f:44:4b:ca:5e:52:e8:b7:a1:
24:db:b3:e7:5e:d6:87:5c:b0:f2:42:9d:0f:62:58:ba:a8:53:
cf:31:12:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:58:34 2026 by rpki-client