Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/AS215685.asa
File:                     AS215685.asa (raw, json)
Hash identifier:          jsJe1SwvKSB01MzBV5bC3L32lpYFXqiVtMOH7oRkd3E=
Subject key identifier:   CA:C3:83:33:B3:18:A4:EA:5C:1E:BA:FB:27:DB:C1:08:C9:11:D0:1E
Certificate issuer:       /CN=391f20f26aa6d63598ff3025cddbdb4b9c9ab67d
Certificate serial:       0A27A44F67B6CF083DAF68450B09A7A54024EE0C
Authority key identifier: 39:1F:20:F2:6A:A6:D6:35:98:FF:30:25:CD:DB:DB:4B:9C:9A:B6:7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OR8g8mqm1jWY_zAlzdvbS5yatn0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/AS215685.asa
Signing time:             Sun 10 May 2026 20:47:05 +0000
ASPA not before:          Sun 10 May 2026 20:42:05 +0000
ASPA not after:           Sun 09 May 2027 20:47:05 +0000
Customer ASID:            215685
Providers:                AS: 1299
                          AS: 6939
                          AS: 34927
                          AS: 52025
                          AS: 207252
                          AS: 215638
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OR8g8mqm1jWY_zAlzdvbS5yatn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 10:03:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:27:a4:4f:67:b6:cf:08:3d:af:68:45:0b:09:a7:a5:40:24:ee:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391f20f26aa6d63598ff3025cddbdb4b9c9ab67d
        Validity
            Not Before: May 10 20:42:05 2026 GMT
            Not After : May  9 20:47:05 2027 GMT
        Subject: CN=CAC38333B318A4EA5C1EBAFB27DBC108C911D01E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:47:49:35:57:4b:3d:0f:54:65:61:89:24:f2:
                    ed:72:5a:2f:12:0b:35:e3:59:e6:73:3e:22:b5:47:
                    34:2e:c5:f0:7a:bb:6b:a8:66:e9:69:1d:6d:ae:d8:
                    a8:a0:17:d9:05:40:23:bc:5f:ac:ea:6a:93:67:1c:
                    03:a0:07:07:23:40:53:33:2d:dc:a8:b4:a6:22:27:
                    a6:fa:90:0f:e7:a3:48:75:79:9e:19:d9:ac:37:e1:
                    78:55:18:4b:ab:d4:ba:75:28:7b:ef:07:0c:4b:23:
                    2f:66:1a:7b:f8:16:8f:6c:b8:97:d7:a6:b4:48:60:
                    84:8f:27:24:3f:60:ba:9e:73:49:1d:27:07:9c:a5:
                    4b:e6:76:e6:b8:a1:50:36:c6:ac:a7:07:99:f4:3d:
                    00:4d:a7:8d:89:27:3b:4e:4c:93:4d:ca:f2:2a:57:
                    f9:ae:79:f6:ec:47:d6:93:a6:46:f4:9a:c1:a5:d0:
                    13:fd:93:96:de:13:72:e4:ea:9e:a8:cd:e1:80:db:
                    a9:50:f5:ba:bc:ea:fb:d5:5e:ae:11:5c:13:80:4e:
                    b8:cc:af:fa:cf:a2:01:42:fe:43:96:d4:f2:1a:3a:
                    d7:1c:ee:f0:38:3e:51:c3:23:67:87:5c:f4:ba:61:
                    6c:2d:97:a0:7b:64:e9:3d:d2:d0:e3:84:e2:d8:aa:
                    05:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:C3:83:33:B3:18:A4:EA:5C:1E:BA:FB:27:DB:C1:08:C9:11:D0:1E
            X509v3 Authority Key Identifier:
                keyid:39:1F:20:F2:6A:A6:D6:35:98:FF:30:25:CD:DB:DB:4B:9C:9A:B6:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OR8g8mqm1jWY_zAlzdvbS5yatn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/AS215685.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215685

    Signature Algorithm: sha256WithRSAEncryption
         43:32:4b:48:56:3e:85:e2:c2:c5:ef:aa:29:4c:34:6e:a5:a2:
         e3:1f:37:cd:66:c1:13:e6:fe:29:58:69:b7:9e:5d:3d:79:78:
         a9:37:84:35:51:74:67:1d:8d:33:f9:4b:c7:87:9b:2e:e7:ce:
         95:d7:7a:46:ff:2f:0d:68:a7:fd:19:b3:5b:41:42:6e:f9:9e:
         e1:1b:10:75:5c:a6:69:27:1c:f9:40:1a:b4:8d:68:93:2f:18:
         84:cd:50:7a:3a:b3:e9:7d:b4:6e:b3:19:b6:b2:17:d2:5c:4d:
         6e:48:46:cd:79:99:b2:3a:31:67:23:5d:55:24:21:8c:2f:a6:
         19:8c:75:b4:04:82:22:dc:94:07:61:ca:60:90:5c:2e:69:18:
         09:82:ff:72:4c:2c:eb:82:fd:04:d2:17:e0:c2:88:04:a7:86:
         58:39:0c:10:e7:ec:b1:ac:c4:ce:74:4a:44:76:6d:3e:64:7b:
         ae:d3:68:88:e7:38:48:f5:5b:9a:34:c0:56:35:2e:5b:8d:1b:
         97:cf:fc:69:72:e5:88:36:e6:a4:4d:89:91:6c:5a:48:05:d5:
         3b:3f:a9:41:95:79:ba:61:2e:28:93:08:6b:21:d5:35:cb:b1:
         2c:56:fa:85:53:6f:92:82:75:57:c4:b4:69:14:4e:41:d0:00:
         cd:53:34:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:56:44 2026 by rpki-client