Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/AS215685.asa
File:                     AS215685.asa (raw, json)
Hash identifier:          6TRHOLuGT0nJ/FAO9vnv7niOlVTsKVj9zaAO70bswLQ=
Subject key identifier:   29:56:C2:80:75:5D:35:CE:F6:3A:A5:4E:89:43:A0:5C:3F:C5:98:B7
Certificate issuer:       /CN=391f20f26aa6d63598ff3025cddbdb4b9c9ab67d
Certificate serial:       42486EC1415CABAF7A0CA298AB9AAE28050C10CE
Authority key identifier: 39:1F:20:F2:6A:A6:D6:35:98:FF:30:25:CD:DB:DB:4B:9C:9A:B6:7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OR8g8mqm1jWY_zAlzdvbS5yatn0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/AS215685.asa
Signing time:             Thu 16 Jul 2026 20:12:40 +0000
ASPA not before:          Thu 16 Jul 2026 20:07:40 +0000
ASPA not after:           Thu 15 Jul 2027 20:12:40 +0000
Customer ASID:            215685
Providers:                AS: 1299
                          AS: 5405
                          AS: 6939
                          AS: 34927
                          AS: 52025
                          AS: 207252
                          AS: 213449
                          AS: 215828
                          AS: 393577
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OR8g8mqm1jWY_zAlzdvbS5yatn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 13:13:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:48:6e:c1:41:5c:ab:af:7a:0c:a2:98:ab:9a:ae:28:05:0c:10:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391f20f26aa6d63598ff3025cddbdb4b9c9ab67d
        Validity
            Not Before: Jul 16 20:07:40 2026 GMT
            Not After : Jul 15 20:12:40 2027 GMT
        Subject: CN=2956C280755D35CEF63AA54E8943A05C3FC598B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d4:32:3c:9e:4f:88:02:bd:04:d4:c9:10:d9:
                    ee:96:1a:1e:0c:ca:1d:d8:e8:5a:2e:25:1b:b6:ab:
                    ea:af:36:5a:11:d9:ef:ad:f8:fe:ba:39:af:69:75:
                    60:98:53:a1:85:7e:b1:05:98:25:aa:94:95:23:e1:
                    66:3f:c8:f4:66:b4:e2:d1:4b:27:2b:90:83:f4:9c:
                    3f:ea:be:3d:7b:7c:83:a9:2d:42:1d:e6:a0:20:72:
                    4e:1d:c5:57:51:0d:f2:4f:88:d3:a4:76:e0:ce:40:
                    5d:af:13:16:99:ed:ea:49:71:3c:8f:4b:ce:d9:fb:
                    30:8c:6c:59:4c:52:4e:b9:4d:70:84:0a:77:c2:3d:
                    0b:0f:3a:88:23:fc:a5:d7:b5:e7:7e:bb:9f:23:e2:
                    e8:1c:97:0b:40:61:55:00:ee:ee:05:40:f4:1f:60:
                    d6:47:e8:4b:60:1f:04:18:b9:3f:45:2c:92:57:1d:
                    54:58:5e:2e:61:80:3a:fd:50:c9:2b:62:cd:66:95:
                    bb:86:c8:d6:90:d8:a8:00:20:54:b4:d6:e4:7b:87:
                    73:a9:98:f3:dd:1a:21:fb:75:aa:32:80:66:a4:ff:
                    71:14:82:92:53:c5:bf:d7:eb:7f:e3:37:fc:ca:9e:
                    ef:c5:c4:89:56:1c:6f:bc:ac:22:e1:54:4f:13:ee:
                    72:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:56:C2:80:75:5D:35:CE:F6:3A:A5:4E:89:43:A0:5C:3F:C5:98:B7
            X509v3 Authority Key Identifier:
                keyid:39:1F:20:F2:6A:A6:D6:35:98:FF:30:25:CD:DB:DB:4B:9C:9A:B6:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OR8g8mqm1jWY_zAlzdvbS5yatn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/AS215685.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215685

    Signature Algorithm: sha256WithRSAEncryption
         d7:22:72:02:33:33:91:1e:56:58:77:fd:92:7f:cb:8d:75:88:
         d3:4b:64:fe:78:7a:eb:59:45:3d:02:6e:77:ff:2f:b5:a9:c6:
         81:21:83:55:ee:88:65:a4:dd:f5:fc:92:10:55:63:10:f4:fc:
         a2:4f:9e:2d:ea:44:a5:5d:60:5d:98:18:f8:97:f8:e8:ba:84:
         26:a7:14:44:1e:7d:d3:b9:13:77:cf:25:59:f3:f1:2a:52:bd:
         76:61:6d:c0:25:23:a1:48:77:71:65:b9:71:25:ad:ee:3c:01:
         12:3e:f0:f9:88:60:8e:68:ed:d4:5d:ab:7f:fa:f1:bf:0c:e6:
         fc:4f:7b:3e:d2:8e:1e:a7:96:19:02:4d:25:61:84:0d:4c:f8:
         2a:11:2f:fa:0f:84:90:4e:2b:49:01:72:44:ae:03:ae:7e:ff:
         70:29:0f:4e:9f:f1:42:4f:47:02:36:d0:7e:84:95:eb:09:64:
         f1:2b:0c:bf:a4:9d:57:40:e9:5c:3f:7d:50:51:a9:5c:d4:af:
         2c:ed:c3:6e:a9:9c:9b:f0:8b:d2:1d:7a:b2:a4:06:a0:ff:95:
         9f:6c:6c:3b:bd:64:b3:9a:71:ef:31:84:9a:ca:e5:f9:9a:09:
         df:dc:7d:80:dd:0e:58:e1:bc:33:22:55:72:1e:c1:d8:26:49:
         26:97:a7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:58:36 2026 by rpki-client