Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/AS214420.asa
File:                     AS214420.asa (raw, json)
Hash identifier:          rBhnv0fmIQ5QImIxVDZoRShVH2YY2qokZq71xdb7POM=
Subject key identifier:   53:BB:3F:58:09:A5:0F:70:61:9F:92:9F:70:80:A8:31:F3:B4:13:B2
Certificate issuer:       /CN=ec342add81633658330112d2bf8b1de3ee19f684
Certificate serial:       78BF0CDE10E5E5C8996800D3D7DC8F1967BD74B0
Authority key identifier: EC:34:2A:DD:81:63:36:58:33:01:12:D2:BF:8B:1D:E3:EE:19:F6:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7DQq3YFjNlgzARLSv4sd4-4Z9oQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/AS214420.asa
Signing time:             Sat 14 Mar 2026 10:26:58 +0000
ASPA not before:          Sat 14 Mar 2026 10:21:58 +0000
ASPA not after:           Sat 13 Mar 2027 10:26:58 +0000
Customer ASID:            214420
Providers:                AS: 835
                          AS: 6939
                          AS: 34927
                          AS: 52025
                          AS: 204464
                          AS: 212895
                          AS: 215638
                          AS: 398999
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7DQq3YFjNlgzARLSv4sd4-4Z9oQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 05:27:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:bf:0c:de:10:e5:e5:c8:99:68:00:d3:d7:dc:8f:19:67:bd:74:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec342add81633658330112d2bf8b1de3ee19f684
        Validity
            Not Before: Mar 14 10:21:58 2026 GMT
            Not After : Mar 13 10:26:58 2027 GMT
        Subject: CN=53BB3F5809A50F70619F929F7080A831F3B413B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ff:68:57:e5:8c:df:a5:2d:05:14:37:23:68:
                    ed:85:16:76:d7:2d:67:75:cb:62:93:7f:33:af:1b:
                    f5:df:29:73:8f:a0:f5:f0:85:d9:f3:b8:38:86:16:
                    5e:65:e7:24:55:e9:4d:28:2e:c9:d3:dd:dd:19:d3:
                    5a:77:e9:9b:d2:05:57:ba:60:0b:a3:a3:6a:3a:ae:
                    60:21:b2:4b:64:76:e4:31:1a:13:2e:ca:8c:6a:ef:
                    be:f6:65:8e:7f:7c:6b:4b:38:53:f4:1e:ce:c9:7a:
                    ab:07:a1:35:ed:a0:10:82:68:c7:b4:4c:6d:9a:86:
                    ed:67:de:0d:82:94:3b:46:15:6e:9e:14:63:08:c3:
                    22:d8:33:e7:9c:88:ed:76:e1:a2:be:b2:82:de:0e:
                    48:70:76:be:66:fb:3b:f5:9c:34:69:82:08:b8:15:
                    77:e6:b7:2a:f0:ce:43:05:d0:14:12:7c:c0:c2:09:
                    07:00:5c:ea:fa:39:b1:6f:67:b9:f7:23:36:df:74:
                    d4:e9:b5:25:4e:60:31:cb:ed:bc:36:c8:3e:a8:7a:
                    56:82:94:ed:53:df:c8:1c:6e:d5:5f:c0:96:6f:56:
                    2f:85:9a:b4:c3:d9:62:90:8c:93:79:a6:e8:bf:1a:
                    df:3f:ae:9f:61:57:88:88:47:51:20:75:7d:f8:10:
                    7c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:BB:3F:58:09:A5:0F:70:61:9F:92:9F:70:80:A8:31:F3:B4:13:B2
            X509v3 Authority Key Identifier:
                keyid:EC:34:2A:DD:81:63:36:58:33:01:12:D2:BF:8B:1D:E3:EE:19:F6:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DQq3YFjNlgzARLSv4sd4-4Z9oQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/AS214420.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214420

    Signature Algorithm: sha256WithRSAEncryption
         34:42:a3:e2:44:b5:dc:8c:98:d2:9f:d1:07:55:11:01:0e:9e:
         b8:d6:8b:0c:ac:5e:8b:34:58:e5:f9:d3:9c:3b:48:8b:1b:84:
         3b:47:6c:80:08:dd:3a:a8:89:fb:32:41:ff:5a:4d:23:70:b2:
         8f:56:3d:8c:0d:64:44:66:48:dd:49:68:13:72:99:13:b2:6e:
         2c:49:ea:bb:12:06:e6:4c:78:1e:94:2f:3b:8d:ce:e3:61:8d:
         ee:b5:92:3d:8b:50:92:79:fc:e4:18:77:f7:e9:2e:28:1c:d9:
         fb:e9:f4:06:49:68:d2:82:5e:b0:13:84:c4:42:aa:43:61:42:
         6d:c3:f1:2d:bb:e3:d2:c2:0f:3f:e4:c8:98:c8:e4:bc:90:0c:
         a1:40:67:ce:4e:4f:33:ab:79:06:57:50:f9:84:5f:68:22:4f:
         1b:bc:13:e5:68:83:0d:14:0a:fd:21:f8:a6:37:1f:b6:3b:da:
         45:fb:f7:91:23:c3:76:76:fe:cc:3c:26:1e:7f:c9:1d:16:6e:
         6d:38:71:8f:e4:58:d8:2b:bc:83:6c:9c:cb:31:7d:ca:5b:de:
         11:47:a1:98:85:43:68:34:05:70:82:2f:30:cb:05:c6:e8:2b:
         0a:c7:29:65:07:ac:72:2c:a8:b4:d0:b3:a8:52:ca:41:3f:07:
         f6:f1:84:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:31:53 2026 by rpki-client