Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/AS214757.asa
File:                     AS214757.asa (raw, json)
Hash identifier:          cK+EaCNAxH/dOZxyVs5pRHqC0BRXpLP1uxavmIfztZE=
Subject key identifier:   31:10:79:27:29:46:1C:F3:9E:48:D1:9F:81:0B:94:FC:19:2D:78:AD
Certificate issuer:       /CN=a0bbb954570cfa6e856937043dd2c1745a0a05c2
Certificate serial:       33265985C4F4816D32124E58E58C48E198943E41
Authority key identifier: A0:BB:B9:54:57:0C:FA:6E:85:69:37:04:3D:D2:C1:74:5A:0A:05:C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oLu5VFcM-m6FaTcEPdLBdFoKBcI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/AS214757.asa
Signing time:             Wed 01 Jul 2026 12:01:10 +0000
ASPA not before:          Wed 01 Jul 2026 11:56:10 +0000
ASPA not after:           Wed 30 Jun 2027 12:01:10 +0000
Customer ASID:            214757
Providers:                AS: 6939
                          AS: 34224
                          AS: 34854
                          AS: 34927
                          AS: 49127
                          AS: 50263
                          AS: 50338
                          AS: 50917
                          AS: 52025
                          AS: 57463
                          AS: 60068
                          AS: 60900
                          AS: 142064
                          AS: 202580
                          AS: 212895
                          AS: 213622
                          AS: 214331
                          AS: 215638
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oLu5VFcM-m6FaTcEPdLBdFoKBcI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:26:59:85:c4:f4:81:6d:32:12:4e:58:e5:8c:48:e1:98:94:3e:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0bbb954570cfa6e856937043dd2c1745a0a05c2
        Validity
            Not Before: Jul  1 11:56:10 2026 GMT
            Not After : Jun 30 12:01:10 2027 GMT
        Subject: CN=3110792729461CF39E48D19F810B94FC192D78AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c0:a9:2d:84:3e:dc:a4:da:12:de:af:d9:d3:
                    ef:46:a3:88:07:34:bf:d8:cd:7e:07:34:d1:ed:01:
                    03:ff:dc:55:33:51:12:08:31:b9:01:c0:8c:23:ed:
                    69:34:46:06:c7:ba:bc:df:e2:14:12:dd:95:23:4b:
                    b9:f4:09:8a:e2:ef:89:65:f6:4f:ad:38:a8:4e:97:
                    4e:27:ee:be:8b:aa:aa:05:d0:e5:19:fe:24:28:f8:
                    d4:c0:2e:47:f5:74:b2:db:53:bb:d0:c8:19:6a:fb:
                    86:cf:53:d8:ee:6a:ea:d9:7a:75:16:06:2c:79:13:
                    ee:9c:ca:d9:63:aa:03:d0:6c:da:af:e2:0e:b7:03:
                    c6:8b:80:b2:d7:83:2f:c0:5f:c7:82:a5:6e:1b:f6:
                    a7:ce:dd:67:15:9c:fa:03:54:99:f8:45:ac:d9:da:
                    09:ee:ac:71:8b:2e:bc:5a:8b:83:4d:2e:21:82:08:
                    6d:95:7b:f7:80:88:f2:a0:d7:57:9d:55:b5:6a:04:
                    95:54:c3:b3:b9:3c:b3:86:3a:10:9b:9a:c7:99:0e:
                    80:f5:c8:0e:f3:2d:77:78:74:5a:fa:ed:a7:e6:97:
                    2b:7f:2d:7d:11:b3:2b:22:e7:4f:48:6f:a7:35:a5:
                    07:b4:e1:30:fe:06:7a:67:63:aa:7d:fb:17:2c:24:
                    ee:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:10:79:27:29:46:1C:F3:9E:48:D1:9F:81:0B:94:FC:19:2D:78:AD
            X509v3 Authority Key Identifier:
                keyid:A0:BB:B9:54:57:0C:FA:6E:85:69:37:04:3D:D2:C1:74:5A:0A:05:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLu5VFcM-m6FaTcEPdLBdFoKBcI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/AS214757.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214757

    Signature Algorithm: sha256WithRSAEncryption
         bc:6c:7b:74:3c:f8:0d:93:4e:7c:b3:92:e7:f1:79:50:5b:59:
         fe:fa:0a:7d:70:0d:00:c9:d3:85:9b:ba:df:72:66:95:55:b0:
         18:04:47:09:9d:19:87:03:d6:9f:00:be:86:1b:b8:ad:d6:f3:
         57:45:ef:32:13:aa:06:1f:62:23:3d:a6:4e:ef:e2:d5:b5:0c:
         8a:95:61:ea:f6:ac:ad:c4:fd:1b:88:8c:df:fc:79:c9:e5:73:
         dd:eb:f9:73:eb:12:11:56:ac:fa:8b:2b:25:3a:0e:29:6f:61:
         3b:74:3e:ba:d2:8b:a6:c2:de:15:90:07:cd:cc:e1:ff:99:73:
         a8:ee:34:a2:6a:9e:a8:79:8e:d9:8c:eb:19:e9:ca:63:0b:ca:
         a0:de:d5:6f:96:d8:60:68:21:ef:2a:12:79:1c:fe:e2:14:7d:
         0d:ae:70:2d:d5:ff:52:ea:e1:33:d1:09:d2:82:fc:ce:03:f1:
         b4:33:5f:f3:22:b7:e5:5a:17:02:03:fc:64:fd:19:b6:03:cc:
         b1:c3:b6:47:cb:c5:34:f7:b7:c9:bb:37:02:79:49:6a:d3:16:
         16:2d:5a:83:2f:8f:77:3c:da:a8:ad:1d:75:7d:ae:88:d0:84:
         3b:20:df:43:a5:20:e8:c7:65:e3:ae:bc:6d:0a:88:99:93:e9:
         b3:00:45:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:56:23 2026 by rpki-client