Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/0/AS201398.asa
File:                     AS201398.asa (raw, json)
Hash identifier:          wNimOC0Q6esrTkfv21SK+JtgmCPGGevrew7DZPmAWDs=
Subject key identifier:   F3:E8:D9:6D:BA:85:A0:91:AD:A5:B0:C2:15:10:7E:25:FA:BE:FB:8F
Certificate issuer:       /CN=54abc05073ae6c755ed55ed0e1d2573706eb2d95
Certificate serial:       5C034538DF7EF29C6750E63DE4DADA626BB15013
Authority key identifier: 54:AB:C0:50:73:AE:6C:75:5E:D5:5E:D0:E1:D2:57:37:06:EB:2D:95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VKvAUHOubHVe1V7Q4dJXNwbrLZU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/0/AS201398.asa
Signing time:             Wed 25 Mar 2026 13:11:37 +0000
ASPA not before:          Wed 25 Mar 2026 13:06:37 +0000
ASPA not after:           Wed 24 Mar 2027 13:11:37 +0000
Customer ASID:            201398
Providers:                AS: 6939
                          AS: 8550
                          AS: 16276
                          AS: 20473
                          AS: 24381
                          AS: 34872
                          AS: 52025
                          AS: 58057
                          AS: 64515
                          AS: 202076
                          AS: 203168
                          AS: 207841
                          AS: 209735
                          AS: 210464
                          AS: 212895
                          AS: 215638
                          AS: 398999
                          AS: 400818
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/0/54ABC05073AE6C755ED55ED0E1D2573706EB2D95.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/0/54ABC05073AE6C755ED55ED0E1D2573706EB2D95.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VKvAUHOubHVe1V7Q4dJXNwbrLZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:03:45:38:df:7e:f2:9c:67:50:e6:3d:e4:da:da:62:6b:b1:50:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54abc05073ae6c755ed55ed0e1d2573706eb2d95
        Validity
            Not Before: Mar 25 13:06:37 2026 GMT
            Not After : Mar 24 13:11:37 2027 GMT
        Subject: CN=F3E8D96DBA85A091ADA5B0C215107E25FABEFB8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e7:5a:af:90:1b:27:66:43:89:6e:f3:87:9b:
                    43:0b:cb:8c:0f:fc:43:10:29:3d:70:aa:6a:31:88:
                    17:2e:56:e9:68:37:d0:7a:ad:58:ba:4b:b3:07:82:
                    4d:75:5d:28:0a:aa:02:13:18:3f:7e:9e:b3:65:4f:
                    5a:a6:c7:2a:fd:02:ff:17:5d:af:0b:2e:22:58:20:
                    93:0a:55:89:ee:5f:89:68:ea:97:49:9d:09:e3:66:
                    cf:09:19:3f:bb:e7:2f:b4:50:ad:a3:07:68:c3:4b:
                    c3:b7:2b:1e:ec:90:94:13:9a:b8:5f:cc:ed:05:45:
                    9c:45:5c:17:88:c5:16:1d:63:9d:b9:97:90:a6:be:
                    e2:9a:c4:60:ea:e3:00:8b:d5:4b:d6:7f:fc:c3:da:
                    6a:0a:a7:07:47:61:f7:40:95:a6:e2:ab:9d:9d:28:
                    54:9f:df:85:c0:36:4b:f9:d6:dd:f1:6f:2c:52:ee:
                    c9:6b:fa:f9:bd:27:9c:5f:d9:9e:1c:e1:47:ba:7a:
                    5c:75:d3:15:f4:35:f3:f9:dc:e8:3d:2f:e0:39:73:
                    a8:ed:12:b6:6a:70:56:b7:30:8f:35:8f:3d:69:21:
                    81:08:a8:54:27:0a:4b:11:bf:58:02:db:2b:e3:35:
                    5e:9b:7f:1c:e5:4f:68:11:59:d1:ca:c6:a4:3c:11:
                    d3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E8:D9:6D:BA:85:A0:91:AD:A5:B0:C2:15:10:7E:25:FA:BE:FB:8F
            X509v3 Authority Key Identifier:
                keyid:54:AB:C0:50:73:AE:6C:75:5E:D5:5E:D0:E1:D2:57:37:06:EB:2D:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/0/54ABC05073AE6C755ED55ED0E1D2573706EB2D95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKvAUHOubHVe1V7Q4dJXNwbrLZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/0/AS201398.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201398

    Signature Algorithm: sha256WithRSAEncryption
         7d:13:16:5d:c7:62:b5:05:d6:fe:55:d1:c5:a4:eb:d9:d1:84:
         1a:31:77:80:c2:55:38:92:04:e9:82:77:74:1b:57:12:b7:04:
         0a:64:6f:9e:24:aa:e0:c4:36:91:67:90:38:b9:b8:e5:43:f5:
         d7:c1:0c:62:e2:85:c3:32:5e:d2:87:1a:84:42:c5:7c:84:58:
         36:a8:1f:45:16:41:8e:e6:f3:5e:00:5e:a2:4e:4e:70:5f:e0:
         e2:d5:4b:f8:07:e9:af:d3:fe:ad:60:db:91:48:03:fb:d6:df:
         28:bd:e5:1b:d5:50:f5:1e:f1:a7:28:64:30:2b:3a:fe:06:0d:
         42:0d:04:9c:0e:d0:88:64:e6:e3:c2:98:03:b9:64:c4:03:5f:
         76:5b:ce:f3:ce:06:90:c7:cd:7c:8f:74:fe:f3:22:0d:f5:45:
         b2:50:71:4d:c4:13:08:52:f8:10:b6:7d:8b:f5:ee:60:58:af:
         5c:a4:e7:a2:03:40:de:a6:49:5c:97:a8:7c:1f:9c:c0:c1:38:
         0f:3b:81:13:d7:19:d1:eb:af:f4:19:51:5d:77:2e:1b:3f:45:
         cb:3c:27:52:3e:c8:57:76:4d:5d:42:43:21:d2:20:84:ee:9b:
         77:45:0e:e7:9b:63:9f:e0:94:e3:d9:0b:c2:2f:1c:5b:13:1d:
         5e:69:ff:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 20:04:52 2026 by rpki-client