Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/0/AS214344.asa
File:                     AS214344.asa (raw, json)
Hash identifier:          uYGSkYWuw6t30fZ1s2NADMDDtXgosgQODcTNPIgjjkI=
Subject key identifier:   F3:98:FF:72:A7:AE:BD:D7:33:CF:48:83:FA:45:82:DC:8E:A2:92:B4
Certificate issuer:       /CN=3ec842120c803d17c39a3075557753cd9f7a67f1
Certificate serial:       1DBF7DACD0DF2ADC918C5C6488D11F08DE33701A
Authority key identifier: 3E:C8:42:12:0C:80:3D:17:C3:9A:30:75:55:77:53:CD:9F:7A:67:F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PshCEgyAPRfDmjB1VXdTzZ96Z_E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/0/AS214344.asa
Signing time:             Sun 12 Jul 2026 09:43:17 +0000
ASPA not before:          Sun 12 Jul 2026 09:38:17 +0000
ASPA not after:           Sun 11 Jul 2027 09:43:17 +0000
Customer ASID:            214344
Providers:                AS: 835
                          AS: 6939
                          AS: 34927
                          AS: 44324
                          AS: 47272
                          AS: 63473
                          AS: 137409
                          AS: 142064
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/0/3EC842120C803D17C39A3075557753CD9F7A67F1.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/0/3EC842120C803D17C39A3075557753CD9F7A67F1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PshCEgyAPRfDmjB1VXdTzZ96Z_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:bf:7d:ac:d0:df:2a:dc:91:8c:5c:64:88:d1:1f:08:de:33:70:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ec842120c803d17c39a3075557753cd9f7a67f1
        Validity
            Not Before: Jul 12 09:38:17 2026 GMT
            Not After : Jul 11 09:43:17 2027 GMT
        Subject: CN=F398FF72A7AEBDD733CF4883FA4582DC8EA292B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:87:a2:38:91:4a:3a:9d:dc:32:7e:a4:6a:ec:
                    76:47:ca:3e:f3:60:cd:5d:03:b8:18:2f:21:a8:9e:
                    34:0d:fd:3c:9e:a6:19:41:d5:98:a1:04:ee:3d:e8:
                    f3:60:96:b9:de:4d:c2:09:03:f2:40:06:33:3e:72:
                    8f:fb:a7:95:4e:ee:e7:d0:03:44:fb:fa:ae:96:85:
                    f5:58:2e:ef:fa:fa:78:29:f0:4d:95:56:88:58:49:
                    38:07:a9:b3:e8:5c:24:5a:25:51:7c:ca:4e:b7:5b:
                    e2:bf:d5:e9:50:66:55:37:1f:26:66:a8:0c:a9:9d:
                    00:39:89:e1:51:66:a1:74:7f:74:77:89:cf:4a:1c:
                    60:8c:60:41:8e:0b:02:2b:7d:44:ba:b6:dd:8b:8c:
                    c5:ab:05:68:16:fe:7c:9a:b3:61:52:a1:50:18:2a:
                    fc:42:0d:14:1a:e0:b7:18:76:ff:91:a9:4f:e7:3a:
                    9e:15:97:c2:52:4d:a0:99:7a:45:a4:e3:99:69:63:
                    b9:da:32:62:1d:5e:88:55:ac:de:64:8b:9f:22:77:
                    9e:0e:22:c7:ca:cf:21:ac:e3:8b:ea:3a:f0:cf:57:
                    e6:10:22:3e:1a:c4:fd:d6:51:2e:e8:4e:15:d7:6a:
                    11:7b:30:a7:3b:1f:28:eb:b9:99:5e:ac:b9:62:09:
                    f5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:98:FF:72:A7:AE:BD:D7:33:CF:48:83:FA:45:82:DC:8E:A2:92:B4
            X509v3 Authority Key Identifier:
                keyid:3E:C8:42:12:0C:80:3D:17:C3:9A:30:75:55:77:53:CD:9F:7A:67:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/0/3EC842120C803D17C39A3075557753CD9F7A67F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PshCEgyAPRfDmjB1VXdTzZ96Z_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/0/AS214344.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214344

    Signature Algorithm: sha256WithRSAEncryption
         73:69:57:82:92:ee:c9:5d:ad:7f:84:9a:b2:e5:1f:5f:38:62:
         cb:3f:72:8a:ad:93:74:5e:35:27:df:6b:4a:eb:22:0f:29:d4:
         cb:6d:be:93:b0:c6:2e:bc:52:01:5b:dd:78:5a:91:c7:1f:03:
         95:2c:d5:8b:4c:59:da:5f:ef:de:a1:bf:9c:0b:5a:f7:37:94:
         74:08:42:68:a6:2a:a1:76:6e:89:d0:19:ce:db:89:de:b4:c2:
         55:7d:36:f9:38:75:75:2c:e5:fa:a0:d6:31:cf:1d:0a:00:2a:
         53:34:e5:cb:5a:a7:24:e6:c0:52:21:e0:88:a1:00:56:5e:bd:
         3d:a6:61:d2:a8:55:f2:8b:cc:2a:00:2f:65:c4:d9:bd:fd:5b:
         d0:68:41:93:3c:4a:be:da:39:a6:ef:83:48:0f:29:54:96:bd:
         31:f4:1c:f1:9f:8f:95:e9:ac:4e:5e:4f:52:96:a9:4b:cb:b3:
         f7:de:74:0b:d9:b4:e8:13:83:ad:dc:4b:23:f5:3e:31:2e:37:
         dd:06:ab:2a:bb:6e:34:cd:98:f7:70:d1:73:91:10:c5:aa:08:
         11:f9:f7:2c:87:38:b2:85:62:ee:36:a2:a4:40:ab:f9:b4:3f:
         97:18:91:f8:c1:9a:bc:ec:a7:47:f0:38:0c:ef:81:58:8a:9f:
         29:f9:22:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:49:30 2026 by rpki-client