Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/AS215248.asa
File:                     AS215248.asa (raw, json)
Hash identifier:          DkcS3cmdltQErLXLkB7mngryjKe15n7TPiy42wbBtNA=
Subject key identifier:   B4:C2:D4:3B:51:78:EF:5C:FE:1D:DB:F0:21:45:76:DC:6D:D3:FA:E1
Certificate issuer:       /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Certificate serial:       4DFE26C9A51686E76F1068860152AE99FE2A0ED4
Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/AS215248.asa
Signing time:             Thu 30 Apr 2026 17:47:19 +0000
ASPA not before:          Thu 30 Apr 2026 17:42:19 +0000
ASPA not after:           Thu 29 Apr 2027 17:47:19 +0000
Customer ASID:            215248
Providers:                AS: 835
                          AS: 1299
                          AS: 5405
                          AS: 6204
                          AS: 8283
                          AS: 25091
                          AS: 37739
                          AS: 42093
                          AS: 50263
                          AS: 50917
                          AS: 52025
                          AS: 58115
                          AS: 61049
                          AS: 64289
                          AS: 200132
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 08:39:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:fe:26:c9:a5:16:86:e7:6f:10:68:86:01:52:ae:99:fe:2a:0e:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
        Validity
            Not Before: Apr 30 17:42:19 2026 GMT
            Not After : Apr 29 17:47:19 2027 GMT
        Subject: CN=B4C2D43B5178EF5CFE1DDBF0214576DC6DD3FAE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b6:af:97:a8:20:64:ce:59:7b:3c:65:3c:6d:
                    6c:dd:f4:a4:4a:76:a4:b1:0d:ff:1d:38:e3:88:09:
                    67:3e:d5:8f:06:73:0a:c5:93:e3:be:8d:96:33:2f:
                    8d:18:16:c1:96:25:82:97:17:03:60:9f:5b:93:69:
                    35:54:98:40:6e:a1:80:a1:7e:9b:63:45:c4:e7:af:
                    1a:57:4f:f0:7d:75:f0:a2:f4:b4:a3:18:c0:c3:e9:
                    7d:42:c7:15:16:35:2f:3a:cf:95:9b:74:9b:85:1a:
                    b3:0a:6d:99:ac:2a:1d:af:13:d0:dd:26:97:d1:ae:
                    99:86:24:6a:75:df:e1:5d:7a:ac:46:ed:1b:72:3c:
                    1f:2d:24:61:c5:2f:65:5f:90:88:46:50:6a:09:b2:
                    af:58:00:b6:de:71:79:47:2f:e6:c4:ae:fe:25:fe:
                    ea:7d:56:6e:43:5a:67:09:bb:a8:5d:d8:f0:0e:85:
                    8c:3d:3f:63:f2:46:63:11:b7:90:83:9e:16:32:98:
                    be:69:38:84:0c:99:8e:24:e1:94:d5:61:df:b7:da:
                    cd:29:2c:5f:b9:f5:8b:43:86:10:b3:5d:a4:3c:44:
                    f2:b7:f7:ab:54:bb:4a:7e:49:de:80:98:d9:14:31:
                    45:26:cb:7e:52:98:d5:ef:48:6a:7e:d4:00:4a:4e:
                    71:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C2:D4:3B:51:78:EF:5C:FE:1D:DB:F0:21:45:76:DC:6D:D3:FA:E1
            X509v3 Authority Key Identifier:
                keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/AS215248.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215248

    Signature Algorithm: sha256WithRSAEncryption
         c1:82:40:99:df:da:8e:a6:db:b0:82:62:3e:67:cb:35:74:13:
         64:ed:b2:67:d8:88:21:63:22:11:00:4b:c3:28:b0:7b:7c:e9:
         c7:18:48:a4:33:08:8e:e1:7f:7e:9f:cc:cd:47:58:a4:e9:8f:
         5d:7e:77:b5:71:b8:a5:d5:7a:93:d4:75:97:5a:aa:07:ee:ca:
         fd:0b:50:f8:5d:e2:3c:c9:e8:ef:50:0e:71:c3:a7:56:a7:af:
         8e:ad:8a:43:69:e5:00:a0:42:de:31:17:3f:50:9e:ea:92:b1:
         0c:3f:55:5f:7f:fd:c2:5b:4c:67:64:7f:cd:be:97:ff:8c:89:
         82:3b:59:4c:e8:15:35:2b:d8:2d:7d:a2:5c:55:2e:ac:87:99:
         f3:2d:29:cc:c8:98:52:a5:47:47:6a:39:fa:99:42:3e:6f:b5:
         85:a5:0b:3b:e0:cd:22:03:ad:ce:6d:0a:19:78:63:19:f0:d6:
         fd:1c:87:77:0b:0a:79:07:4a:43:39:7e:41:12:58:fb:1a:d7:
         52:98:97:28:d5:05:de:b4:42:ed:96:e7:16:9a:48:cb:a3:8f:
         db:cc:bf:fc:b0:e3:99:8c:2b:0b:85:1c:51:df:02:04:25:c5:
         89:d2:26:71:cb:2f:9b:4b:63:3f:09:e4:b8:63:5e:17:d3:50:
         97:86:3a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:13:44 2026 by rpki-client