Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/AS210352.asa
File:                     AS210352.asa (raw, json)
Hash identifier:          xQU1t0L4lf4kZ7muxCNpiJ2Ra2Jj9OCD7jPbIOBdEQk=
Subject key identifier:   AB:F6:32:78:1C:5D:A5:C9:E3:43:84:F6:95:B3:69:54:CC:D6:4A:54
Certificate issuer:       /CN=bd7fd75977189e0d4325b6027a02b6f18a71ef3b
Certificate serial:       40B25083CDA9BE4E1E0FF0EF7C89376F598CAA37
Authority key identifier: BD:7F:D7:59:77:18:9E:0D:43:25:B6:02:7A:02:B6:F1:8A:71:EF:3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vX_XWXcYng1DJbYCegK28Ypx7zs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/AS210352.asa
Signing time:             Sun 01 Feb 2026 07:40:28 +0000
ASPA not before:          Sun 01 Feb 2026 07:35:28 +0000
ASPA not after:           Sun 31 Jan 2027 07:40:28 +0000
Customer ASID:            210352
Providers:                AS: 7720
                          AS: 44324
                          AS: 53808
                          AS: 62246
                          AS: 151673
                          AS: 199310
                          AS: 210440
                          AS: 211575
                          AS: 213605
                          AS: 214439
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vX_XWXcYng1DJbYCegK28Ypx7zs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:b2:50:83:cd:a9:be:4e:1e:0f:f0:ef:7c:89:37:6f:59:8c:aa:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd7fd75977189e0d4325b6027a02b6f18a71ef3b
        Validity
            Not Before: Feb  1 07:35:28 2026 GMT
            Not After : Jan 31 07:40:28 2027 GMT
        Subject: CN=ABF632781C5DA5C9E34384F695B36954CCD64A54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:70:8d:9d:4a:96:0d:8a:b9:67:51:36:c8:cd:
                    de:c1:bb:2b:6e:ea:7f:23:d5:c4:cb:55:3f:30:13:
                    d1:15:7f:10:fd:c8:52:71:b2:94:fb:e7:37:bc:e8:
                    8c:a7:31:5d:29:90:a3:4d:9b:ed:21:00:08:0f:0f:
                    8d:c0:98:b9:7c:05:60:30:e5:6d:f3:a9:b4:72:a9:
                    29:54:19:80:60:1b:b4:02:d4:cb:02:a3:3a:eb:93:
                    08:34:79:53:ef:c5:6e:72:9b:9e:cc:11:0f:6a:60:
                    c6:8f:28:2f:20:2e:e6:55:f1:b9:2a:8e:5c:b9:83:
                    f4:7b:91:69:7a:90:ea:52:b7:00:7a:97:16:26:5a:
                    47:c1:fd:ec:bf:1f:9b:bb:ee:d4:79:59:b4:48:6e:
                    cb:25:1f:13:23:3d:4d:97:a6:f5:5f:aa:9d:ce:03:
                    97:fa:dd:ad:a8:5f:1e:31:56:87:55:0d:7c:f6:95:
                    08:a1:e1:10:27:26:c7:f3:19:0f:ef:1f:71:a2:53:
                    a3:ec:74:d8:33:c4:26:6f:d6:7c:23:dd:8b:3f:12:
                    fc:53:25:09:d6:12:a6:11:34:67:d7:aa:1d:ec:ec:
                    63:a6:2e:ca:49:47:38:40:b1:16:5b:14:33:ba:04:
                    71:7d:ac:2f:12:dc:1b:19:63:f0:bd:b6:2e:bb:f9:
                    62:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F6:32:78:1C:5D:A5:C9:E3:43:84:F6:95:B3:69:54:CC:D6:4A:54
            X509v3 Authority Key Identifier:
                keyid:BD:7F:D7:59:77:18:9E:0D:43:25:B6:02:7A:02:B6:F1:8A:71:EF:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX_XWXcYng1DJbYCegK28Ypx7zs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/AS210352.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210352

    Signature Algorithm: sha256WithRSAEncryption
         7d:e7:e0:91:e1:00:13:a4:3c:0e:af:8b:93:ad:b9:53:40:03:
         48:e5:db:dc:29:02:6d:1f:b0:f0:10:73:67:f8:18:24:7a:cf:
         78:93:1f:2f:06:7d:50:40:74:d8:28:9c:94:92:0b:49:88:82:
         9f:94:4f:94:57:39:29:7a:fc:30:14:87:58:53:d7:4b:cf:c9:
         20:c7:61:d2:82:86:1e:65:a7:9e:e1:9c:0e:69:c2:02:d6:bc:
         ca:0f:48:3c:f6:03:31:7a:51:3d:4d:07:cd:2a:99:1d:55:26:
         03:78:1d:42:05:b6:ec:af:ba:b2:e1:6f:6a:af:df:be:f8:c2:
         d2:6d:37:c4:5a:73:14:58:17:f3:42:64:6f:ae:f1:2f:66:d2:
         c7:af:d3:3c:32:50:85:50:27:c5:bd:80:e9:c0:34:26:22:b4:
         54:6f:b0:b6:a8:af:f2:27:5c:2d:e0:8f:78:6f:94:9a:16:ed:
         dc:76:69:9a:0e:be:c5:5f:fa:66:d5:b9:2f:25:4a:73:93:2c:
         74:52:e2:58:eb:af:34:fa:22:44:29:1d:d5:83:89:8c:fc:28:
         ef:f2:dd:9f:f7:30:c3:31:63:60:bd:23:65:6e:93:e2:06:5f:
         22:c3:f7:b6:1c:67:73:60:84:eb:34:c2:69:d7:2d:1f:0e:ad:
         60:9a:95:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:14 2026 by rpki-client