Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/AS212068.asa
File:                     AS212068.asa (raw, json)
Hash identifier:          ZjAKH1vEYwreC82cNdEXiUxsMPLukf1LK/YhPMdarpE=
Subject key identifier:   4A:3D:85:29:84:A3:C2:EF:96:31:0F:97:BE:4D:73:30:05:E1:32:A5
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       0A02699CA0E0B038E42FE730015C0F315E3D1361
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/AS212068.asa
Signing time:             Thu 29 Jan 2026 19:58:51 +0000
ASPA not before:          Thu 29 Jan 2026 19:53:51 +0000
ASPA not after:           Thu 28 Jan 2027 19:58:51 +0000
Customer ASID:            212068
Providers:                AS: 6939
                          AS: 13237
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:02:69:9c:a0:e0:b0:38:e4:2f:e7:30:01:5c:0f:31:5e:3d:13:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Jan 29 19:53:51 2026 GMT
            Not After : Jan 28 19:58:51 2027 GMT
        Subject: CN=4A3D852984A3C2EF96310F97BE4D733005E132A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:96:8b:94:e6:d0:07:61:3c:fe:56:c4:e9:0e:
                    d5:84:97:44:fc:7f:bf:9b:eb:58:ad:d7:af:d8:18:
                    52:c8:d1:f1:fd:7f:f6:18:6b:ab:91:f9:f9:e9:bc:
                    93:a5:ea:0c:f3:78:ad:b5:48:c4:c8:1a:1d:81:89:
                    bc:1d:a4:5a:af:47:5d:1a:cb:7e:b9:97:90:61:eb:
                    02:25:ed:40:66:3c:6c:02:b7:b9:6b:36:30:fe:dd:
                    01:01:91:7b:8b:ee:63:44:3f:0f:f7:c0:73:4a:03:
                    58:b0:31:da:c2:de:99:8b:b9:fd:65:a9:b6:1c:23:
                    e4:03:12:07:04:5d:f1:46:85:92:2a:4c:11:f4:a6:
                    63:2a:a9:8e:04:a7:6a:46:4e:9c:f4:47:8a:0b:04:
                    a9:c2:71:e9:68:ff:49:ee:0e:7d:73:8c:43:ad:e5:
                    9d:56:64:fc:2e:51:5e:fe:f9:44:4b:42:c5:53:41:
                    0f:9a:e4:80:75:7d:cc:d7:a2:69:bf:27:f3:38:64:
                    1c:b5:a8:77:ba:fb:d8:5e:6c:04:42:47:52:ab:d6:
                    fc:30:13:e1:1e:01:19:9d:a1:b0:01:e1:8b:2f:f0:
                    f0:c5:78:10:ce:3d:66:e2:b5:42:2c:36:47:4e:bd:
                    82:dd:a6:8d:eb:7e:cf:07:f5:9c:20:fa:2c:d9:ed:
                    85:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:3D:85:29:84:A3:C2:EF:96:31:0F:97:BE:4D:73:30:05:E1:32:A5
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/AS212068.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212068

    Signature Algorithm: sha256WithRSAEncryption
         97:90:a5:ee:9c:a8:e4:5a:97:e4:d8:72:74:26:a4:df:cd:24:
         1d:36:1e:4b:ea:11:f6:19:12:76:79:50:f8:fc:26:fc:fa:2c:
         3a:ab:f7:22:6a:dc:1f:e9:90:14:10:16:32:69:ef:54:38:2b:
         2c:cd:f0:0a:85:ab:e1:28:65:b3:11:39:d9:fe:f3:9e:ca:21:
         e7:0e:af:80:5b:45:29:9a:13:f0:7f:e7:c2:fb:4f:10:b2:62:
         35:83:ac:91:09:b9:63:ec:ff:00:1f:50:c6:a4:0b:82:e2:c7:
         9a:04:99:a9:cd:84:53:61:28:0b:aa:46:7d:3b:12:8c:8b:be:
         16:15:88:4b:5b:80:92:ab:d6:f9:8c:90:9a:c3:b4:40:b0:30:
         c6:39:3a:0b:10:a2:60:50:10:30:27:9a:a7:01:22:21:54:f5:
         e0:bf:ca:ff:6f:44:c5:86:ad:59:b2:8e:b3:18:b3:9d:76:4c:
         20:45:2e:3e:33:6a:f5:5d:d9:a6:b0:28:f0:46:b7:fc:22:02:
         53:da:ce:86:d0:d1:a1:5f:eb:11:96:fd:2c:de:1a:55:91:d3:
         9d:4f:0d:f7:1b:89:52:c5:15:92:a8:02:e8:f1:e6:1f:13:94:
         de:88:ae:76:25:5e:3a:ce:f6:a8:84:a1:e9:af:19:08:42:4f:
         e1:3e:23:ec
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIUCgJpnKDgsDjkL+cwAVwPMV49E2EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjAwNTc5MDIxMjg3ZWE2NDk1ZDdmOTM0YTZkZWQzMGVl
MmE1YmIzODAeFw0yNjAxMjkxOTUzNTFaFw0yNzAxMjgxOTU4NTFaMDMxMTAvBgNV
BAMTKDRBM0Q4NTI5ODRBM0MyRUY5NjMxMEY5N0JFNEQ3MzMwMDVFMTMyQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQlouU5tAHYTz+VsTpDtWEl0T8
f7+b61it16/YGFLI0fH9f/YYa6uR+fnpvJOl6gzzeK21SMTIGh2BibwdpFqvR10a
y365l5Bh6wIl7UBmPGwCt7lrNjD+3QEBkXuL7mNEPw/3wHNKA1iwMdrC3pmLuf1l
qbYcI+QDEgcEXfFGhZIqTBH0pmMqqY4Ep2pGTpz0R4oLBKnCcelo/0nuDn1zjEOt
5Z1WZPwuUV7++URLQsVTQQ+a5IB1fczXomm/J/M4ZBy1qHe6+9hebARCR1Kr1vww
E+EeARmdobAB4Ysv8PDFeBDOPWbitUIsNkdOvYLdpo3rfs8H9Zwg+izZ7YULAgMB
AAGjggIFMIICATAdBgNVHQ4EFgQUSj2FKYSjwu+WMQ+Xvk1zMAXhMqUwHwYDVR0j
BBgwFoAUYAV5AhKH6mSV1/k0pt7TDuKluzgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMTk3OWYwMTUtMmQ2OS00OGYxLWJiNTItMzU4MWM0ZGY0
OGZhLzAvNjAwNTc5MDIxMjg3RUE2NDk1RDdGOTM0QTZERUQzMEVFMkE1QkIzOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lBVjVBaEtINm1TVjFfazBwdDdURHVL
bHV6Zy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzE5NzlmMDE1LTJkNjkt
NDhmMS1iYjUyLTM1ODFjNGRmNDhmYS8wL0FTMjEyMDY4LmFzYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM8ZDANBgkq
hkiG9w0BAQsFAAOCAQEAl5Cl7pyo5FqX5NhydCak380kHTYeS+oR9hkSdnlQ+Pwm
/PosOqv3ImrcH+mQFBAWMmnvVDgrLM3wCoWr4ShlsxE52f7znsoh5w6vgFtFKZoT
8H/nwvtPELJiNYOskQm5Y+z/AB9QxqQLguLHmgSZqc2EU2EoC6pGfTsSjIu+FhWI
S1uAkqvW+YyQmsO0QLAwxjk6CxCiYFAQMCeapwEiIVT14L/K/29ExYatWbKOsxiz
nXZMIEUuPjNq9V3ZprAo8Ea3/CICU9rOhtDRoV/rEZb9LN4aVZHTnU8N9xuJUsUV
kqgC6PHmHxOU3oiudiVeOs72qISh6a8ZCEJP4T4j7A==
-----END CERTIFICATE-----
Generated at Sun Mar 1 13:06:22 2026 by rpki-client