Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/0/AS214223.asa
File:                     AS214223.asa (raw, json)
Hash identifier:          7UegyXDHhe1XI9lGimc4evL2pldMV+cdrQzvvjsht9k=
Subject key identifier:   F2:8A:77:90:6E:76:90:2B:7D:46:95:BF:2E:D7:72:63:AF:9A:6C:8E
Certificate issuer:       /CN=8abc3240ddfb03e0ccaa63975f272973e713952b
Certificate serial:       7CF12F1B10553EA39FA325CB822057D2F9A8A881
Authority key identifier: 8A:BC:32:40:DD:FB:03:E0:CC:AA:63:97:5F:27:29:73:E7:13:95:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/irwyQN37A-DMqmOXXycpc-cTlSs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/0/AS214223.asa
Signing time:             Sat 07 Feb 2026 23:21:01 +0000
ASPA not before:          Sat 07 Feb 2026 23:16:01 +0000
ASPA not after:           Sat 06 Feb 2027 23:21:01 +0000
Customer ASID:            214223
Providers:                AS: 6939
                          AS: 11967
                          AS: 34872
                          AS: 34927
                          AS: 35661
                          AS: 47272
                          AS: 52025
                          AS: 208210
                          AS: 210233
                          AS: 212895
                          AS: 393577
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/0/8ABC3240DDFB03E0CCAA63975F272973E713952B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/0/8ABC3240DDFB03E0CCAA63975F272973E713952B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/irwyQN37A-DMqmOXXycpc-cTlSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 05:40:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:f1:2f:1b:10:55:3e:a3:9f:a3:25:cb:82:20:57:d2:f9:a8:a8:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8abc3240ddfb03e0ccaa63975f272973e713952b
        Validity
            Not Before: Feb  7 23:16:01 2026 GMT
            Not After : Feb  6 23:21:01 2027 GMT
        Subject: CN=F28A77906E76902B7D4695BF2ED77263AF9A6C8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e8:22:8f:b8:62:b8:a4:ea:ea:7e:05:27:f7:
                    e1:66:31:3c:10:f9:d8:04:8b:6f:1e:35:0a:a5:03:
                    f2:41:60:fb:28:fd:d5:e6:52:7a:85:02:85:a6:d4:
                    38:4c:90:db:8d:dd:d6:ac:d0:f2:f6:a9:b1:00:23:
                    eb:3a:da:e0:03:f1:86:1b:c4:43:e8:9d:bc:5d:f4:
                    6e:54:58:77:99:b7:d5:1f:3a:63:3e:ed:d5:d2:fc:
                    9e:a5:39:5f:a5:2c:7e:ff:8c:bd:65:bc:e8:3b:9b:
                    cb:31:bf:eb:0c:87:00:aa:75:42:45:78:f9:ca:40:
                    ce:be:38:24:a9:76:b7:73:4f:df:1f:a7:82:a8:c5:
                    33:b2:43:ad:fa:9e:8b:61:2e:d4:5a:15:dd:14:0e:
                    d1:7c:85:1f:66:5b:cc:38:03:d9:90:ca:84:f3:22:
                    5d:53:77:51:8d:c0:02:c1:cf:03:a9:8d:39:2f:69:
                    5a:5c:37:c8:3d:31:6b:27:e2:ea:ce:a7:27:36:e6:
                    33:68:b4:64:4a:46:dd:c1:d7:cb:6f:8a:3d:e9:f8:
                    d9:82:ed:ed:92:ed:48:a3:d8:67:fd:92:c8:7d:d9:
                    a7:ac:d8:ae:d4:3f:1d:f7:ae:26:1f:7e:a1:49:14:
                    0e:9c:30:48:62:67:6d:0f:94:79:6e:ba:2a:fe:78:
                    65:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:8A:77:90:6E:76:90:2B:7D:46:95:BF:2E:D7:72:63:AF:9A:6C:8E
            X509v3 Authority Key Identifier:
                keyid:8A:BC:32:40:DD:FB:03:E0:CC:AA:63:97:5F:27:29:73:E7:13:95:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/0/8ABC3240DDFB03E0CCAA63975F272973E713952B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irwyQN37A-DMqmOXXycpc-cTlSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/0/AS214223.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214223

    Signature Algorithm: sha256WithRSAEncryption
         76:06:19:ee:d5:82:43:dc:06:42:6c:70:57:7c:7f:a3:47:0e:
         ef:16:d4:d3:94:01:91:31:38:b3:63:2b:28:ad:fd:b2:3d:61:
         01:25:64:50:a0:a0:91:34:de:82:ba:af:5e:95:22:e8:7d:43:
         9e:b9:5c:6e:e4:a1:dd:66:a0:59:69:79:33:ba:fa:69:73:69:
         93:6d:a6:d8:54:c0:e4:bf:49:a3:58:8a:a4:5e:23:5e:cf:7c:
         0e:ba:78:b8:72:6a:60:54:b5:93:6f:29:0e:73:c2:f9:37:25:
         33:ac:ec:12:79:5a:d9:74:c4:9b:4c:e6:d5:e5:81:2a:ed:43:
         36:49:c5:86:72:e7:a5:b0:84:ef:b2:1b:ab:ac:7e:93:19:5a:
         20:c4:c1:32:5d:0b:25:e7:e0:ca:2b:36:97:49:dd:48:a0:96:
         d9:4b:8c:ff:bf:2f:d8:7c:89:16:dc:70:12:a1:20:02:19:a6:
         45:77:e6:b6:27:22:80:88:83:77:05:a3:5b:11:3d:27:05:06:
         eb:cc:51:76:84:3e:0e:22:20:c6:ae:7c:64:16:9e:ad:1b:4f:
         b1:04:02:6d:9f:17:61:2b:b2:cf:9b:b4:58:72:3f:9d:d1:76:
         86:50:d6:3f:2b:58:56:69:c2:07:4b:52:5d:87:e9:87:1b:ba:
         49:c8:52:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:21 2026 by rpki-client