Autonomous System Provider Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/AS215085.asa
File:                     AS215085.asa (raw, json)
Hash identifier:          9VdZ15MehZ9uE8LKxjhXu9KKz6w0Kn9mCrLxjWZ/QyM=
Subject key identifier:   31:5B:97:90:DB:58:7F:9B:70:EF:1A:97:61:68:63:07:49:D5:F4:CB
Certificate issuer:       /CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
Certificate serial:       5A1EEFC26CA090ADB03012E46B179B200BA6CFA5
Authority key identifier: DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/AS215085.asa
Signing time:             Sat 03 Oct 2026 14:07:07 +0000
ASPA not before:          Sat 03 Oct 2026 14:02:07 +0000
ASPA not after:           Sat 02 Oct 2027 14:07:07 +0000
Customer ASID:            215085
Providers:                AS: 6830
                          AS: 35133
                          AS: 42093
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Nov 2026 02:14:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:1e:ef:c2:6c:a0:90:ad:b0:30:12:e4:6b:17:9b:20:0b:a6:cf:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
        Validity
            Not Before: Oct  3 14:02:07 2026 GMT
            Not After : Oct  2 14:07:07 2027 GMT
        Subject: CN=315B9790DB587F9B70EF1A976168630749D5F4CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8a:73:8e:7f:c2:d8:fc:49:e0:67:aa:6f:60:
                    05:1f:f4:6f:8e:52:c1:b4:7c:6c:a1:4b:d4:ca:8f:
                    b0:a6:8f:9d:53:de:6a:4b:f2:08:85:e8:7a:b8:53:
                    50:04:db:b8:ef:b2:43:16:17:fb:1a:31:4c:53:e1:
                    68:6c:63:fb:66:28:46:70:75:56:70:df:c0:09:fd:
                    e1:72:d4:17:db:bb:12:ab:8e:6d:68:b3:60:35:13:
                    84:69:02:94:fb:35:6f:29:e1:08:16:41:30:84:d4:
                    c5:cb:71:95:3a:01:6d:ba:83:16:1f:cf:87:cc:b7:
                    2f:34:96:4d:df:27:82:39:48:e0:34:2e:1f:d2:74:
                    df:99:b9:cd:09:9a:0f:62:a7:91:ec:fe:46:54:10:
                    50:68:fe:ef:d6:77:85:84:fa:68:1b:4b:03:d3:11:
                    10:5f:e5:85:31:cb:68:6c:a9:7b:4f:4d:c5:ed:1b:
                    d8:6b:26:e4:2d:fd:ca:4c:7a:a8:29:60:30:cb:39:
                    d6:b1:9a:2c:28:26:1b:03:b9:76:04:3d:38:e1:14:
                    af:b5:a4:d5:4b:7f:46:df:56:24:99:4b:4f:fa:3f:
                    25:45:3d:e0:27:13:97:c7:74:4f:80:bf:5c:75:06:
                    6b:be:e0:b1:8f:77:b5:be:bc:27:e1:e3:ec:15:88:
                    fc:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:5B:97:90:DB:58:7F:9B:70:EF:1A:97:61:68:63:07:49:D5:F4:CB
            X509v3 Authority Key Identifier:
                keyid:DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/AS215085.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215085

    Signature Algorithm: sha256WithRSAEncryption
         85:02:c0:a5:0c:47:6c:c6:fb:6f:23:f6:d4:ef:10:f2:e2:1d:
         38:f1:bc:5a:03:ff:68:74:3c:36:9c:5c:c1:57:55:eb:cc:d0:
         af:e7:ea:04:b1:5a:08:2e:68:59:e3:56:06:47:d8:09:8d:75:
         e7:56:2a:56:52:95:c9:1a:4e:62:62:d4:74:95:fc:1e:f3:a3:
         e7:f7:95:50:28:47:56:e3:37:74:d6:1c:cf:01:94:66:9d:93:
         7a:08:d4:0b:c7:be:8c:09:48:23:df:b1:36:ed:76:6d:6d:6c:
         c8:fe:2f:eb:72:8c:ba:c4:7e:da:83:a1:13:eb:66:31:33:da:
         7a:a1:81:6e:5c:bd:4f:a9:7a:96:73:1a:78:7d:6d:49:34:10:
         71:dd:77:36:dc:74:ce:32:54:98:09:73:e5:32:fd:08:09:58:
         c7:ea:a7:c3:79:3d:6c:be:69:f1:ae:55:0b:17:4d:71:f7:e5:
         7b:2d:a5:23:a1:32:62:86:9a:bf:54:35:67:ef:0e:19:d4:5f:
         d1:6f:4a:ed:80:d9:d0:ad:25:40:c7:d3:14:22:e9:b6:d9:d2:
         88:0f:23:af:7b:f0:ca:1c:19:38:e6:39:c6:d0:d5:7d:43:25:
         ca:b9:13:be:46:3e:77:e1:5c:ec:fd:c7:ef:66:33:fc:0c:82:
         52:04:36:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 19:01:25 2026 by rpki-client