Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/AS202939.asa
File:                     AS202939.asa (raw, json)
Hash identifier:          0dd8SoTnw25HOjFHy4rDiK2vYwlxqU7plZvDPIVRf/I=
Subject key identifier:   C0:CE:53:C1:0C:2A:CC:D4:82:50:50:BC:07:44:81:9C:2B:38:8F:CB
Certificate issuer:       /CN=40f02fb7dfe9ac800a1b1b693709c2f03c5ed98b
Certificate serial:       4979D233C41AD44EDB45CA12769C73EE7CA17047
Authority key identifier: 40:F0:2F:B7:DF:E9:AC:80:0A:1B:1B:69:37:09:C2:F0:3C:5E:D9:8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/AS202939.asa
Signing time:             Sat 11 Apr 2026 13:45:35 +0000
ASPA not before:          Sat 11 Apr 2026 13:40:35 +0000
ASPA not after:           Sat 10 Apr 2027 13:45:35 +0000
Customer ASID:            202939
Providers:                AS: 6939
                          AS: 7720
                          AS: 14447
                          AS: 17433
                          AS: 27523
                          AS: 31898
                          AS: 34927
                          AS: 41051
                          AS: 44324
                          AS: 62246
                          AS: 202662
                          AS: 209533
                          AS: 211509
                          AS: 212895
                          AS: 215172
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:79:d2:33:c4:1a:d4:4e:db:45:ca:12:76:9c:73:ee:7c:a1:70:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f02fb7dfe9ac800a1b1b693709c2f03c5ed98b
        Validity
            Not Before: Apr 11 13:40:35 2026 GMT
            Not After : Apr 10 13:45:35 2027 GMT
        Subject: CN=C0CE53C10C2ACCD4825050BC0744819C2B388FCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b4:29:21:94:1a:2e:a0:a7:48:3c:b2:99:93:
                    08:6e:c3:37:a8:7d:02:e7:47:5e:02:45:38:ce:ec:
                    e5:81:fa:2c:bc:3b:10:2d:09:6d:13:8b:c3:64:83:
                    48:cb:bb:98:fe:9b:0e:92:fd:34:f7:54:c4:04:d0:
                    5b:23:d7:ae:fe:5a:73:88:e2:06:73:41:98:5a:3b:
                    f2:10:a5:42:43:b7:df:dd:ac:1a:1f:39:4d:d8:7d:
                    a1:99:3a:aa:6c:f4:5f:52:0a:3c:d0:d5:bd:8a:47:
                    a2:5f:37:9b:63:15:a9:2f:fa:e4:90:47:f9:43:cd:
                    a9:bf:f3:dc:56:36:1f:e4:73:8d:fd:ad:15:74:fe:
                    7b:b6:57:81:89:29:79:b7:8b:ec:c3:0c:d2:0e:7a:
                    a9:dd:a1:55:6b:db:11:d2:1f:85:74:20:77:bb:d3:
                    6c:c5:e7:34:a4:41:7f:38:b3:0b:ad:3e:52:c3:5b:
                    f5:6b:82:b2:59:bf:db:8d:ff:b1:ef:3a:da:db:ba:
                    b0:b1:09:1a:82:8a:7f:19:4f:30:57:af:fb:fb:c7:
                    de:ec:0d:5e:17:19:22:6d:04:3d:ea:aa:81:f3:4f:
                    b0:4b:85:4f:a2:40:af:fd:68:f7:fc:e9:d7:92:ef:
                    a5:a5:b3:cb:4d:f5:35:d0:a1:d8:da:10:5d:80:b8:
                    70:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:CE:53:C1:0C:2A:CC:D4:82:50:50:BC:07:44:81:9C:2B:38:8F:CB
            X509v3 Authority Key Identifier:
                keyid:40:F0:2F:B7:DF:E9:AC:80:0A:1B:1B:69:37:09:C2:F0:3C:5E:D9:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/AS202939.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202939

    Signature Algorithm: sha256WithRSAEncryption
         98:9d:f3:a7:21:89:c8:4e:41:45:d9:31:39:ee:1d:dd:c7:f1:
         6e:95:8b:51:23:94:0c:39:0d:a6:e0:d5:00:bc:40:1c:46:78:
         da:9c:3c:03:0f:89:20:9f:c6:6b:e9:89:bc:17:48:54:44:74:
         a3:5e:97:04:53:c8:f9:36:ba:09:16:b6:59:99:29:ef:6c:5e:
         72:8d:0d:12:2c:3d:47:3e:9b:dc:b7:89:16:7f:3a:67:71:07:
         98:aa:27:02:b9:6d:43:cf:34:36:83:a3:dd:a6:6e:36:ae:b1:
         da:56:43:df:d5:6a:17:b6:5f:20:2f:b6:67:75:5f:85:47:bb:
         e2:d4:59:35:dc:31:a4:a7:97:49:85:d6:ff:a3:d6:2f:36:1b:
         2a:d5:e2:9d:f2:d1:67:25:63:09:b5:5f:1b:2c:9c:a3:64:23:
         c2:2a:17:d8:8f:00:1a:6d:ac:91:ab:cb:26:f8:c8:5b:c8:c6:
         89:92:5c:74:ea:e6:09:b3:06:02:a2:b3:1c:ee:76:97:d1:44:
         90:8c:6a:39:30:98:ec:6d:b9:37:0c:83:61:d8:35:51:73:b6:
         a3:87:85:d8:23:b6:4f:b4:2b:4f:fa:a6:5a:39:69:d6:ff:0e:
         5f:e2:fb:47:ab:5c:74:4c:5a:81:2e:16:14:c9:fe:84:e0:bc:
         3c:39:fc:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:37:26 2026 by rpki-client