Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/AS202939.asa
File:                     AS202939.asa (raw, json)
Hash identifier:          UoFhxAeLrvUQZiExGnTkSVBc799iEfEg4nDDlsceNNQ=
Subject key identifier:   46:0B:E6:ED:07:43:34:E7:9E:57:E8:AF:CC:64:B3:67:02:46:99:65
Certificate issuer:       /CN=40f02fb7dfe9ac800a1b1b693709c2f03c5ed98b
Certificate serial:       7DCE04538549BCF176975E23AABE9153C62A02C8
Authority key identifier: 40:F0:2F:B7:DF:E9:AC:80:0A:1B:1B:69:37:09:C2:F0:3C:5E:D9:8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/AS202939.asa
Signing time:             Sun 01 Mar 2026 08:36:49 +0000
ASPA not before:          Sun 01 Mar 2026 08:31:49 +0000
ASPA not after:           Sun 28 Feb 2027 08:36:49 +0000
Customer ASID:            202939
Providers:                AS: 6939
                          AS: 7720
                          AS: 14447
                          AS: 17433
                          AS: 31898
                          AS: 34927
                          AS: 41051
                          AS: 44324
                          AS: 209533
                          AS: 211509
                          AS: 212895
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ce:04:53:85:49:bc:f1:76:97:5e:23:aa:be:91:53:c6:2a:02:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f02fb7dfe9ac800a1b1b693709c2f03c5ed98b
        Validity
            Not Before: Mar  1 08:31:49 2026 GMT
            Not After : Feb 28 08:36:49 2027 GMT
        Subject: CN=460BE6ED074334E79E57E8AFCC64B36702469965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c7:b6:f0:25:28:9c:8b:cc:a7:4e:41:4f:54:
                    2d:36:b5:99:17:99:c3:e8:d3:db:45:fc:94:d7:0d:
                    54:36:fe:fd:c8:fa:fa:d1:fc:84:bb:29:33:c4:56:
                    7d:e4:c1:a9:e2:c4:39:0a:cc:c1:10:0a:16:4b:a9:
                    7b:1a:8b:7b:0f:ce:0f:c1:d0:00:05:7e:9a:9b:c9:
                    0a:53:0a:45:46:4f:f5:97:1b:a0:ac:7a:21:0c:5b:
                    27:b7:d3:f2:90:d6:9e:1d:54:e9:af:4b:c0:dc:9e:
                    7f:f4:77:06:6c:d6:21:58:a8:2b:cc:4e:e7:b8:8e:
                    fc:0c:e9:56:eb:7b:ec:c2:90:dd:dc:1c:f4:62:a1:
                    0b:ad:80:80:51:99:81:ff:b0:d9:65:85:a1:89:00:
                    b4:71:e0:1c:06:03:c0:e9:b7:31:5c:16:a2:fa:82:
                    ec:26:cf:43:5f:98:bf:e7:13:2c:1a:d3:45:27:fd:
                    ab:7e:95:6c:99:d9:d5:bc:f9:77:63:1b:11:6d:e0:
                    94:2d:df:9d:27:7d:e5:13:eb:5b:50:81:c6:82:81:
                    ea:11:12:72:61:9f:5c:61:85:db:01:5b:33:88:68:
                    57:66:5d:81:69:be:00:c1:e9:b3:da:2d:7b:ca:f4:
                    9a:2d:7e:71:a8:51:08:29:01:d9:37:b8:bf:0e:55:
                    ab:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:0B:E6:ED:07:43:34:E7:9E:57:E8:AF:CC:64:B3:67:02:46:99:65
            X509v3 Authority Key Identifier:
                keyid:40:F0:2F:B7:DF:E9:AC:80:0A:1B:1B:69:37:09:C2:F0:3C:5E:D9:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/AS202939.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202939

    Signature Algorithm: sha256WithRSAEncryption
         27:16:81:f9:7f:d2:15:cb:88:5f:01:5e:b0:4d:ed:ab:42:bb:
         74:6a:95:5b:d9:28:5c:9c:3f:ba:c7:50:ec:92:10:6a:f0:1f:
         b5:44:1c:57:56:8a:cb:41:fb:d6:ed:3d:da:0b:d1:08:4a:66:
         44:cf:62:31:51:e6:6f:1c:d8:fb:2a:a1:76:4e:9c:7c:5f:88:
         09:0c:74:2c:40:74:27:21:8a:81:0d:d5:4e:4f:3d:10:5d:ce:
         95:2a:4a:45:7e:e5:f0:b7:5c:32:ed:26:bc:3c:7a:6b:8a:fb:
         46:0b:34:89:92:d6:a8:5a:82:2d:3d:9f:90:f8:b6:ad:69:8c:
         ef:43:17:66:b8:b3:16:e8:d7:0d:b9:f5:3b:b7:ab:e4:6d:5e:
         53:52:b2:1b:95:22:6f:93:54:46:e2:e3:37:f9:5e:cd:8d:a7:
         9d:c6:98:66:82:6b:3d:84:57:c5:89:a0:ef:9b:f1:0b:ab:48:
         4c:15:3c:f8:52:17:86:c5:79:d6:ba:08:06:2a:a4:cf:d6:a9:
         f4:42:17:71:5c:c4:45:52:45:6c:c2:52:64:b2:4f:13:0f:b1:
         5c:45:d1:b8:fc:45:4e:e5:49:40:dd:a9:43:32:38:a7:73:27:
         ab:21:8e:2a:76:84:4a:8d:4a:60:ac:9a:39:db:c1:3a:54:6b:
         10:b2:32:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:06:22 2026 by rpki-client