Autonomous System Provider Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/0/AS204464.asa
File:                     AS204464.asa (raw, json)
Hash identifier:          Cx0/KgC55EyTlqY0qd9mIk3UGBdWHSCtyUHF/tqJBI0=
Subject key identifier:   4E:44:30:20:65:6C:3B:D3:75:4F:DD:C9:A2:2E:E9:15:7A:68:47:73
Certificate issuer:       /CN=18670561bfa9d2336dfaa180c44342b046e19abc
Certificate serial:       7A7BB99D38860EF3E9DAD3BED3CE85FFD765E4D1
Authority key identifier: 18:67:05:61:BF:A9:D2:33:6D:FA:A1:80:C4:43:42:B0:46:E1:9A:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GGcFYb-p0jNt-qGAxENCsEbhmrw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/0/AS204464.asa
Signing time:             Sat 12 Sep 2026 16:21:22 +0000
ASPA not before:          Sat 12 Sep 2026 16:16:22 +0000
ASPA not after:           Sat 11 Sep 2027 16:21:22 +0000
Customer ASID:            204464
Providers:                AS: 20473
                          AS: 199746
                          AS: 205941
                          AS: 215120
                          AS: 218832
                          AS: 218904
                          AS: 219157
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/0/18670561BFA9D2336DFAA180C44342B046E19ABC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/0/18670561BFA9D2336DFAA180C44342B046E19ABC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GGcFYb-p0jNt-qGAxENCsEbhmrw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:7b:b9:9d:38:86:0e:f3:e9:da:d3:be:d3:ce:85:ff:d7:65:e4:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18670561bfa9d2336dfaa180c44342b046e19abc
        Validity
            Not Before: Sep 12 16:16:22 2026 GMT
            Not After : Sep 11 16:21:22 2027 GMT
        Subject: CN=4E443020656C3BD3754FDDC9A22EE9157A684773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ec:f0:b2:0b:3e:02:a9:2c:15:b2:d3:68:d3:
                    ab:f2:e9:c6:30:9d:a7:a6:0f:65:25:b8:8b:a1:8d:
                    93:ba:78:e7:ab:6d:ff:6c:92:eb:0b:ea:d4:41:40:
                    41:9c:7b:4b:bf:a0:48:9b:1a:cf:f5:d8:c5:b6:22:
                    0f:47:0d:5f:0a:99:55:98:a6:77:99:b0:8c:0b:48:
                    b7:32:dc:1d:f2:48:7f:8e:87:c8:67:af:1c:86:62:
                    43:3e:4d:be:a8:37:71:bf:7e:c3:f3:6d:25:71:30:
                    68:48:ae:84:8b:28:d8:32:53:48:0b:4f:92:5d:64:
                    6c:55:8c:b8:0f:96:ae:b2:4d:1b:a3:3e:69:8a:ad:
                    ce:a1:4e:2f:c7:bd:46:eb:72:bf:83:55:48:82:c5:
                    ea:29:fc:7d:06:6a:78:dc:c6:3d:b0:7f:cf:54:73:
                    85:81:fb:75:46:6d:74:b9:3a:85:21:b8:cf:47:cb:
                    35:e0:59:cd:a6:33:c3:3e:b4:17:e8:eb:c5:57:62:
                    7e:d0:11:1d:3b:1a:02:9b:f5:84:59:57:78:76:e1:
                    6d:d9:9b:b7:15:62:98:d9:4c:00:cb:85:fa:f6:4d:
                    ac:08:9c:20:41:36:bf:df:fb:0d:ad:ad:50:fd:4c:
                    57:83:98:0c:37:e6:a9:e6:e6:76:42:43:eb:b7:9e:
                    e7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:44:30:20:65:6C:3B:D3:75:4F:DD:C9:A2:2E:E9:15:7A:68:47:73
            X509v3 Authority Key Identifier:
                keyid:18:67:05:61:BF:A9:D2:33:6D:FA:A1:80:C4:43:42:B0:46:E1:9A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/0/18670561BFA9D2336DFAA180C44342B046E19ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GGcFYb-p0jNt-qGAxENCsEbhmrw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/0/AS204464.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204464

    Signature Algorithm: sha256WithRSAEncryption
         41:74:72:2b:2a:1e:85:d6:57:4a:65:11:f4:68:e0:8c:4e:b7:
         31:e0:aa:3d:f8:50:20:ba:65:11:53:27:3c:41:0e:ae:aa:cb:
         25:09:b1:f7:34:7f:5d:5f:bb:e4:69:78:e3:9d:28:10:6c:a6:
         0b:28:fe:1f:e0:1c:fe:68:9c:97:c5:88:20:9d:4a:96:0a:d6:
         e9:50:91:f6:e7:ba:fc:95:ed:03:6c:d6:b2:40:42:7a:ef:ec:
         49:d5:60:62:7e:2a:bb:1c:02:b6:6e:79:c5:53:1a:71:69:b9:
         0a:c2:e3:b2:ba:d5:1c:2e:73:21:67:f7:12:55:cd:fe:dc:57:
         fa:2c:29:bf:2c:e8:18:20:d9:3a:82:c4:3b:f1:a2:81:18:74:
         10:a5:18:81:6b:7b:56:90:cd:d1:9a:88:85:93:9b:ca:62:97:
         69:49:fa:c6:17:60:e0:a6:11:16:76:a5:26:a7:86:87:83:a7:
         b3:7a:4e:ce:e4:ab:7e:6d:64:ba:dc:bf:0f:90:e5:0e:4a:77:
         62:b6:5e:ac:1c:92:a3:1a:31:5c:f9:24:02:61:24:4e:db:bb:
         1a:d8:e2:8d:c7:65:49:76:5f:14:a9:dc:49:9c:9f:0f:20:30:
         b4:1a:cb:00:2e:0a:18:b7:00:72:97:d0:d3:01:9e:d3:bc:54:
         f1:dd:15:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----