Autonomous System Provider Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/2/AS218904.asa
File:                     AS218904.asa (raw, json)
Hash identifier:          2APSJj4sILOj/UlCFaW7JSoWtAv3v4pfE4ClbXw+p6M=
Subject key identifier:   8D:73:58:96:1A:63:93:B9:28:2E:29:C9:C7:F0:FC:97:D5:9C:71:C8
Certificate issuer:       /CN=db1e7c4215d9a1eea81f0b1299f6760d27562610
Certificate serial:       20FC9485603793FD56526BB49D9E6329C068AAB1
Authority key identifier: DB:1E:7C:42:15:D9:A1:EE:A8:1F:0B:12:99:F6:76:0D:27:56:26:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2x58QhXZoe6oHwsSmfZ2DSdWJhA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/2/AS218904.asa
Signing time:             Fri 11 Sep 2026 02:54:21 +0000
ASPA not before:          Fri 11 Sep 2026 02:49:21 +0000
ASPA not after:           Fri 10 Sep 2027 02:54:21 +0000
Customer ASID:            218904
Providers:                AS: 199746
                          AS: 204464
                          AS: 212895
                          AS: 215828
                          AS: 218832
                          AS: 219157
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/2/DB1E7C4215D9A1EEA81F0B1299F6760D27562610.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/2/DB1E7C4215D9A1EEA81F0B1299F6760D27562610.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2x58QhXZoe6oHwsSmfZ2DSdWJhA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 07:39:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:fc:94:85:60:37:93:fd:56:52:6b:b4:9d:9e:63:29:c0:68:aa:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db1e7c4215d9a1eea81f0b1299f6760d27562610
        Validity
            Not Before: Sep 11 02:49:21 2026 GMT
            Not After : Sep 10 02:54:21 2027 GMT
        Subject: CN=8D7358961A6393B9282E29C9C7F0FC97D59C71C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:80:2a:0f:4e:1e:c9:3b:79:7f:c5:1f:17:54:
                    6d:b5:b1:bf:b0:da:1d:47:db:19:d5:e1:cf:ae:4f:
                    fb:35:7c:20:57:e4:76:45:bd:5b:2c:f6:85:8a:eb:
                    af:74:51:46:06:4a:b8:7e:02:b0:60:53:0e:43:72:
                    a3:b8:50:1d:de:a9:2a:d4:48:bc:d9:3a:f2:7d:aa:
                    79:e5:3e:d9:fc:d6:e2:17:b8:aa:42:2a:2d:3a:de:
                    87:5e:28:74:a0:86:8d:b6:33:6d:32:cb:81:22:f6:
                    c2:03:0a:fd:e4:ec:55:78:26:0a:14:c2:ae:d3:52:
                    50:94:a1:ee:db:b0:3a:48:1a:3f:91:49:44:18:9b:
                    16:44:f2:b7:6e:12:87:b2:55:f7:96:d7:e9:d9:bf:
                    76:90:72:27:37:cf:ad:ac:79:11:42:e7:bc:dd:64:
                    3b:55:64:88:21:84:e3:b9:08:d2:03:ba:96:2f:1a:
                    16:87:28:95:73:01:05:82:72:f7:dc:09:04:ac:11:
                    d1:36:85:ab:31:4b:ec:7f:7b:15:af:31:38:00:48:
                    84:99:bd:a7:5f:7b:95:6e:fe:b1:58:fd:14:32:30:
                    34:4f:b3:87:a7:4f:f7:a7:ca:96:85:17:31:c5:4c:
                    dc:1f:7d:49:28:3f:41:80:a7:34:c5:af:ce:0d:24:
                    45:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:73:58:96:1A:63:93:B9:28:2E:29:C9:C7:F0:FC:97:D5:9C:71:C8
            X509v3 Authority Key Identifier:
                keyid:DB:1E:7C:42:15:D9:A1:EE:A8:1F:0B:12:99:F6:76:0D:27:56:26:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/2/DB1E7C4215D9A1EEA81F0B1299F6760D27562610.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x58QhXZoe6oHwsSmfZ2DSdWJhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/2/AS218904.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  218904

    Signature Algorithm: sha256WithRSAEncryption
         7f:70:38:41:37:4d:d4:7e:5d:65:52:d2:f2:19:d8:a7:71:8f:
         ed:e7:e5:3f:11:05:bc:cf:25:88:31:97:fc:fe:9b:be:28:82:
         35:76:17:2e:99:22:42:4d:ed:6f:bc:f1:a0:73:31:e2:50:1e:
         21:04:fe:7e:4b:f2:cd:dc:51:46:86:ab:2d:3d:58:f3:45:96:
         d2:bc:00:be:20:7f:ec:02:a2:5c:ff:df:fd:23:a8:75:5f:03:
         ca:a5:4d:9d:5f:07:2a:0f:2e:a1:22:0c:a2:20:76:a8:49:62:
         db:83:9d:2b:9f:c4:6a:25:c3:01:74:54:4d:70:a3:16:1d:fb:
         25:15:7c:b2:d6:bf:fd:62:22:a8:9b:04:a5:28:0a:0e:84:55:
         c1:07:38:b0:0c:da:d9:a5:87:68:f2:49:01:0e:19:e4:33:f5:
         73:f9:7d:cf:e1:7c:a9:14:69:6b:c1:4d:12:56:5e:1b:80:16:
         df:d5:4c:2e:f4:d1:3e:01:ee:52:c6:f3:12:79:8b:84:39:d1:
         b8:9a:82:dc:9a:54:10:c5:6c:fb:f0:24:ac:8c:18:c3:d6:49:
         69:a8:22:a1:f8:db:88:29:ee:c9:76:ad:da:a5:72:d6:47:fc:
         5b:34:0c:bf:93:51:d9:d9:35:2c:46:06:8c:43:2e:8d:e4:c6:
         d5:92:81:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----