Autonomous System Provider Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/AS216299.asa
File:                     AS216299.asa (raw, json)
Hash identifier:          90KTaZo6LkHZqsms2xoiDT822/KRSoS7HJkIrzohGFw=
Subject key identifier:   74:F5:2C:E0:81:11:39:FC:DE:43:93:52:8D:2E:E7:DE:3E:47:21:06
Certificate issuer:       /CN=4ec249b7af3ee69c5bbdf3c7f4cbee1eaaec494f
Certificate serial:       2E861771E02B12531636E0EAE386713FF0D7904C
Authority key identifier: 4E:C2:49:B7:AF:3E:E6:9C:5B:BD:F3:C7:F4:CB:EE:1E:AA:EC:49:4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/AS216299.asa
Signing time:             Wed 16 Sep 2026 02:35:55 +0000
ASPA not before:          Wed 16 Sep 2026 02:30:55 +0000
ASPA not after:           Wed 15 Sep 2027 02:35:55 +0000
Customer ASID:            216299
Providers:                AS: 6939
                          AS: 7720
                          AS: 17433
                          AS: 27523
                          AS: 40792
                          AS: 44324
                          AS: 47778
                          AS: 51087
                          AS: 52025
                          AS: 53667
                          AS: 53808
                          AS: 137409
                          AS: 199310
                          AS: 201386
                          AS: 204539
                          AS: 206069
                          AS: 207529
                          AS: 209533
                          AS: 209554
                          AS: 213605
                          AS: 216211
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 11:59:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:86:17:71:e0:2b:12:53:16:36:e0:ea:e3:86:71:3f:f0:d7:90:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ec249b7af3ee69c5bbdf3c7f4cbee1eaaec494f
        Validity
            Not Before: Sep 16 02:30:55 2026 GMT
            Not After : Sep 15 02:35:55 2027 GMT
        Subject: CN=74F52CE0811139FCDE4393528D2EE7DE3E472106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:14:dc:6e:8f:4a:72:48:65:2b:c2:f5:9b:21:
                    5a:bc:44:e6:27:ba:31:a7:39:da:6d:06:88:66:7f:
                    3e:1d:61:bb:96:1e:d5:36:78:f7:33:d0:47:51:1f:
                    b5:28:26:76:ea:69:f9:50:c8:f5:02:97:13:86:8f:
                    2b:62:80:60:9d:a3:b9:18:48:65:3f:24:ff:4f:ef:
                    53:cd:0f:1c:6a:d1:e4:ff:0a:1a:38:fc:62:d5:78:
                    54:bc:df:79:24:18:e0:70:24:9f:ec:96:99:23:30:
                    bb:5d:d5:9c:13:41:db:89:b8:c7:41:fb:4b:85:51:
                    f2:30:85:3d:63:66:59:be:fd:46:22:da:c3:9f:05:
                    19:58:a4:bd:ab:cf:d3:01:9e:a1:23:8a:31:7f:eb:
                    66:ea:f8:d3:3a:cf:b7:17:bb:81:58:c9:13:b9:19:
                    2a:a7:66:94:29:5c:ed:a3:48:ab:a5:74:e1:98:db:
                    22:bf:f1:62:0d:36:43:07:48:03:ee:dc:03:b3:4f:
                    43:4e:db:67:af:06:26:bb:a5:8e:bf:a1:d8:af:20:
                    8d:45:75:c2:6b:9d:fe:0b:e1:f7:10:f6:66:4d:fb:
                    54:3e:b9:b4:cc:b3:ee:b3:b5:f7:56:78:a7:65:66:
                    57:0b:8b:81:bf:cf:78:f4:d0:b3:f6:b4:42:02:13:
                    42:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F5:2C:E0:81:11:39:FC:DE:43:93:52:8D:2E:E7:DE:3E:47:21:06
            X509v3 Authority Key Identifier:
                keyid:4E:C2:49:B7:AF:3E:E6:9C:5B:BD:F3:C7:F4:CB:EE:1E:AA:EC:49:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/AS216299.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216299

    Signature Algorithm: sha256WithRSAEncryption
         40:da:f4:6b:92:d8:de:1c:45:4d:a8:49:1e:dc:78:cf:b9:c6:
         9e:dc:e0:cf:d6:ce:53:ea:eb:c6:89:81:2c:6d:4e:30:c8:36:
         17:90:cc:5e:04:5d:79:d3:dd:d2:5e:76:1f:16:9a:4d:1b:e5:
         ec:54:61:85:be:0a:7a:70:63:c7:77:1b:26:9f:49:07:12:f6:
         76:b2:b3:8e:b4:49:42:f1:bc:b3:90:09:b2:0a:33:42:17:37:
         f0:cf:47:6c:fd:b1:31:65:2c:e3:ef:f8:fd:2e:85:03:bf:2f:
         63:a6:84:04:ec:21:29:80:60:52:60:ae:f8:91:e8:c4:8b:a1:
         ce:5a:60:46:2e:6f:79:05:35:71:5f:08:c7:d9:ea:5f:0c:84:
         b1:01:9d:06:f2:3a:61:1f:3f:fb:af:ab:8b:c7:27:e1:73:75:
         cc:26:22:bc:e0:5b:03:99:ca:1d:3b:2b:14:1a:cb:47:c4:f8:
         13:05:54:cf:70:93:df:8b:a9:23:52:33:a1:64:dc:ce:3b:e4:
         e4:34:5e:bc:0c:44:1a:3a:b5:18:a8:db:a7:4e:4b:64:48:ab:
         9d:09:41:db:41:00:c0:20:0e:87:66:b5:ab:e1:f1:2f:12:f2:
         e4:ab:20:2b:62:85:9e:ef:5a:36:7d:13:c8:c5:75:6d:cc:67:
         97:ca:5b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:19:38 2026 by rpki-client