Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/7/AS205941.asa
File:                     AS205941.asa (raw, json)
Hash identifier:          9spObUbHpAkXIM7YZ+50YqknkOiwFm1d8mVPPIYo0uo=
Subject key identifier:   16:81:7C:35:82:CB:21:DC:40:3B:C5:8E:68:0C:D6:ED:32:63:2F:87
Certificate issuer:       /CN=d8357190aa9304ec442706e1c07b99bc4d7f5da3
Certificate serial:       0A6B21226DC281963D5FD1D9F5C6164ED4BA7E53
Authority key identifier: D8:35:71:90:AA:93:04:EC:44:27:06:E1:C0:7B:99:BC:4D:7F:5D:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2DVxkKqTBOxEJwbhwHuZvE1_XaM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/7/AS205941.asa
Signing time:             Sat 01 Nov 2025 21:14:29 +0000
ASPA not before:          Sat 01 Nov 2025 21:09:29 +0000
ASPA not after:           Sat 31 Oct 2026 21:14:29 +0000
Customer ASID:            205941
Providers:                AS: 23507
                          AS: 34927
                          AS: 60900
                          AS: 211281
                          AS: 214639
                          AS: 214757
                          AS: 214963
                          AS: 215147
                          AS: 215828
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/7/D8357190AA9304EC442706E1C07B99BC4D7F5DA3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/7/D8357190AA9304EC442706E1C07B99BC4D7F5DA3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2DVxkKqTBOxEJwbhwHuZvE1_XaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 05:26:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:6b:21:22:6d:c2:81:96:3d:5f:d1:d9:f5:c6:16:4e:d4:ba:7e:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8357190aa9304ec442706e1c07b99bc4d7f5da3
        Validity
            Not Before: Nov  1 21:09:29 2025 GMT
            Not After : Oct 31 21:14:29 2026 GMT
        Subject: CN=16817C3582CB21DC403BC58E680CD6ED32632F87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:57:72:dc:93:c0:da:17:47:e1:11:8c:14:78:
                    6f:b5:5e:4d:4c:32:5f:21:59:03:55:4c:55:0a:6e:
                    e0:12:05:c2:e6:d0:ba:a3:ff:58:2a:5a:38:36:93:
                    30:24:97:b1:04:d5:97:b0:35:c4:44:65:54:8f:80:
                    f2:57:ec:72:d6:26:60:f1:a8:34:f0:0e:e0:eb:f2:
                    79:71:ea:8b:3d:41:fd:89:4a:2b:df:fa:2d:61:78:
                    a3:7b:f3:02:34:88:8e:00:3a:38:3f:0c:8c:a1:00:
                    e0:82:1c:6a:f9:3a:1a:49:be:ec:00:08:c7:20:29:
                    a8:84:f9:77:ef:c6:79:37:83:2d:7f:d3:7c:c6:ca:
                    d2:d4:c6:82:0c:65:47:17:3a:57:62:db:ce:8f:f5:
                    27:0a:a4:9f:58:09:8c:8e:df:16:2a:e7:70:cd:70:
                    af:b2:2c:b0:88:c6:65:63:8e:e1:93:2f:94:6f:97:
                    bb:14:c9:1d:51:bf:2b:c8:27:21:3b:f8:1e:21:b5:
                    ef:69:78:26:ce:7b:9a:94:73:3d:98:14:c1:ab:e9:
                    57:69:bf:bf:f1:b1:90:31:3e:08:1b:e4:28:a4:2a:
                    dc:a4:dd:a4:89:0d:04:b6:5b:16:bb:7b:25:45:26:
                    c7:fb:b2:31:72:a7:95:0f:9e:45:04:92:a9:fe:f5:
                    40:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:81:7C:35:82:CB:21:DC:40:3B:C5:8E:68:0C:D6:ED:32:63:2F:87
            X509v3 Authority Key Identifier:
                keyid:D8:35:71:90:AA:93:04:EC:44:27:06:E1:C0:7B:99:BC:4D:7F:5D:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/7/D8357190AA9304EC442706E1C07B99BC4D7F5DA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DVxkKqTBOxEJwbhwHuZvE1_XaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/7/AS205941.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205941

    Signature Algorithm: sha256WithRSAEncryption
         85:ef:3a:40:99:1e:dd:c1:e9:11:e6:37:3c:f2:51:df:79:90:
         f6:43:16:44:be:4c:90:0c:69:7a:57:1e:d8:fb:db:b4:e1:f3:
         53:e9:64:66:9e:1f:47:93:cb:ae:b3:a4:52:dc:e1:93:ec:c2:
         ae:bb:ef:50:38:19:5a:17:d6:cc:51:09:4e:29:9f:75:ac:13:
         a7:83:de:54:3e:7c:58:e8:0f:6b:05:88:bd:75:63:e1:e1:f5:
         5e:fe:85:11:1c:7a:e4:06:96:bf:13:82:27:d9:c5:53:db:96:
         65:8b:fe:7d:80:40:83:9b:46:d6:e0:f8:00:84:46:2b:84:72:
         9c:3e:ad:50:32:67:c8:19:cc:9e:eb:35:d4:8d:31:d6:ad:7a:
         bb:f2:6d:c7:85:53:43:b5:37:59:4d:ea:9d:6a:c5:50:e5:21:
         51:5c:35:7a:df:1d:03:49:af:ae:eb:b2:35:04:c5:68:05:06:
         2c:6f:5a:c0:b0:74:ea:69:a5:9b:6f:05:e9:81:97:c9:b4:4a:
         d3:bb:e9:08:99:f0:90:e1:4d:ad:e8:01:a5:75:50:5d:8f:1d:
         4e:37:20:29:a1:7e:12:25:ff:ef:d5:8e:b1:df:d0:2c:73:75:
         5a:4b:33:80:dc:02:c2:fd:99:04:68:05:03:a0:13:77:af:96:
         3c:de:ba:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:29:17 2025 by rpki-client