Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/0/AS201398.asa
File:                     AS201398.asa (raw, json)
Hash identifier:          n2wkwGrf3QROcsDyInpQ0Xfd7WdYDokAiwGbN4VXzkE=
Subject key identifier:   DD:E8:A6:B8:E4:68:13:5B:AF:C4:0F:E1:A4:1B:3D:91:A8:2F:3D:18
Certificate issuer:       /CN=d0e968ac84894210b3d280ef43830657f28075d6
Certificate serial:       63DF232B0313FD533DFC0FA34FA94A4DB133EDC7
Authority key identifier: D0:E9:68:AC:84:89:42:10:B3:D2:80:EF:43:83:06:57:F2:80:75:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0OlorISJQhCz0oDvQ4MGV_KAddY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/0/AS201398.asa
Signing time:             Sun 05 Apr 2026 13:03:15 +0000
ASPA not before:          Sun 05 Apr 2026 12:58:15 +0000
ASPA not after:           Sun 04 Apr 2027 13:03:15 +0000
Customer ASID:            201398
Providers:                AS: 34872
                          AS: 212895
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/0/D0E968AC84894210B3D280EF43830657F28075D6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/0/D0E968AC84894210B3D280EF43830657F28075D6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0OlorISJQhCz0oDvQ4MGV_KAddY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:df:23:2b:03:13:fd:53:3d:fc:0f:a3:4f:a9:4a:4d:b1:33:ed:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e968ac84894210b3d280ef43830657f28075d6
        Validity
            Not Before: Apr  5 12:58:15 2026 GMT
            Not After : Apr  4 13:03:15 2027 GMT
        Subject: CN=DDE8A6B8E468135BAFC40FE1A41B3D91A82F3D18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7b:49:a8:86:d1:d8:6d:60:54:a0:67:6e:cd:
                    77:c9:22:f9:27:df:d4:86:5d:2d:51:3b:23:bf:71:
                    f4:48:05:62:de:00:89:99:cc:7d:d5:4e:97:3a:45:
                    88:f6:31:1c:fe:8e:dc:70:d6:6a:ea:10:ee:64:c9:
                    b7:5f:13:f8:51:ea:20:41:36:26:e9:33:50:a7:9d:
                    de:e1:94:bd:ec:4a:e7:28:65:49:99:8f:9e:28:e1:
                    e7:1a:e1:57:60:ec:60:f0:5c:b2:72:50:64:17:fc:
                    86:13:bd:69:c8:21:bd:1d:7f:3a:72:e1:e2:74:af:
                    95:56:01:16:9a:de:44:e8:5e:80:99:f7:d9:cb:6a:
                    10:8c:b1:f3:4b:09:1c:e3:4b:fd:ef:7f:fb:17:23:
                    30:e8:1b:6c:f6:56:70:7c:d4:ed:d2:9d:0a:82:c8:
                    03:6a:80:27:53:e5:2f:da:32:0d:d7:dc:33:70:da:
                    9e:3d:b8:72:0e:55:0b:d9:c2:bf:25:19:b5:7f:87:
                    6d:26:32:2a:91:74:52:cd:5d:70:5b:5e:10:81:d5:
                    2b:7c:cc:76:c5:ae:86:4e:b7:b1:f5:e8:7e:ab:8a:
                    e3:c7:e7:4d:fd:a1:84:27:bd:20:da:28:49:a8:71:
                    ea:9f:d2:3f:7e:ae:a9:2d:f3:e1:bc:b5:ab:66:53:
                    77:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E8:A6:B8:E4:68:13:5B:AF:C4:0F:E1:A4:1B:3D:91:A8:2F:3D:18
            X509v3 Authority Key Identifier:
                keyid:D0:E9:68:AC:84:89:42:10:B3:D2:80:EF:43:83:06:57:F2:80:75:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/0/D0E968AC84894210B3D280EF43830657F28075D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OlorISJQhCz0oDvQ4MGV_KAddY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/0/AS201398.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201398

    Signature Algorithm: sha256WithRSAEncryption
         37:bb:75:0e:64:2c:46:dc:9f:71:14:58:97:f4:6a:3d:ad:ca:
         d3:38:2e:18:60:9c:1a:cf:32:af:5e:95:d6:e6:0f:e9:c3:c3:
         2b:ad:eb:05:23:cb:5b:76:fb:c1:88:4b:c0:2e:17:a0:09:60:
         ad:e9:18:c6:38:33:80:ff:a9:0c:f7:65:e8:86:d8:28:49:3a:
         ad:5f:5b:bc:e0:95:19:64:ec:b3:86:1a:72:c6:ba:cc:6b:c8:
         41:35:14:7d:86:f2:fb:46:24:c9:6c:81:fd:36:a0:b3:63:a3:
         c9:37:73:b4:0a:3e:7a:21:ae:68:e1:3c:86:4c:99:2b:42:aa:
         b3:6c:39:82:ec:e7:f3:56:97:41:09:d7:f2:95:bf:de:58:d1:
         c8:66:3e:72:bb:25:5d:47:36:66:3c:5e:18:69:2a:e8:d7:f1:
         61:8f:b0:fb:a8:14:4e:8c:33:ec:60:72:4e:be:0a:b2:d4:d3:
         9d:da:ed:dc:13:51:54:49:ac:d6:8f:55:3a:0f:4f:f9:3d:a0:
         2d:0f:85:4e:8e:fd:5e:02:33:6d:6b:31:98:1e:4b:53:29:74:
         cb:67:80:e6:8b:fb:a9:31:42:1b:05:cb:48:bb:28:2e:1e:e4:
         c5:3f:8b:67:bc:f5:87:07:8d:c2:88:5e:c3:b0:37:a5:e8:5c:
         79:3f:b6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:50:18 2026 by rpki-client