Autonomous System Provider Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/3/AS201398.asa
File:                     AS201398.asa (raw, json)
Hash identifier:          RZO4ieNHqVPcfn3XDiP+r+hyFXWvPYLfC8/YrW201iY=
Subject key identifier:   80:8B:6A:AB:04:80:4D:9E:33:CB:E4:12:8E:8A:F2:5D:1B:6C:67:58
Certificate issuer:       /CN=c09b9b6b6b65abe29d9f086b07c6de1f1ed8ceeb
Certificate serial:       7B6F8D8A9C023CA1C5BB5BDC311E8CC8FE98AFAC
Authority key identifier: C0:9B:9B:6B:6B:65:AB:E2:9D:9F:08:6B:07:C6:DE:1F:1E:D8:CE:EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wJuba2tlq-KdnwhrB8beHx7Yzus.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/3/AS201398.asa
Signing time:             Sun 20 Sep 2026 19:46:12 +0000
ASPA not before:          Sun 20 Sep 2026 19:41:12 +0000
ASPA not after:           Sun 19 Sep 2027 19:46:12 +0000
Customer ASID:            201398
Providers:                AS: 6939
                          AS: 34872
                          AS: 52025
                          AS: 205941
                          AS: 212895
                          AS: 214757
                          AS: 214762
                          AS: 215638
                          AS: 215828
                          AS: 219331
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/3/C09B9B6B6B65ABE29D9F086B07C6DE1F1ED8CEEB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/3/C09B9B6B6B65ABE29D9F086B07C6DE1F1ED8CEEB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wJuba2tlq-KdnwhrB8beHx7Yzus.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 20:41:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:6f:8d:8a:9c:02:3c:a1:c5:bb:5b:dc:31:1e:8c:c8:fe:98:af:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c09b9b6b6b65abe29d9f086b07c6de1f1ed8ceeb
        Validity
            Not Before: Sep 20 19:41:12 2026 GMT
            Not After : Sep 19 19:46:12 2027 GMT
        Subject: CN=808B6AAB04804D9E33CBE4128E8AF25D1B6C6758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ea:5c:48:df:cf:37:ee:54:f1:e3:d6:ba:36:
                    06:9d:d5:92:84:aa:e3:d0:e3:b1:68:ee:7c:8b:c4:
                    9b:65:b5:3f:e3:e0:c3:c9:5e:55:65:71:22:f6:29:
                    91:ee:f0:8f:93:4e:b1:07:f3:e0:76:2f:e4:ed:ef:
                    87:4e:7a:bd:a2:b9:fe:8f:62:e3:fc:06:a3:0d:68:
                    a3:9f:a4:06:10:72:41:21:60:5b:3a:17:c6:63:1c:
                    6c:4f:e6:88:74:bd:6a:3d:ab:20:a7:a4:88:bb:13:
                    47:9f:1b:69:2b:26:08:78:b8:de:d8:5e:1e:9b:ce:
                    fe:30:93:80:6d:fc:3d:72:d3:1e:79:60:15:19:6d:
                    57:0b:12:f2:70:09:75:02:c3:b7:cd:5d:b2:96:3b:
                    36:95:83:76:e7:09:37:f1:82:4a:22:c4:71:32:8f:
                    90:2b:e3:db:fe:f1:55:8e:43:ad:61:b7:bc:e8:b8:
                    8d:2e:fd:4b:a0:8a:cb:85:bf:b5:4b:16:16:b0:bb:
                    9c:6d:05:d0:38:73:42:c1:89:3d:1e:ba:ae:00:bc:
                    64:37:c1:25:5c:e0:48:7c:57:83:03:0e:cb:aa:f3:
                    99:7f:4c:b0:87:18:40:dd:fc:19:c1:fd:9e:1d:ac:
                    a4:f9:35:e6:8a:27:f5:95:66:8b:9c:a1:b3:02:5f:
                    02:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:8B:6A:AB:04:80:4D:9E:33:CB:E4:12:8E:8A:F2:5D:1B:6C:67:58
            X509v3 Authority Key Identifier:
                keyid:C0:9B:9B:6B:6B:65:AB:E2:9D:9F:08:6B:07:C6:DE:1F:1E:D8:CE:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/3/C09B9B6B6B65ABE29D9F086B07C6DE1F1ED8CEEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJuba2tlq-KdnwhrB8beHx7Yzus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/3/AS201398.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201398

    Signature Algorithm: sha256WithRSAEncryption
         89:3f:44:da:c1:11:f4:b1:d4:7b:a2:b8:b3:21:51:43:57:85:
         44:d4:8d:b8:ca:a5:22:ab:e0:1c:b4:07:f1:20:6b:03:ac:58:
         22:fa:52:33:37:cb:f1:03:05:69:f2:12:e1:6b:e6:1a:c3:9a:
         f9:f6:97:bc:44:a1:15:a5:47:1b:08:50:fd:ff:e5:c8:ee:f1:
         5c:9d:c3:1e:56:fc:31:b5:08:00:58:ed:04:25:2f:d0:72:e5:
         4a:c9:bb:29:cc:e3:6c:21:73:51:d2:3f:40:98:ea:35:9b:85:
         69:fa:01:68:53:3f:4a:37:ec:a4:3b:f7:02:b5:c3:06:67:93:
         3d:2a:fa:e8:c4:82:62:be:0f:66:42:f0:de:11:63:8c:ce:07:
         0c:91:40:4b:82:41:77:45:16:c8:17:56:23:d1:26:f3:1f:3d:
         2d:96:bd:aa:bc:ca:a3:93:16:65:02:77:0c:6b:ef:45:1d:d3:
         cc:06:d8:b2:14:bf:a2:03:c5:0c:38:c5:a4:35:b5:8e:bd:26:
         4e:92:79:73:02:75:be:0e:76:cf:1c:0b:c6:10:8c:0b:e4:4c:
         23:c0:f5:be:d3:54:3d:80:43:92:8e:6b:c0:da:14:46:f4:e1:
         f8:d2:75:ac:1f:27:72:9e:e2:a9:b6:55:dc:1f:d4:45:74:b3:
         81:90:a5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:36:00 2026 by rpki-client