Autonomous System Provider Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6dcff427-2ad5-4392-a64c-af61d7084842/0/AS219267.asa
File:                     AS219267.asa (raw, json)
Hash identifier:          K7nLEkUzx+P3iqL6R72BzjqYyFK3n1YDRT/OR4Cd+Vs=
Subject key identifier:   02:15:5A:CC:E3:74:42:EC:B2:6A:D4:6D:47:70:C6:A3:46:2C:3B:A1
Certificate issuer:       /CN=9d59eeae1560833c0616b818baf492e8ac363702
Certificate serial:       0B154BC7890C5F41E4F9A82A290A0DD8C356A791
Authority key identifier: 9D:59:EE:AE:15:60:83:3C:06:16:B8:18:BA:F4:92:E8:AC:36:37:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nVnurhVggzwGFrgYuvSS6Kw2NwI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6dcff427-2ad5-4392-a64c-af61d7084842/0/AS219267.asa
Signing time:             Mon 26 Oct 2026 21:34:53 +0000
ASPA not before:          Mon 26 Oct 2026 21:29:53 +0000
ASPA not after:           Mon 25 Oct 2027 21:34:53 +0000
Customer ASID:            219267
Providers:                AS: 8772
                          AS: 29632
                          AS: 39249
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6dcff427-2ad5-4392-a64c-af61d7084842/0/9D59EEAE1560833C0616B818BAF492E8AC363702.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6dcff427-2ad5-4392-a64c-af61d7084842/0/9D59EEAE1560833C0616B818BAF492E8AC363702.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nVnurhVggzwGFrgYuvSS6Kw2NwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Nov 2026 03:15:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:15:4b:c7:89:0c:5f:41:e4:f9:a8:2a:29:0a:0d:d8:c3:56:a7:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d59eeae1560833c0616b818baf492e8ac363702
        Validity
            Not Before: Oct 26 21:29:53 2026 GMT
            Not After : Oct 25 21:34:53 2027 GMT
        Subject: CN=02155ACCE37442ECB26AD46D4770C6A3462C3BA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:65:49:62:5c:f6:8a:f7:c8:4b:db:54:58:14:
                    54:2f:05:86:f8:2d:9b:de:e9:bd:e5:47:ab:42:e9:
                    0a:03:e7:5f:78:7f:1b:b6:ee:ea:2d:fd:00:75:2c:
                    f6:39:aa:51:bd:9d:f5:2c:8f:2b:3b:4c:69:fc:46:
                    37:f5:f9:70:af:c9:fe:af:4b:9e:ac:4f:a4:00:a9:
                    e9:4b:d9:89:04:59:48:61:45:98:e6:e3:cb:15:93:
                    d9:78:a2:2b:2c:7c:33:cf:1d:e6:43:c2:e8:28:7a:
                    f9:c4:aa:62:83:e7:04:bb:ed:f9:12:f8:35:7f:1b:
                    5f:bc:a1:da:bf:31:b6:e0:18:aa:5e:60:5d:51:d6:
                    be:39:90:2f:ce:8c:03:11:2b:2e:1b:3f:21:52:9a:
                    52:6e:1d:93:86:cb:1f:09:aa:ad:65:f2:36:6b:fb:
                    a3:77:5d:51:f3:86:74:18:e5:9f:e7:d3:ea:bd:a5:
                    15:d3:f5:00:4c:61:b0:ae:81:a6:cb:56:45:41:b3:
                    fd:e9:b1:08:74:24:f8:05:01:fc:08:ed:0c:64:e1:
                    a8:73:98:9b:df:a5:f7:f1:06:90:d7:5b:f7:0c:c4:
                    56:f3:a4:88:ee:16:9f:f3:8b:d7:ef:40:4b:72:08:
                    ed:2f:74:8f:79:17:f0:f3:3c:00:9f:f8:d5:92:26:
                    18:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:15:5A:CC:E3:74:42:EC:B2:6A:D4:6D:47:70:C6:A3:46:2C:3B:A1
            X509v3 Authority Key Identifier:
                keyid:9D:59:EE:AE:15:60:83:3C:06:16:B8:18:BA:F4:92:E8:AC:36:37:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6dcff427-2ad5-4392-a64c-af61d7084842/0/9D59EEAE1560833C0616B818BAF492E8AC363702.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVnurhVggzwGFrgYuvSS6Kw2NwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6dcff427-2ad5-4392-a64c-af61d7084842/0/AS219267.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  219267

    Signature Algorithm: sha256WithRSAEncryption
         2b:3f:72:80:a6:63:e4:dd:c5:5d:16:fb:60:d5:92:76:4b:4a:
         60:26:12:61:a1:7d:0d:6c:25:79:c9:05:1b:27:e7:35:eb:b2:
         3e:f5:c5:3e:3b:a3:53:13:b5:b5:86:fa:f0:83:de:d8:b1:a9:
         dc:c2:1d:e3:c9:f1:41:38:02:bd:20:13:ce:fa:21:49:81:48:
         79:5f:e3:ed:3c:cd:cc:92:af:5e:28:1e:7e:dd:ee:a1:62:37:
         09:e6:53:9b:06:a9:14:b4:aa:40:71:75:55:0b:ca:91:1a:8f:
         13:b1:c3:38:bc:ac:01:7e:63:af:6f:d1:8d:3a:0b:7f:47:07:
         c4:5f:48:b6:f4:96:26:0f:57:23:a9:d8:9d:ad:1a:09:30:87:
         ed:c7:2b:82:cd:96:61:d1:4e:2e:30:54:ed:d3:cd:07:27:17:
         31:c1:74:20:c4:4a:80:6f:9c:95:90:57:04:0c:10:49:de:c6:
         df:7c:f2:20:ab:5a:2c:a6:e7:e8:c3:e6:e7:a7:13:4c:c8:8c:
         68:ae:60:f3:66:17:54:aa:28:5c:d3:61:d7:87:1e:87:2b:bf:
         d9:bb:b3:8c:df:bf:19:c2:10:3f:cd:75:79:b6:30:cf:8b:23:
         df:78:28:04:43:cb:b7:d1:18:7b:62:39:32:12:45:ee:e5:ea:
         ab:1f:ab:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 13:31:53 2026 by rpki-client