Autonomous System Provider Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6dcff427-2ad5-4392-a64c-af61d7084842/1/AS201279.asa
File:                     AS201279.asa (raw, json)
Hash identifier:          hqLi2DiFwoaa2wLFWlbJDK7eLVq4k0dVLZW/5wZH4O8=
Subject key identifier:   C1:64:46:9D:75:6F:26:D7:D4:93:19:9A:9E:C3:0F:1B:51:83:FB:34
Certificate issuer:       /CN=32e8efc78d3fe09b28649e0f0480d4c221b031b1
Certificate serial:       79771CE55D31C39B888EE3AC7D95231AAF504D30
Authority key identifier: 32:E8:EF:C7:8D:3F:E0:9B:28:64:9E:0F:04:80:D4:C2:21:B0:31:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mujvx40_4JsoZJ4PBIDUwiGwMbE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6dcff427-2ad5-4392-a64c-af61d7084842/1/AS201279.asa
Signing time:             Mon 26 Oct 2026 21:41:41 +0000
ASPA not before:          Mon 26 Oct 2026 21:36:41 +0000
ASPA not after:           Mon 25 Oct 2027 21:41:41 +0000
Customer ASID:            201279
Providers:                AS: 51202
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6dcff427-2ad5-4392-a64c-af61d7084842/1/32E8EFC78D3FE09B28649E0F0480D4C221B031B1.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6dcff427-2ad5-4392-a64c-af61d7084842/1/32E8EFC78D3FE09B28649E0F0480D4C221B031B1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mujvx40_4JsoZJ4PBIDUwiGwMbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Nov 2026 12:34:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:77:1c:e5:5d:31:c3:9b:88:8e:e3:ac:7d:95:23:1a:af:50:4d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32e8efc78d3fe09b28649e0f0480d4c221b031b1
        Validity
            Not Before: Oct 26 21:36:41 2026 GMT
            Not After : Oct 25 21:41:41 2027 GMT
        Subject: CN=C164469D756F26D7D493199A9EC30F1B5183FB34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:92:68:16:fc:11:bb:b6:de:2c:61:73:bd:97:
                    e3:56:e0:b2:e4:99:c4:b9:ea:4f:c9:a1:83:8b:2a:
                    b2:05:91:d3:dd:a7:a3:12:02:26:81:9c:fe:8b:e9:
                    fb:49:02:6d:2a:bf:0e:5e:95:63:3d:d2:09:1a:49:
                    b0:4c:a7:d0:37:24:4f:f6:12:e1:e3:bd:e6:33:5f:
                    92:c7:f3:fc:54:73:91:ab:83:44:3a:68:3d:e6:08:
                    59:b1:87:93:65:14:da:d2:31:47:7c:7c:53:0a:fb:
                    2b:51:89:b6:78:82:a7:dd:e3:23:b5:e8:16:e9:e3:
                    08:6c:a1:2e:4c:23:28:51:28:8f:62:78:16:03:cc:
                    16:0f:ca:ff:5a:ff:be:61:fa:71:49:17:7f:9b:53:
                    b0:ae:87:91:b7:02:35:99:63:33:1b:e3:fa:03:ec:
                    8c:75:ee:67:36:c9:e2:70:5a:76:52:f3:7c:d3:20:
                    fb:36:7c:85:0c:76:8f:05:22:d3:10:d9:cb:fe:8d:
                    4d:13:0d:dc:e1:f8:57:5a:69:72:42:d2:92:3d:4e:
                    04:27:97:18:ac:ce:b1:31:d2:a0:e1:9a:39:0e:3b:
                    97:9b:46:86:a8:f1:8a:c7:7b:06:24:bf:6f:ba:39:
                    0c:39:ac:77:d0:5f:e2:0d:b3:9e:9b:7c:2b:cc:29:
                    95:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:64:46:9D:75:6F:26:D7:D4:93:19:9A:9E:C3:0F:1B:51:83:FB:34
            X509v3 Authority Key Identifier:
                keyid:32:E8:EF:C7:8D:3F:E0:9B:28:64:9E:0F:04:80:D4:C2:21:B0:31:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6dcff427-2ad5-4392-a64c-af61d7084842/1/32E8EFC78D3FE09B28649E0F0480D4C221B031B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mujvx40_4JsoZJ4PBIDUwiGwMbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6dcff427-2ad5-4392-a64c-af61d7084842/1/AS201279.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201279

    Signature Algorithm: sha256WithRSAEncryption
         83:2a:55:b6:4b:f9:7c:a9:3e:72:c0:0e:4d:f5:f2:35:2d:90:
         2d:23:6e:7e:f3:4e:a5:b7:7e:8f:c0:d0:72:3d:04:14:79:b1:
         16:4e:c1:01:8f:a0:af:8e:a6:70:4a:f0:4f:55:7e:88:0b:0e:
         76:71:10:90:d8:9a:c6:9c:55:a7:41:0b:4b:34:f8:52:d3:5c:
         10:2d:7b:74:09:cb:be:68:ed:36:fe:1b:18:03:27:e4:33:6e:
         d6:ea:d1:f5:05:d4:ca:d4:b1:66:05:cd:1a:0c:73:ba:b0:14:
         6e:41:38:5d:bd:cd:c3:59:0a:cb:3f:26:49:05:78:5c:a1:a1:
         ef:d7:a1:11:79:01:1e:33:19:42:c9:6f:a6:d3:bf:b7:3f:c2:
         a5:98:f1:51:c2:be:b4:ef:f8:41:5a:ee:39:aa:d7:8d:be:d7:
         77:db:4d:c7:fe:a2:bc:43:79:64:fc:ad:d0:4b:4d:ff:df:46:
         94:71:63:24:25:99:6d:db:69:fb:66:8e:26:83:d9:64:97:42:
         61:4d:96:94:fd:dd:62:7e:0e:f5:e1:b7:4b:ed:2e:6f:23:4f:
         22:ff:83:e3:b4:90:36:35:da:49:49:3b:d5:d4:e3:f1:64:56:
         5a:93:af:ca:eb:8a:81:93:72:f5:3c:5a:4e:83:ae:cb:7e:d4:
         75:73:8f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 05:05:24 2026 by rpki-client