Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/AS214809.asa
File:                     AS214809.asa (raw, json)
Hash identifier:          KZxAxAgv7eodloZuRGXMZMgeZt8qfPZMw5fBoAT3Z1o=
Subject key identifier:   54:A9:A4:60:B9:CD:A6:71:6F:5B:78:3B:B9:B8:32:0A:03:EF:C6:A2
Certificate issuer:       /CN=9b1e886308f3bca322bd4eecea88267713c5ceac
Certificate serial:       36B0016712A90D32859440E867E6D3D9B851B2B3
Authority key identifier: 9B:1E:88:63:08:F3:BC:A3:22:BD:4E:EC:EA:88:26:77:13:C5:CE:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/AS214809.asa
Signing time:             Sat 21 Feb 2026 22:44:17 +0000
ASPA not before:          Sat 21 Feb 2026 22:39:17 +0000
ASPA not after:           Sat 20 Feb 2027 22:44:17 +0000
Customer ASID:            214809
Providers:                AS: 174
                          AS: 6204
                          AS: 6939
                          AS: 35133
                          AS: 50917
                          AS: 64289
                          AS: 213753
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:b0:01:67:12:a9:0d:32:85:94:40:e8:67:e6:d3:d9:b8:51:b2:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b1e886308f3bca322bd4eecea88267713c5ceac
        Validity
            Not Before: Feb 21 22:39:17 2026 GMT
            Not After : Feb 20 22:44:17 2027 GMT
        Subject: CN=54A9A460B9CDA6716F5B783BB9B8320A03EFC6A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1c:ea:37:35:28:9c:df:6e:f8:5c:b5:69:e6:
                    6d:b3:39:53:bc:73:18:27:87:ec:03:16:b9:5a:77:
                    15:56:1b:62:0d:d2:d7:45:13:29:17:3f:ff:9c:bc:
                    a8:dd:9a:c4:a5:c0:91:df:02:6c:c8:5b:b4:01:1d:
                    af:85:52:fd:75:46:ab:21:12:31:1d:89:cc:77:ca:
                    48:5c:c2:0a:14:d6:c6:f3:53:0c:ec:b6:d3:e5:a3:
                    79:81:0a:2d:08:8a:13:26:e5:00:46:f4:b4:30:40:
                    85:98:b9:8d:e5:fc:e8:61:8f:0c:52:56:9a:33:c1:
                    38:1d:ba:c0:74:c0:3e:a2:f8:15:3a:be:ae:e8:5d:
                    23:7c:9c:f4:95:4a:e5:ff:ff:12:b1:50:26:c2:6a:
                    d2:22:00:03:de:e1:5c:47:00:e5:d4:48:1a:46:bb:
                    48:8b:bd:97:63:bc:b9:ad:76:b8:7e:93:b4:4a:bb:
                    b0:3a:9f:bb:33:24:b8:d6:02:5a:1d:ba:f4:fb:27:
                    d4:3a:60:ec:d9:c4:f0:be:b7:b1:2f:57:1c:fc:ed:
                    9b:42:f6:bd:08:39:c8:91:4d:96:49:90:67:0f:72:
                    f2:1b:95:14:2f:f9:26:66:de:f0:07:90:9e:37:c1:
                    0e:35:31:42:77:4c:a8:fe:1c:af:a6:a3:71:52:09:
                    92:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:A9:A4:60:B9:CD:A6:71:6F:5B:78:3B:B9:B8:32:0A:03:EF:C6:A2
            X509v3 Authority Key Identifier:
                keyid:9B:1E:88:63:08:F3:BC:A3:22:BD:4E:EC:EA:88:26:77:13:C5:CE:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/AS214809.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214809

    Signature Algorithm: sha256WithRSAEncryption
         87:4b:57:41:03:de:bc:70:6c:ce:31:19:94:df:83:6d:98:dc:
         2a:77:b9:46:c6:a1:f1:d7:d1:fa:c3:d4:af:8a:0d:11:7a:1f:
         29:1d:9c:ff:ab:29:7a:e9:3e:b3:eb:33:13:85:66:97:dd:da:
         ab:f0:bc:91:da:94:be:44:30:48:3c:e9:bc:ce:b8:1b:17:54:
         39:a2:80:cb:32:af:5d:c1:75:77:8b:e3:07:bd:19:03:c4:85:
         d5:2e:1f:ab:f1:4e:4c:a0:ab:43:ab:79:37:0e:fe:d9:11:12:
         b2:bf:16:2d:83:1a:53:2f:53:ef:b1:a0:88:24:dc:79:98:4b:
         c7:f2:0c:fe:4b:a4:ab:9e:50:9c:be:a9:bf:4e:13:f9:d9:46:
         79:1d:02:b0:1f:54:78:47:ae:ec:ec:9f:33:3e:a9:40:f4:dd:
         ad:8f:e8:b2:c4:0f:67:ba:44:79:9f:c7:d8:59:46:26:aa:e8:
         21:af:ef:e4:dc:05:1e:67:82:5e:02:79:c0:cc:d4:19:62:81:
         56:4a:92:7f:10:cd:42:78:41:09:3e:3c:fa:f8:c7:b6:40:a3:
         dc:be:e4:be:d0:0b:02:2e:29:28:48:e1:03:ca:f0:71:62:a7:
         35:67:11:e9:f5:df:85:84:b4:5b:ef:57:89:15:23:d6:d2:d1:
         27:68:02:c1
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIUNrABZxKpDTKFlEDoZ+bT2bhRsrMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWIxZTg4NjMwOGYzYmNhMzIyYmQ0ZWVjZWE4ODI2Nzcx
M2M1Y2VhYzAeFw0yNjAyMjEyMjM5MTdaFw0yNzAyMjAyMjQ0MTdaMDMxMTAvBgNV
BAMTKDU0QTlBNDYwQjlDREE2NzE2RjVCNzgzQkI5QjgzMjBBMDNFRkM2QTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAHOo3NSic3274XLVp5m2zOVO8
cxgnh+wDFrladxVWG2IN0tdFEykXP/+cvKjdmsSlwJHfAmzIW7QBHa+FUv11Rqsh
EjEdicx3ykhcwgoU1sbzUwzsttPlo3mBCi0IihMm5QBG9LQwQIWYuY3l/OhhjwxS
VpozwTgdusB0wD6i+BU6vq7oXSN8nPSVSuX//xKxUCbCatIiAAPe4VxHAOXUSBpG
u0iLvZdjvLmtdrh+k7RKu7A6n7szJLjWAloduvT7J9Q6YOzZxPC+t7EvVxz87ZtC
9r0IOciRTZZJkGcPcvIblRQv+SZm3vAHkJ43wQ41MUJ3TKj+HK+mo3FSCZLfAgMB
AAGjggIFMIICATAdBgNVHQ4EFgQUVKmkYLnNpnFvW3g7ubgyCgPvxqIwHwYDVR0j
BBgwFoAUmx6IYwjzvKMivU7s6ogmdxPFzqwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzEwOThjMjMtYTk3Ny00ZjlhLTk3YzktY2Q0ZTc1OWRl
YTA5LzAvOUIxRTg4NjMwOEYzQkNBMzIyQkQ0RUVDRUE4ODI2NzcxM0M1Q0VBQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL214NklZd2p6dktNaXZVN3M2b2dtZHhQ
Rnpxdy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxMDk4YzIzLWE5Nzct
NGY5YS05N2M5LWNkNGU3NTlkZWEwOS8wL0FTMjE0ODA5LmFzYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNHGTANBgkq
hkiG9w0BAQsFAAOCAQEAh0tXQQPevHBszjEZlN+DbZjcKne5Rsah8dfR+sPUr4oN
EXofKR2c/6speuk+s+szE4Vml93aq/C8kdqUvkQwSDzpvM64GxdUOaKAyzKvXcF1
d4vjB70ZA8SF1S4fq/FOTKCrQ6t5Nw7+2RESsr8WLYMaUy9T77GgiCTceZhLx/IM
/kukq55QnL6pv04T+dlGeR0CsB9UeEeu7OyfMz6pQPTdrY/ossQPZ7pEeZ/H2FlG
JqroIa/v5NwFHmeCXgJ5wMzUGWKBVkqSfxDNQnhBCT48+vjHtkCj3L7kvtALAi4p
KEjhA8rwcWKnNWcR6fXfhYS0W+9XiRUj1tLRJ2gCwQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 13:06:23 2026 by rpki-client