Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/AS214420.asa
File:                     AS214420.asa (raw, json)
Hash identifier:          MczXavcoFqrsha9L+Hh49riliuuFNzDzJSVv7yMgKN0=
Subject key identifier:   D6:F7:C9:87:FE:2C:72:03:61:9F:63:08:24:A4:4E:18:A0:99:3A:A2
Certificate issuer:       /CN=ec342add81633658330112d2bf8b1de3ee19f684
Certificate serial:       312036C88BC49FB1261044F5285662B294180399
Authority key identifier: EC:34:2A:DD:81:63:36:58:33:01:12:D2:BF:8B:1D:E3:EE:19:F6:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7DQq3YFjNlgzARLSv4sd4-4Z9oQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/AS214420.asa
Signing time:             Sun 01 Mar 2026 00:49:00 +0000
ASPA not before:          Sun 01 Mar 2026 00:44:00 +0000
ASPA not after:           Sun 28 Feb 2027 00:49:00 +0000
Customer ASID:            214420
Providers:                AS: 6939
                          AS: 34927
                          AS: 52025
                          AS: 204464
                          AS: 212895
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7DQq3YFjNlgzARLSv4sd4-4Z9oQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 03:13:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:20:36:c8:8b:c4:9f:b1:26:10:44:f5:28:56:62:b2:94:18:03:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec342add81633658330112d2bf8b1de3ee19f684
        Validity
            Not Before: Mar  1 00:44:00 2026 GMT
            Not After : Feb 28 00:49:00 2027 GMT
        Subject: CN=D6F7C987FE2C7203619F630824A44E18A0993AA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a2:cd:a2:c4:0d:ac:b9:28:a6:59:3f:61:ad:
                    29:f1:a0:0e:35:4d:6a:4d:d8:75:16:aa:8c:e5:f9:
                    79:89:29:bc:cf:b4:bf:8c:e3:08:b7:2c:5f:98:f0:
                    10:af:37:14:ce:37:24:bb:81:36:22:b3:2d:8f:0a:
                    c4:ed:60:e2:5d:b0:47:31:93:09:6b:34:28:d4:1c:
                    20:38:3a:91:30:82:d5:16:53:79:1e:1c:67:a5:4d:
                    82:89:82:dd:28:b1:9b:10:80:1b:a6:78:9b:61:bf:
                    2e:b7:62:8e:6e:93:ab:6a:84:c1:60:53:e2:b4:9f:
                    c0:77:a1:5a:26:c9:c8:88:b9:ab:0e:be:23:c7:df:
                    f2:14:14:58:f1:bc:47:49:30:cb:86:f6:5f:ce:ff:
                    ed:9f:75:5c:00:61:61:9c:70:50:fd:59:3a:ec:ed:
                    a4:68:9a:21:f6:bb:f7:4b:a7:7c:6d:cf:a2:75:c2:
                    03:a3:f9:4e:3c:a2:7d:20:12:ac:07:e2:e6:b4:51:
                    f9:a9:4f:c0:f7:a4:90:f9:a0:82:83:dc:6c:e9:5d:
                    cb:d4:e3:f0:b1:d9:af:e7:e0:60:70:d1:ee:50:7f:
                    30:64:96:31:1a:2e:c3:b1:96:51:fe:1e:be:1a:bb:
                    60:f5:7a:7e:e9:eb:95:8f:9a:f3:a2:1d:f4:0f:2c:
                    83:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:F7:C9:87:FE:2C:72:03:61:9F:63:08:24:A4:4E:18:A0:99:3A:A2
            X509v3 Authority Key Identifier:
                keyid:EC:34:2A:DD:81:63:36:58:33:01:12:D2:BF:8B:1D:E3:EE:19:F6:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DQq3YFjNlgzARLSv4sd4-4Z9oQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/AS214420.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214420

    Signature Algorithm: sha256WithRSAEncryption
         12:78:6a:ea:4e:11:83:84:c0:dc:a8:5c:d7:93:5c:3f:06:0b:
         ab:45:06:30:f7:2e:1c:5b:69:22:7c:b7:41:6d:c0:bd:24:ee:
         0e:ab:cd:34:9b:68:b1:ca:ba:0a:6f:d3:80:34:a1:3a:67:04:
         d3:e6:01:29:e7:07:ec:a8:cb:5f:99:7e:7e:ac:b2:06:3e:cd:
         0a:3e:19:65:de:f0:d1:21:00:85:f8:71:91:6c:d3:c0:29:47:
         a4:1b:0e:4e:f3:5a:61:22:43:2a:ac:b8:67:21:1e:87:33:5d:
         ab:b5:56:58:c5:e0:65:e4:f7:31:7c:40:0f:f8:b0:da:23:70:
         50:f3:1d:dd:0f:27:0b:ae:d3:a2:cf:33:41:6b:26:94:b8:0c:
         8c:3b:fe:f7:8c:01:27:65:bc:b3:00:a9:09:3c:5f:f8:18:f1:
         9d:0c:37:0a:36:47:cb:a6:3b:8f:6c:f8:b4:5b:7c:3d:db:32:
         d3:cf:83:e7:07:80:5e:9a:ee:08:cb:5e:d1:93:66:1a:e9:69:
         50:cd:cc:c9:69:ca:f9:89:26:cd:6e:56:70:be:67:0c:41:f5:
         e1:e5:22:66:72:27:3e:dd:68:6f:13:ca:17:71:37:88:87:cd:
         9c:7d:86:63:ba:dd:80:43:29:c2:a9:99:a1:04:52:83:c8:49:
         03:a8:33:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:18 2026 by rpki-client