Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/AS202301.asa
File:                     AS202301.asa (raw, json)
Hash identifier:          ft6tQ1rOWUa2YsQRj7uIGgH8Nr6RXCQJpFhPQabkhnM=
Subject key identifier:   03:45:61:2E:AC:E5:DF:72:D0:7A:5C:11:53:B1:E8:9E:C7:DF:C1:3B
Certificate issuer:       /CN=42e508fba8960f48071b119accbf57bdbf3a8057
Certificate serial:       36637ABD998E6D292D2A9AC5D40C44C8475C10B0
Authority key identifier: 42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/AS202301.asa
Signing time:             Sat 06 Jun 2026 09:00:23 +0000
ASPA not before:          Sat 06 Jun 2026 08:55:23 +0000
ASPA not after:           Sat 05 Jun 2027 09:00:23 +0000
Customer ASID:            202301
Providers:                AS: 6939
                          AS: 26954
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:63:7a:bd:99:8e:6d:29:2d:2a:9a:c5:d4:0c:44:c8:47:5c:10:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42e508fba8960f48071b119accbf57bdbf3a8057
        Validity
            Not Before: Jun  6 08:55:23 2026 GMT
            Not After : Jun  5 09:00:23 2027 GMT
        Subject: CN=0345612EACE5DF72D07A5C1153B1E89EC7DFC13B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:21:49:e9:c7:66:1e:06:31:26:28:a7:8a:1f:
                    fa:eb:43:3e:a6:a8:d5:93:50:12:1f:26:c7:2d:48:
                    e8:2f:a2:09:fe:30:d3:9d:20:da:c0:90:76:93:dd:
                    d5:24:bc:23:65:cf:90:71:5f:6d:19:d9:76:8b:45:
                    fc:55:08:0b:69:41:ec:73:e4:9b:f4:fe:af:5d:5a:
                    7f:87:09:91:86:f0:5d:a1:e7:10:74:01:7c:45:67:
                    92:c3:44:7f:21:55:ac:ac:6d:9b:a7:7e:f9:1a:b2:
                    1b:a2:d0:d8:22:c8:fd:54:68:a1:db:6c:c7:4b:fc:
                    fe:a9:43:49:84:8d:8f:4d:73:1a:62:f7:bb:62:1c:
                    db:9b:6f:6e:87:3e:e1:63:ec:c5:b4:99:8b:55:48:
                    91:9d:2a:fd:ec:1e:30:4f:99:1e:7a:5b:fd:d0:be:
                    fa:27:13:a3:d3:66:42:87:40:aa:a8:00:23:ac:ff:
                    fc:4d:ad:40:c6:08:85:89:c9:3c:d3:2c:46:54:d8:
                    0e:f3:81:5c:b3:9a:a3:19:bb:8f:33:60:fd:c0:96:
                    4b:43:e2:a8:3b:62:a9:e6:82:e8:cb:22:4a:c1:c8:
                    af:00:2d:f5:6b:0c:03:e4:30:86:fd:f4:a6:23:22:
                    d3:3d:80:81:3c:c2:f4:c7:54:95:57:34:80:3c:a9:
                    95:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:45:61:2E:AC:E5:DF:72:D0:7A:5C:11:53:B1:E8:9E:C7:DF:C1:3B
            X509v3 Authority Key Identifier:
                keyid:42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/AS202301.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202301

    Signature Algorithm: sha256WithRSAEncryption
         97:f8:e9:aa:b1:df:d0:5d:b3:02:ce:9f:4f:4b:60:04:06:b6:
         16:ac:62:a4:b2:d0:cc:7f:38:9c:a7:37:b9:2f:5d:47:14:42:
         75:0a:3e:63:69:07:cc:21:37:eb:cb:10:ab:8f:9e:7f:5a:05:
         88:59:ac:e8:a3:f0:a2:19:aa:d3:5f:8d:a5:00:61:65:93:67:
         be:a2:da:b1:64:e1:5d:fb:d3:17:87:69:6b:42:eb:55:29:7a:
         57:6f:5b:81:ec:3c:3a:a4:7d:b8:3c:44:0c:46:a3:7a:a6:2b:
         5d:9f:59:a5:12:47:ed:bd:cc:2f:d6:1a:b9:dd:4c:5a:4b:dd:
         51:bb:09:d8:be:e5:66:7d:bf:3d:58:77:07:25:05:1e:84:55:
         e7:f6:79:35:d9:76:ff:66:ed:29:a5:c2:48:1a:98:af:ce:21:
         00:c3:c6:04:50:46:5f:11:c2:8a:25:91:81:5b:5c:e3:33:6d:
         01:95:49:da:4b:e4:55:71:41:e1:dd:75:d1:1f:e0:4f:f3:71:
         4c:ca:bd:17:b2:34:83:21:5d:72:78:40:ae:fa:99:17:9b:51:
         0f:36:9e:b1:b7:d8:41:4d:08:8e:4b:33:18:50:a6:d7:f5:0f:
         48:6f:f1:7b:cf:4d:e6:bf:ac:20:15:3f:fe:98:6b:16:ad:83:
         9f:19:4e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:53:38 2026 by rpki-client