Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8062bfa6-93db-4d59-9a45-81f82a8c2c76/0/AS204464.asa
File:                     AS204464.asa (raw, json)
Hash identifier:          kG1BTW3MKzdOdeiI9KadM0xKX3QWQ5mi+SnPhvq0GUE=
Subject key identifier:   BD:F2:F4:2B:8D:A0:87:47:25:B3:42:27:E6:C1:CE:78:04:FA:5D:E2
Certificate issuer:       /CN=98165af0cd51351cc539a608989be422e50aaa19
Certificate serial:       2D7248366E86AD989CFE271B2DDF5D5B2FC55050
Authority key identifier: 98:16:5A:F0:CD:51:35:1C:C5:39:A6:08:98:9B:E4:22:E5:0A:AA:19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mBZa8M1RNRzFOaYImJvkIuUKqhk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8062bfa6-93db-4d59-9a45-81f82a8c2c76/0/AS204464.asa
Signing time:             Wed 10 Jun 2026 14:16:30 +0000
ASPA not before:          Wed 10 Jun 2026 14:11:30 +0000
ASPA not after:           Wed 09 Jun 2027 14:16:30 +0000
Customer ASID:            204464
Providers:                AS: 52025
                          AS: 201541
                          AS: 205305
                          AS: 205941
                          AS: 213413
                          AS: 213449
                          AS: 214915
                          AS: 215828
                          AS: 393577
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8062bfa6-93db-4d59-9a45-81f82a8c2c76/0/98165AF0CD51351CC539A608989BE422E50AAA19.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8062bfa6-93db-4d59-9a45-81f82a8c2c76/0/98165AF0CD51351CC539A608989BE422E50AAA19.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mBZa8M1RNRzFOaYImJvkIuUKqhk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:21:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:72:48:36:6e:86:ad:98:9c:fe:27:1b:2d:df:5d:5b:2f:c5:50:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98165af0cd51351cc539a608989be422e50aaa19
        Validity
            Not Before: Jun 10 14:11:30 2026 GMT
            Not After : Jun  9 14:16:30 2027 GMT
        Subject: CN=BDF2F42B8DA0874725B34227E6C1CE7804FA5DE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:86:fa:0e:de:d8:c7:16:10:d4:5d:18:88:69:
                    af:64:bf:b8:54:ba:aa:03:09:91:7c:2b:49:b4:cd:
                    f4:f4:73:e8:e0:3f:07:5a:67:14:ce:53:dc:e5:6f:
                    0e:4e:a6:4a:0e:b1:46:94:ae:38:98:54:dd:06:58:
                    36:d1:0d:bc:fe:eb:af:62:dd:5f:25:45:4b:65:89:
                    ec:86:5d:62:1c:eb:50:8f:9c:1c:0b:07:49:30:12:
                    3a:0a:0f:ae:5a:c5:b5:0f:87:c4:14:57:da:dc:0c:
                    cb:93:61:48:33:12:16:a5:2c:3d:6e:fb:74:bc:c1:
                    6e:ac:b7:dd:3f:68:5d:2d:b8:1d:24:82:77:7a:2a:
                    c4:4c:1b:11:c4:83:b5:06:84:77:81:f3:cb:a4:9c:
                    e0:d0:17:44:b5:8f:b3:09:83:8d:5d:c9:07:0d:d0:
                    a5:c5:b3:34:70:93:9f:8d:37:e2:de:42:0f:88:f0:
                    d2:dd:59:42:31:14:d1:ef:91:a6:b0:16:f2:6e:67:
                    fd:fb:c2:27:65:c3:55:f1:44:ae:75:35:2b:f4:6e:
                    50:8d:22:34:4b:6e:07:ef:1e:2d:84:1e:e6:02:0c:
                    8f:c5:bd:0f:31:e2:be:07:90:af:e2:82:30:e3:43:
                    7b:ba:6f:2b:3f:7c:55:93:2c:a5:9f:65:99:7e:78:
                    79:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F2:F4:2B:8D:A0:87:47:25:B3:42:27:E6:C1:CE:78:04:FA:5D:E2
            X509v3 Authority Key Identifier:
                keyid:98:16:5A:F0:CD:51:35:1C:C5:39:A6:08:98:9B:E4:22:E5:0A:AA:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8062bfa6-93db-4d59-9a45-81f82a8c2c76/0/98165AF0CD51351CC539A608989BE422E50AAA19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBZa8M1RNRzFOaYImJvkIuUKqhk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8062bfa6-93db-4d59-9a45-81f82a8c2c76/0/AS204464.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204464

    Signature Algorithm: sha256WithRSAEncryption
         0d:99:9c:61:a3:72:b2:5b:cb:96:4c:33:94:9b:b3:0a:de:f4:
         1a:ae:b1:6e:c5:70:45:f2:b3:7f:94:84:6d:7f:42:32:5b:2b:
         32:27:48:6b:76:74:55:ef:44:0e:41:ea:4b:c1:16:4d:ad:17:
         f5:68:d2:96:f9:bf:22:b2:96:55:85:bf:23:dd:e7:d0:cb:eb:
         11:a1:07:40:8b:fa:29:4e:e3:8f:e6:91:eb:60:cc:77:1a:ba:
         89:78:41:b0:e6:e8:95:55:54:f7:05:6f:ef:a0:18:71:63:40:
         25:fa:c7:8b:84:1c:e1:76:24:36:cc:68:ec:02:ff:cc:9f:f7:
         7b:57:91:a6:98:7a:0a:ff:eb:58:48:d1:d7:c8:7a:ed:75:56:
         53:c3:90:48:fd:cc:e8:7c:d1:1c:88:8c:b8:63:f6:b1:8f:0e:
         2b:c1:8a:30:f2:4e:63:b2:80:2e:49:b2:61:2c:d9:06:21:cd:
         69:09:0c:35:21:62:32:83:e5:b5:66:71:ee:e4:3a:b3:6d:ed:
         cf:36:08:0e:0b:fc:b9:78:7c:2b:f9:60:7d:da:8f:e5:93:a7:
         3a:75:9a:b9:92:96:78:9a:f3:4f:82:0c:c4:66:16:74:2d:86:
         aa:a3:a2:26:f9:c5:51:49:50:ef:88:22:f5:4c:7e:36:84:2d:
         5d:7f:17:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:34:59 2026 by rpki-client