Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207841.asa
File:                     AS207841.asa (raw, json)
Hash identifier:          +ryKytjIwlRZq+pjca04kpSCpwhlj1QSLBjJbxkPE8c=
Subject key identifier:   61:60:5C:6D:24:C5:6C:7B:ED:A4:47:98:F0:AD:D7:A2:36:26:98:50
Certificate issuer:       /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial:       44E97BE436AD52DF88DA45F71FD9B5E4D4808002
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207841.asa
Signing time:             Tue 14 Apr 2026 10:08:32 +0000
ASPA not before:          Tue 14 Apr 2026 10:03:32 +0000
ASPA not after:           Tue 13 Apr 2027 10:08:32 +0000
Customer ASID:            207841
Providers:                AS: 44355
                          AS: 61049
                          AS: 137409
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:e9:7b:e4:36:ad:52:df:88:da:45:f7:1f:d9:b5:e4:d4:80:80:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
        Validity
            Not Before: Apr 14 10:03:32 2026 GMT
            Not After : Apr 13 10:08:32 2027 GMT
        Subject: CN=61605C6D24C56C7BEDA44798F0ADD7A236269850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:50:a2:9d:bc:f3:6a:d4:19:a9:4b:b3:3f:c1:
                    58:a7:5b:25:47:d8:8b:68:bd:9c:3e:c0:93:4b:bd:
                    2c:f3:47:88:4a:fe:6a:d2:cd:ae:6f:00:86:54:71:
                    a0:5d:88:10:16:6a:2e:b4:0c:4a:89:cd:3e:75:ee:
                    9c:e5:98:a5:b8:ef:3d:44:64:33:20:c0:0d:03:77:
                    a2:60:19:16:d2:d9:78:e2:a5:fc:01:fc:cb:9c:5f:
                    fa:4d:bf:8f:51:56:3f:f1:23:1b:47:a5:fe:bf:b7:
                    ba:ff:fe:10:9a:e5:28:41:37:05:9f:0b:bb:13:76:
                    e2:db:ea:3a:7c:89:2a:11:7a:f8:6b:e5:e8:61:e0:
                    a3:8d:80:7b:ff:8f:34:88:a7:78:d3:20:d2:63:44:
                    4f:fa:56:d2:14:4a:f3:76:cd:60:87:78:53:27:18:
                    4a:ac:d4:d2:5f:d4:e9:36:99:b6:3b:b6:26:a5:6f:
                    ef:4f:0c:3e:92:e1:9e:d3:ec:83:a0:34:4e:fa:1e:
                    05:a8:e5:7f:48:47:0e:86:e1:85:af:1e:d3:6a:19:
                    3a:04:20:ca:3d:29:41:da:36:22:8a:c2:e6:06:67:
                    8c:1e:45:5a:81:c9:6e:f0:a5:b4:f2:84:e1:ff:ef:
                    9b:81:bc:71:9c:fe:52:d3:a1:5e:39:6b:d7:8c:1b:
                    81:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:60:5C:6D:24:C5:6C:7B:ED:A4:47:98:F0:AD:D7:A2:36:26:98:50
            X509v3 Authority Key Identifier:
                keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207841.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207841

    Signature Algorithm: sha256WithRSAEncryption
         10:c1:47:cc:7c:47:40:63:0f:30:28:4b:35:c5:61:35:fd:36:
         d3:81:c0:46:60:f2:7c:fd:e7:d4:f6:88:65:d3:47:fe:9c:50:
         3d:cd:3b:56:aa:b5:dd:ce:af:9a:07:d6:ec:74:4e:a3:31:0d:
         6a:44:c7:9a:30:60:a8:0a:7b:06:a9:9e:a4:2e:47:4e:f6:a2:
         ff:e3:b0:94:e7:75:e5:98:3d:37:91:89:51:41:01:ff:33:32:
         9f:03:05:9e:aa:6c:7f:fb:a8:48:1c:14:bd:21:2a:a2:ae:4e:
         88:5b:cc:59:62:14:d7:13:96:b1:1f:b2:85:13:6c:e6:fc:ed:
         e7:94:18:19:65:63:fe:ae:a8:35:1c:23:e1:63:a3:a8:8e:13:
         be:7f:6b:dc:f2:84:cc:63:d1:06:af:56:dd:8b:c7:98:33:0c:
         f3:b2:54:ea:84:48:69:32:2d:0d:2e:da:d8:87:e8:7d:b1:47:
         74:b2:ce:f8:49:c3:69:7b:cb:22:a5:fc:c0:39:42:52:54:d0:
         f0:41:c3:f2:15:54:74:0b:26:d2:8a:3f:9d:fa:40:9c:48:11:
         3c:71:3e:3d:3e:91:ba:2b:c2:f0:f3:81:46:5b:e8:79:26:7b:
         a4:0d:8a:f1:60:4c:c1:44:25:37:98:2c:33:04:83:b3:8a:97:
         d9:f9:a2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:33:06 2026 by rpki-client