Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS44324.asa
File:                     AS44324.asa (raw, json)
Hash identifier:          HAsbEqXPiKSC9XmkvLBGl8MgjCwKSjimcWJh9LRT6MM=
Subject key identifier:   5C:08:E0:84:7A:63:8C:6B:33:41:CA:8F:90:FA:82:30:C4:FA:BC:A7
Certificate issuer:       /CN=411e2d411d687bcb4449c3df45beedc041007d94
Certificate serial:       5340D2B6F5B572BF1E79A9CD3DCCEE15B2C05562
Authority key identifier: 41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS44324.asa
Signing time:             Tue 03 Feb 2026 05:57:06 +0000
ASPA not before:          Tue 03 Feb 2026 05:52:06 +0000
ASPA not after:           Tue 02 Feb 2027 05:57:06 +0000
Customer ASID:            44324
Providers:                AS: 3204
                          AS: 6204
                          AS: 6939
                          AS: 7720
                          AS: 8772
                          AS: 8849
                          AS: 18041
                          AS: 18423
                          AS: 29632
                          AS: 33387
                          AS: 34927
                          AS: 38074
                          AS: 47272
                          AS: 48266
                          AS: 53356
                          AS: 53667
                          AS: 53808
                          AS: 59105
                          AS: 134823
                          AS: 134835
                          AS: 138997
                          AS: 140227
                          AS: 206499
                          AS: 207841
                          AS: 216211
                          AS: 393577
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Mar 2026 23:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:40:d2:b6:f5:b5:72:bf:1e:79:a9:cd:3d:cc:ee:15:b2:c0:55:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=411e2d411d687bcb4449c3df45beedc041007d94
        Validity
            Not Before: Feb  3 05:52:06 2026 GMT
            Not After : Feb  2 05:57:06 2027 GMT
        Subject: CN=5C08E0847A638C6B3341CA8F90FA8230C4FABCA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d0:1f:1b:c4:86:68:71:26:bf:42:89:20:31:
                    e1:40:6d:64:1e:c5:47:26:b5:0a:a2:db:78:58:00:
                    4d:09:ae:cd:04:9a:ca:ed:af:87:01:73:14:3d:f4:
                    a8:0a:e1:f2:7c:dd:f1:cc:6e:4d:95:7d:b6:13:88:
                    6c:63:33:fe:17:28:fd:31:68:ba:f5:40:34:23:18:
                    46:ec:c1:fc:f1:95:79:89:ba:8a:7d:ae:84:9b:d5:
                    4a:2e:40:9d:9f:ff:2a:19:cd:97:40:f8:d3:c6:f5:
                    59:43:eb:7c:bb:27:9f:71:05:fe:5d:0b:c4:4a:d7:
                    57:42:56:e0:7d:d3:24:83:fb:6b:e9:85:ac:e9:79:
                    8a:77:12:9a:67:10:37:88:18:2f:5c:2f:47:c5:d7:
                    e0:96:10:ae:2f:d4:df:01:df:45:0f:f8:e9:0c:30:
                    46:db:78:fe:b2:98:ee:cf:15:6c:c8:49:a5:a3:fc:
                    9a:98:7c:d4:ce:ab:ce:b1:ee:3b:ef:60:f8:45:0c:
                    57:b5:79:81:41:68:f3:14:cf:c1:3a:99:52:3c:d0:
                    45:74:14:32:ae:a7:2c:c8:18:97:c3:55:ea:db:65:
                    49:fb:15:5d:09:85:09:e3:08:15:51:75:01:0e:a3:
                    44:fd:2c:32:c2:29:c1:44:f1:af:ac:c5:63:ee:e9:
                    09:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:08:E0:84:7A:63:8C:6B:33:41:CA:8F:90:FA:82:30:C4:FA:BC:A7
            X509v3 Authority Key Identifier:
                keyid:41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS44324.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44324

    Signature Algorithm: sha256WithRSAEncryption
         5c:d3:af:36:31:b3:6b:8e:f0:10:65:66:23:90:70:2a:58:2e:
         33:7a:5c:17:f8:5b:6c:e2:00:12:ad:88:8a:6c:3e:7c:c9:ea:
         96:17:ed:f5:f6:d5:d5:a7:16:a6:d8:1f:69:ae:f8:13:a6:6c:
         e8:e0:67:a0:6c:ac:3e:f3:ad:d0:c9:6f:e0:6b:c8:ff:30:90:
         eb:2c:88:0c:b5:c6:b6:79:bc:d6:e0:d8:09:ea:e2:17:50:27:
         5e:46:49:03:3f:62:28:a3:02:c6:5c:34:ec:1b:a4:d3:72:b9:
         64:45:12:d3:0c:41:89:86:8b:ef:ff:49:45:35:bd:93:3e:b2:
         6c:e6:01:66:70:b0:25:22:02:64:36:3c:f3:44:2a:96:82:a7:
         72:17:f4:01:2a:e8:5e:55:d5:5d:49:7e:cd:39:30:63:be:bb:
         2b:f9:0c:8e:c7:c3:e8:e1:37:6e:fa:cb:a1:d1:03:b0:68:59:
         4f:2e:46:69:73:47:92:9f:07:f9:8a:a8:32:52:69:da:5e:c0:
         34:7a:6a:02:a4:7f:5f:a5:c8:0d:45:d2:b6:31:7d:e6:d1:41:
         1d:28:d1:af:56:44:66:d4:7a:ec:47:3a:ca:d7:07:0a:32:65:
         5f:dc:b2:00:b1:af:5c:42:37:b2:d9:a6:02:5c:b3:c0:94:7b:
         95:12:5b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:23 2026 by rpki-client