Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS44324.asa
File:                     AS44324.asa (raw, json)
Hash identifier:          GJq8hQ6uq/ZbqH2AKjCVfjwAlYLDVmCX09aKCiEhaaw=
Subject key identifier:   BE:07:CD:95:C3:B7:A1:9A:AA:A4:74:AC:16:5F:47:6C:01:7D:78:4F
Certificate issuer:       /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial:       6AF6105E546C363CCD850F55A8B5E815F5F5B146
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS44324.asa
Signing time:             Fri 24 Jul 2026 08:26:59 +0000
ASPA not before:          Fri 24 Jul 2026 08:21:59 +0000
ASPA not after:           Fri 23 Jul 2027 08:26:59 +0000
Customer ASID:            44324
Providers:                AS: 3204
                          AS: 3356
                          AS: 6204
                          AS: 6939
                          AS: 7720
                          AS: 8772
                          AS: 8849
                          AS: 18041
                          AS: 18423
                          AS: 29632
                          AS: 31898
                          AS: 32595
                          AS: 33387
                          AS: 34927
                          AS: 38074
                          AS: 40792
                          AS: 47272
                          AS: 48266
                          AS: 53356
                          AS: 53667
                          AS: 53808
                          AS: 59105
                          AS: 134823
                          AS: 134835
                          AS: 138997
                          AS: 140227
                          AS: 202782
                          AS: 206216
                          AS: 206499
                          AS: 207841
                          AS: 216211
                          AS: 393577
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 05:42:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:f6:10:5e:54:6c:36:3c:cd:85:0f:55:a8:b5:e8:15:f5:f5:b1:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
        Validity
            Not Before: Jul 24 08:21:59 2026 GMT
            Not After : Jul 23 08:26:59 2027 GMT
        Subject: CN=BE07CD95C3B7A19AAAA474AC165F476C017D784F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3d:ba:7d:83:ef:97:39:df:fd:28:77:1f:23:
                    de:18:c2:12:a8:0c:7d:0c:1b:5b:fe:23:cc:38:bb:
                    d8:f1:14:b7:5d:e3:f0:44:27:15:29:82:62:54:d6:
                    4c:db:b9:c5:45:b1:e9:78:90:94:a0:c4:0a:67:90:
                    b7:83:73:46:11:dc:c1:0d:e7:c9:6e:d2:18:5c:96:
                    5f:09:24:94:38:79:ba:f3:ee:b4:87:94:44:51:c0:
                    52:47:02:44:95:34:aa:a3:39:93:9e:e6:0d:34:da:
                    38:64:87:f4:06:c3:59:f0:a3:d2:e1:e0:e8:fb:e8:
                    d3:b8:52:83:93:2e:24:62:ab:b2:30:db:1e:71:e8:
                    5b:06:5d:9d:a6:c8:f3:a6:b1:c3:42:c9:0f:bd:a2:
                    27:75:d2:c1:03:da:a0:12:bf:1c:1d:b7:15:4c:5c:
                    62:e9:c0:94:4a:13:0a:21:40:0e:8d:07:06:6b:4b:
                    aa:b9:6d:a2:aa:8b:02:68:2c:49:f2:d6:a8:ab:93:
                    75:23:cb:04:a3:ea:95:20:ab:de:7d:40:40:a7:d6:
                    59:d6:40:95:2d:83:92:20:2c:f7:0e:53:5b:a7:8e:
                    8c:a2:62:af:3f:37:64:b0:04:dc:6c:5f:ca:3b:f8:
                    33:ed:51:97:8a:2d:fb:9e:91:c7:af:df:89:d7:4a:
                    92:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:07:CD:95:C3:B7:A1:9A:AA:A4:74:AC:16:5F:47:6C:01:7D:78:4F
            X509v3 Authority Key Identifier:
                keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS44324.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44324

    Signature Algorithm: sha256WithRSAEncryption
         6e:fd:b1:50:0f:d5:92:33:2a:02:a4:b7:ae:6c:d0:72:f6:75:
         dd:52:4c:5d:a8:38:17:f3:17:29:01:a3:f0:e6:eb:2c:ec:cf:
         e2:ca:ba:b5:5b:3b:8a:a9:4a:77:e1:3f:02:63:09:54:45:97:
         e0:db:f6:fa:5d:6e:30:a0:ed:d0:11:7c:e6:33:c4:ae:22:da:
         1d:cd:97:eb:83:a3:42:f2:a6:a0:f3:82:1b:62:7e:c5:68:ca:
         41:75:66:7f:b5:0f:2f:3c:88:88:aa:f6:eb:6e:84:7a:b6:19:
         4d:b3:d4:12:c6:1c:e2:aa:b1:0d:c3:5f:47:49:61:af:0f:12:
         92:43:76:bb:82:a5:cb:7c:b8:bc:f8:13:aa:1c:8f:76:0a:e7:
         22:01:2b:2c:ba:46:d3:9a:6e:c3:b1:8e:21:13:bd:5a:29:75:
         aa:e2:90:47:e7:ce:96:95:cc:70:3b:42:2c:44:1c:13:10:1a:
         8d:76:93:4d:ab:23:b2:c2:98:eb:6a:a3:45:4b:b6:f9:99:5f:
         3d:d9:4d:04:e6:6f:57:35:d6:6c:d3:ca:0e:d9:c6:09:0e:5d:
         86:c3:5e:8e:38:ea:3f:78:99:85:77:ba:c3:40:07:73:74:17:
         5f:10:2e:37:b2:9c:eb:98:b3:87:f0:43:2f:4a:d7:a2:ac:36:
         61:6d:3b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:48:59 2026 by rpki-client