Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/AS215084.asa
File:                     AS215084.asa (raw, json)
Hash identifier:          wR2fAzUZv/jQXrAyasmXbzG2yVFO62Oxv2uJxp48f5o=
Subject key identifier:   31:DF:1E:F6:48:C8:A4:FF:A0:8C:CC:1D:2F:53:90:50:4A:4B:8A:38
Certificate issuer:       /CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Certificate serial:       493EDF824B3AA9FE87B9EFB98C797318C3C36F43
Authority key identifier: 0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/AS215084.asa
Signing time:             Thu 04 Dec 2025 20:33:32 +0000
ASPA not before:          Thu 04 Dec 2025 20:28:32 +0000
ASPA not after:           Thu 03 Dec 2026 20:33:32 +0000
Customer ASID:            215084
Providers:                AS: 6939
                          AS: 20473
                          AS: 34927
                          AS: 207841
                          AS: 212271
                          AS: 393577
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 02:56:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:3e:df:82:4b:3a:a9:fe:87:b9:ef:b9:8c:79:73:18:c3:c3:6f:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
        Validity
            Not Before: Dec  4 20:28:32 2025 GMT
            Not After : Dec  3 20:33:32 2026 GMT
        Subject: CN=31DF1EF648C8A4FFA08CCC1D2F5390504A4B8A38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2d:b7:2d:00:4a:a7:9f:cb:94:df:66:90:73:
                    a6:d5:e7:4e:21:fa:74:ac:77:6f:5c:b2:46:de:6f:
                    08:b4:c0:15:6c:b1:3a:bf:b9:d6:d4:dc:eb:a1:a0:
                    62:0e:f1:d0:01:19:16:fd:33:52:1d:d2:ab:02:80:
                    e0:8a:74:dc:fe:0e:5e:dd:c6:47:f9:46:80:a7:65:
                    37:96:5e:0e:ca:f4:5e:89:97:14:71:c8:6a:00:eb:
                    c7:3e:0d:57:cc:03:d9:1b:c8:32:0d:c8:ef:c5:55:
                    44:1d:95:d1:74:73:ca:c6:6f:2e:4d:5b:92:1d:6e:
                    4c:d4:d1:c3:3a:0c:bf:05:3b:1e:5e:99:98:f6:56:
                    b2:6d:5a:b0:d4:f4:9b:a5:e7:d0:fb:d2:5f:c7:39:
                    60:56:7e:52:74:a1:41:8f:02:f6:c7:34:68:01:d9:
                    4b:eb:ae:24:8a:1d:b7:c2:d4:bd:0b:3e:aa:b4:ad:
                    19:8a:8b:26:5b:05:31:ce:6e:25:ba:62:3f:96:69:
                    ae:4a:42:8c:bb:99:5d:5a:a4:a5:6e:e5:17:ee:cb:
                    10:cc:ea:53:19:31:5d:d9:71:1d:b6:20:14:f2:d9:
                    64:1c:fb:32:98:7c:9b:de:51:73:09:b9:86:0c:f4:
                    08:df:b7:5c:76:66:26:c0:d2:ae:e2:86:6d:08:dc:
                    c4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:DF:1E:F6:48:C8:A4:FF:A0:8C:CC:1D:2F:53:90:50:4A:4B:8A:38
            X509v3 Authority Key Identifier:
                keyid:0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/AS215084.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215084

    Signature Algorithm: sha256WithRSAEncryption
         7e:7f:31:86:ac:9e:d4:b9:9d:78:bd:f2:04:68:bc:84:f8:e8:
         01:57:8c:d1:ea:39:14:9c:fe:c4:99:5a:76:d0:4c:a3:53:97:
         52:8e:36:8c:bc:b6:4a:84:c8:d6:45:50:63:ff:d2:6d:5e:1c:
         c8:a2:f3:9d:27:fc:fa:e5:55:b2:e9:0e:88:4f:15:d0:42:cb:
         9d:c8:c7:ac:c5:eb:d9:29:9a:c5:42:dd:d9:3c:d7:b7:38:2d:
         41:ce:dc:69:9b:0f:53:45:50:c1:c8:23:d8:2e:b5:64:5a:83:
         37:da:b4:aa:14:a4:39:92:0f:f6:0c:2e:b9:0d:77:67:52:93:
         1f:42:f5:48:43:9c:48:f8:cd:83:20:f2:1b:52:b6:0d:26:97:
         64:e8:63:b5:ae:52:87:5e:6e:ed:ce:b9:94:b4:00:1b:47:54:
         c6:0b:e0:c7:17:0d:53:b0:5f:86:b1:0b:10:f0:45:c6:7e:c2:
         2a:c8:aa:a6:a0:0d:4d:e9:e5:40:d5:6f:25:13:39:37:70:53:
         1c:0a:b2:34:f7:2e:c2:40:70:28:b5:b3:67:3c:04:f0:b5:3c:
         b4:e1:af:86:83:9d:5a:cc:77:46:87:5a:53:38:fa:59:f8:e9:
         08:6a:a4:33:23:93:3e:67:c4:91:f9:b1:50:8d:d0:e2:39:f7:
         f9:b2:9d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:06:20 2026 by rpki-client