Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/0/AS210632.asa
File:                     AS210632.asa (raw, json)
Hash identifier:          sN0pCNAK88bOqEZOue60hphAl0l1zoCw8mApbiN89qs=
Subject key identifier:   99:AD:35:3C:D7:9C:01:6D:81:81:14:B1:06:91:94:C5:37:24:EA:F8
Certificate issuer:       /CN=be5e3ed271c0b05f61bc3a7bc606e2dbc0ed86ac
Certificate serial:       1EC6582EE9050BA72D60697B9BD184350A7B55AA
Authority key identifier: BE:5E:3E:D2:71:C0:B0:5F:61:BC:3A:7B:C6:06:E2:DB:C0:ED:86:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vl4-0nHAsF9hvDp7xgbi28Dthqw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/0/AS210632.asa
Signing time:             Mon 23 Feb 2026 09:01:47 +0000
ASPA not before:          Mon 23 Feb 2026 08:56:47 +0000
ASPA not after:           Mon 22 Feb 2027 09:01:47 +0000
Customer ASID:            210632
Providers:                AS: 11967
                          AS: 34927
                          AS: 47263
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/0/BE5E3ED271C0B05F61BC3A7BC606E2DBC0ED86AC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/0/BE5E3ED271C0B05F61BC3A7BC606E2DBC0ED86AC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vl4-0nHAsF9hvDp7xgbi28Dthqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:c6:58:2e:e9:05:0b:a7:2d:60:69:7b:9b:d1:84:35:0a:7b:55:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be5e3ed271c0b05f61bc3a7bc606e2dbc0ed86ac
        Validity
            Not Before: Feb 23 08:56:47 2026 GMT
            Not After : Feb 22 09:01:47 2027 GMT
        Subject: CN=99AD353CD79C016D818114B1069194C53724EAF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:49:a5:b8:1e:cc:ba:70:32:79:d8:05:35:6f:
                    0f:01:22:44:37:07:2f:3f:b5:a2:34:8e:b7:64:ce:
                    3e:83:92:4b:49:a3:2d:33:84:8f:46:c7:6b:f2:a8:
                    8d:b7:6e:72:de:e9:b8:e9:8d:8d:2b:16:9b:b0:eb:
                    ac:53:ba:cf:f6:fe:65:1d:75:a1:05:37:fe:1e:6d:
                    ff:65:80:f4:9b:2e:13:fa:86:72:94:d9:8c:71:c2:
                    e3:44:94:a2:33:91:84:05:3b:4f:af:52:5e:64:3c:
                    db:18:b9:95:79:89:d2:3b:fe:2b:32:9d:5e:44:d3:
                    31:07:f9:79:2b:d5:da:37:ad:a3:fa:bc:9f:6d:bf:
                    7d:1f:eb:9c:b5:f6:c5:60:b1:e6:45:2b:d4:80:37:
                    4f:ec:fe:cc:e7:1e:3b:a3:74:62:aa:ed:cb:c4:24:
                    47:67:bd:36:da:0d:e0:22:50:4b:3a:81:2f:63:9f:
                    12:a0:d7:11:8e:41:3f:c6:35:98:f9:31:2c:88:2f:
                    74:05:11:c0:f1:7a:0b:a0:26:55:e7:6d:ec:11:4c:
                    35:42:a8:15:c0:bf:29:eb:06:4f:e0:d3:ff:a0:78:
                    b4:6d:51:0a:d2:91:d6:85:28:b3:87:e2:d7:26:2a:
                    a9:11:ab:e7:e5:f3:e4:8c:2a:7b:fb:ab:ce:6f:46:
                    00:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:AD:35:3C:D7:9C:01:6D:81:81:14:B1:06:91:94:C5:37:24:EA:F8
            X509v3 Authority Key Identifier:
                keyid:BE:5E:3E:D2:71:C0:B0:5F:61:BC:3A:7B:C6:06:E2:DB:C0:ED:86:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/0/BE5E3ED271C0B05F61BC3A7BC606E2DBC0ED86AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vl4-0nHAsF9hvDp7xgbi28Dthqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/0/AS210632.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210632

    Signature Algorithm: sha256WithRSAEncryption
         64:36:ad:03:3a:5f:ce:cd:c0:5c:98:1f:d1:3c:23:f4:d1:91:
         95:73:ac:9e:c2:8c:f3:96:be:90:b1:bd:df:b7:8a:ae:ef:f3:
         df:f3:ac:a5:45:60:e6:29:a4:4f:1a:65:7f:cd:e7:22:9d:4a:
         9b:db:cb:89:63:17:c7:fd:cf:7f:50:40:5d:48:ed:c2:44:83:
         96:64:92:80:1d:3f:92:0b:48:cb:19:e5:11:fe:77:38:3d:a3:
         ff:59:4e:1a:62:5e:b9:4e:bc:2b:62:79:f6:63:99:6e:bc:40:
         58:f2:28:ed:41:88:f1:f6:d1:63:76:36:ea:93:6b:f4:88:74:
         fe:de:6c:8e:e3:18:d0:d7:82:2d:3b:5b:ce:df:c6:a3:a8:e5:
         ea:11:6d:07:1d:c9:85:68:6a:e7:fe:9c:ff:a8:16:31:a6:a5:
         26:c7:2c:20:2a:ec:ae:12:db:33:fa:f9:54:7c:6c:4c:51:45:
         dc:cb:39:b6:6d:b8:77:4f:a1:7d:2d:5a:b2:e0:52:c8:87:a2:
         5f:dd:a6:02:57:d0:ea:9d:8f:6f:e4:04:fb:49:c9:e9:69:09:
         ae:bf:68:ed:77:d1:01:ca:9f:4c:7b:d8:09:07:3f:da:60:fd:
         2d:9f:e8:24:ff:e0:4c:92:2a:4f:64:a3:9f:83:89:08:b3:84:
         71:92:9d:b7
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIUHsZYLukFC6ctYGl7m9GENQp7VaowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmU1ZTNlZDI3MWMwYjA1ZjYxYmMzYTdiYzYwNmUyZGJj
MGVkODZhYzAeFw0yNjAyMjMwODU2NDdaFw0yNzAyMjIwOTAxNDdaMDMxMTAvBgNV
BAMTKDk5QUQzNTNDRDc5QzAxNkQ4MTgxMTRCMTA2OTE5NEM1MzcyNEVBRjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqSaW4Hsy6cDJ52AU1bw8BIkQ3
By8/taI0jrdkzj6DkktJoy0zhI9Gx2vyqI23bnLe6bjpjY0rFpuw66xTus/2/mUd
daEFN/4ebf9lgPSbLhP6hnKU2YxxwuNElKIzkYQFO0+vUl5kPNsYuZV5idI7/isy
nV5E0zEH+Xkr1do3raP6vJ9tv30f65y19sVgseZFK9SAN0/s/sznHjujdGKq7cvE
JEdnvTbaDeAiUEs6gS9jnxKg1xGOQT/GNZj5MSyIL3QFEcDxegugJlXnbewRTDVC
qBXAvynrBk/g0/+geLRtUQrSkdaFKLOH4tcmKqkRq+fl8+SMKnv7q85vRgABAgMB
AAGjggIFMIICATAdBgNVHQ4EFgQUma01PNecAW2BgRSxBpGUxTck6vgwHwYDVR0j
BBgwFoAUvl4+0nHAsF9hvDp7xgbi28DthqwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGYxNjlhN2EtZTA0My00MzM3LWFlZWMtMjRkMmFiOTFm
MTM4LzAvQkU1RTNFRDI3MUMwQjA1RjYxQkMzQTdCQzYwNkUyREJDMEVEODZBQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZsNC0wbkhBc0Y5aHZEcDd4Z2JpMjhE
dGhxdy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzhmMTY5YTdhLWUwNDMt
NDMzNy1hZWVjLTI0ZDJhYjkxZjEzOC8wL0FTMjEwNjMyLmFzYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM2yDANBgkq
hkiG9w0BAQsFAAOCAQEAZDatAzpfzs3AXJgf0Twj9NGRlXOsnsKM85a+kLG937eK
ru/z3/OspUVg5imkTxplf83nIp1Km9vLiWMXx/3Pf1BAXUjtwkSDlmSSgB0/kgtI
yxnlEf53OD2j/1lOGmJeuU68K2J59mOZbrxAWPIo7UGI8fbRY3Y26pNr9Ih0/t5s
juMY0NeCLTtbzt/Go6jl6hFtBx3JhWhq5/6c/6gWMaalJscsICrsrhLbM/r5VHxs
TFFF3Ms5tm24d0+hfS1asuBSyIeiX92mAlfQ6p2Pb+QE+0nJ6WkJrr9o7XfRAcqf
THvYCQc/2mD9LZ/oJP/gTJIqT2Sjn4OJCLOEcZKdtw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:23 2026 by rpki-client