Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/AS214757.asa
File:                     AS214757.asa (raw, json)
Hash identifier:          TEIuogg7LAcwTAI83OksNpDoanJJoxteeeanxJZlbRY=
Subject key identifier:   C9:38:5F:36:87:80:4C:5D:E1:EA:E7:8F:C0:FC:F1:1A:DD:53:41:01
Certificate issuer:       /CN=a0bbb954570cfa6e856937043dd2c1745a0a05c2
Certificate serial:       1CFF8F9FE1D252496CB118C78CA16D22A2A599E1
Authority key identifier: A0:BB:B9:54:57:0C:FA:6E:85:69:37:04:3D:D2:C1:74:5A:0A:05:C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oLu5VFcM-m6FaTcEPdLBdFoKBcI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/AS214757.asa
Signing time:             Mon 18 May 2026 10:22:29 +0000
ASPA not before:          Mon 18 May 2026 10:17:29 +0000
ASPA not after:           Mon 17 May 2027 10:22:29 +0000
Customer ASID:            214757
Providers:                AS: 6939
                          AS: 34854
                          AS: 34927
                          AS: 49127
                          AS: 50263
                          AS: 50338
                          AS: 50917
                          AS: 60068
                          AS: 142064
                          AS: 202580
                          AS: 208453
                          AS: 212895
                          AS: 213622
                          AS: 214331
                          AS: 215638
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oLu5VFcM-m6FaTcEPdLBdFoKBcI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 20:39:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:ff:8f:9f:e1:d2:52:49:6c:b1:18:c7:8c:a1:6d:22:a2:a5:99:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0bbb954570cfa6e856937043dd2c1745a0a05c2
        Validity
            Not Before: May 18 10:17:29 2026 GMT
            Not After : May 17 10:22:29 2027 GMT
        Subject: CN=C9385F3687804C5DE1EAE78FC0FCF11ADD534101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f8:4d:a5:1d:d5:54:f8:01:3c:bc:93:15:67:
                    d9:27:30:d6:bd:06:ff:c4:58:c2:0b:8f:92:dd:4d:
                    21:68:54:1b:f1:14:7d:96:09:3b:2f:a8:d2:b7:a1:
                    01:d7:9d:45:89:73:f8:5f:6f:5d:cb:7b:9c:ed:e4:
                    9c:4b:cc:ca:89:11:cf:10:f1:79:dd:a0:cf:15:c5:
                    f0:76:61:20:2a:fe:66:c0:ed:a5:65:69:a0:6b:63:
                    0d:8c:1a:c0:8f:09:89:9d:31:25:22:a9:a6:1d:31:
                    75:72:a4:e5:46:c9:15:a9:62:0e:87:8d:5f:a2:21:
                    2f:d6:82:3b:87:b7:90:75:dd:fc:74:95:52:85:29:
                    eb:f5:58:2a:b7:77:af:0b:46:8c:7f:1f:60:6e:7e:
                    fb:0e:c0:0a:2c:f3:ce:73:18:db:d5:75:18:79:c3:
                    27:9c:32:76:a9:a6:44:89:87:8b:04:e1:bf:f4:ac:
                    1b:4d:3c:9c:77:e9:d4:e6:27:57:66:44:ef:24:c1:
                    80:10:b9:6a:a0:ca:ac:30:45:2c:8a:46:37:1a:06:
                    9d:78:f2:0b:93:d6:68:1f:1c:22:4d:ad:04:ae:bd:
                    85:c4:fb:3a:cd:ef:40:53:56:d7:0c:ea:e2:8f:90:
                    db:1f:62:6e:5b:a0:a1:72:c1:9a:1c:32:cc:a0:4c:
                    3d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:38:5F:36:87:80:4C:5D:E1:EA:E7:8F:C0:FC:F1:1A:DD:53:41:01
            X509v3 Authority Key Identifier:
                keyid:A0:BB:B9:54:57:0C:FA:6E:85:69:37:04:3D:D2:C1:74:5A:0A:05:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLu5VFcM-m6FaTcEPdLBdFoKBcI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/AS214757.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214757

    Signature Algorithm: sha256WithRSAEncryption
         dd:dc:c8:53:a8:fe:6d:f3:5e:98:0e:37:0a:dc:3c:9b:40:71:
         a7:ce:03:f9:0b:5e:f1:c0:f0:b6:aa:54:21:11:39:7e:9a:2d:
         3f:db:9e:61:60:4c:df:34:40:24:ff:60:69:1f:78:90:d1:c7:
         54:d4:9b:69:d8:f2:1e:c9:b8:c0:32:11:32:4b:9a:ea:f3:00:
         af:2c:82:ec:97:33:38:c8:be:e6:28:3d:3e:4b:b4:20:4f:56:
         4d:cd:56:a0:17:11:68:cd:95:5f:78:a7:14:34:45:f6:f7:e8:
         33:61:d1:61:43:43:60:df:b1:13:b5:c7:0a:98:7d:38:2f:e1:
         ef:73:df:1b:b7:68:5c:32:55:83:d4:da:0e:6c:96:1d:5a:a3:
         d8:e3:29:97:68:35:68:45:0e:a2:29:90:32:b9:c1:dd:7d:94:
         07:af:42:d2:f1:9b:5c:f9:ef:f4:e4:4a:90:52:1f:90:9d:a4:
         44:ee:96:f1:eb:66:e6:44:5b:6f:0c:1c:fb:88:9e:70:b0:9f:
         a1:b0:5f:39:8d:b2:f2:27:6c:9d:4b:ce:a6:bb:24:ca:f8:0a:
         be:2f:b1:fb:a5:72:3f:fc:3c:98:2e:96:c0:56:75:b3:80:2d:
         a5:78:49:44:b0:77:e4:0e:71:77:27:91:6c:31:38:08:cd:ee:
         69:10:71:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:22:49 2026 by rpki-client