Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/AS215828.asa
File:                     AS215828.asa (raw, json)
Hash identifier:          aLfEnni+8YGsFkiwicZpetRmsooIvHjNGHfRPX60CaA=
Subject key identifier:   78:A6:B2:D5:8E:82:F3:EE:FE:77:82:2B:18:0A:FC:E2:F9:6D:4E:91
Certificate issuer:       /CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Certificate serial:       11AE18412349046BDD3CDD0E2CE8E43F630563C5
Authority key identifier: D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/AS215828.asa
Signing time:             Sat 25 Jul 2026 10:29:28 +0000
ASPA not before:          Sat 25 Jul 2026 10:24:28 +0000
ASPA not after:           Sat 24 Jul 2027 10:29:28 +0000
Customer ASID:            215828
Providers:                AS: 1299
                          AS: 6204
                          AS: 6939
                          AS: 31561
                          AS: 34927
                          AS: 51202
                          AS: 62255
                          AS: 199310
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 13:47:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:ae:18:41:23:49:04:6b:dd:3c:dd:0e:2c:e8:e4:3f:63:05:63:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
        Validity
            Not Before: Jul 25 10:24:28 2026 GMT
            Not After : Jul 24 10:29:28 2027 GMT
        Subject: CN=78A6B2D58E82F3EEFE77822B180AFCE2F96D4E91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:9c:11:1c:00:94:68:5c:17:62:35:7d:8d:6c:
                    af:b4:ab:d4:99:a4:6e:88:e9:a3:c5:08:47:c8:d0:
                    9c:d1:c9:12:f8:6f:9c:f0:c2:97:08:03:09:f3:d5:
                    7e:07:77:41:99:c2:cd:e9:c3:01:4c:d5:ad:18:55:
                    27:27:29:1b:31:8b:31:05:f7:e6:6b:64:4a:0e:a5:
                    ef:11:80:4f:f3:4c:ae:83:44:cb:e5:b3:fa:22:8f:
                    06:80:12:96:4d:4c:39:7e:f2:e4:1f:72:57:9b:af:
                    b7:29:dd:6d:71:8d:55:68:6c:72:2f:40:60:dd:7b:
                    6c:4a:f1:f2:10:36:76:9d:7a:6b:17:26:44:01:7b:
                    2c:f6:0d:8a:0b:2e:27:1e:e9:21:32:30:ea:e6:cf:
                    36:6c:79:31:dc:60:fd:7f:00:8b:83:24:ea:bb:a8:
                    69:2c:5a:ce:d1:1a:97:d3:27:0f:cf:21:86:e4:81:
                    45:67:e9:f8:02:bd:2b:11:9a:93:ff:01:4e:6b:e4:
                    50:b0:88:ca:12:74:25:e9:9a:74:a7:fd:5e:d2:cb:
                    ae:3b:d9:7e:40:04:81:73:03:95:04:24:b5:5f:df:
                    d4:f3:a5:0c:bf:db:26:e7:0d:12:57:be:e1:88:7a:
                    e2:3a:f0:ef:44:0e:8e:b5:e7:87:ba:fe:a9:ef:03:
                    d7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A6:B2:D5:8E:82:F3:EE:FE:77:82:2B:18:0A:FC:E2:F9:6D:4E:91
            X509v3 Authority Key Identifier:
                keyid:D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/AS215828.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215828

    Signature Algorithm: sha256WithRSAEncryption
         2c:e4:34:74:ad:f9:3d:dd:6c:50:48:12:d6:f3:79:18:cd:cc:
         4a:8f:77:b0:c2:6e:95:5a:7d:48:73:ba:51:6f:2a:10:f0:ea:
         08:14:03:55:89:84:f2:e8:bf:3c:32:48:1f:f6:48:a5:0f:76:
         38:af:75:75:90:4d:ed:28:ac:34:13:79:26:66:8c:02:1b:b3:
         8d:ee:5a:b9:e0:61:69:64:c8:0e:f2:bf:73:46:61:2b:41:62:
         ac:45:7e:58:a3:3d:8d:08:0d:20:e0:5c:3a:ce:81:af:20:12:
         fe:58:2a:e0:8f:d5:a9:a8:d3:a1:36:34:90:84:59:96:99:42:
         a5:f3:c5:e4:95:9b:04:9e:91:14:99:f5:d5:91:e2:52:fd:02:
         82:24:3c:4b:66:e6:77:63:6c:78:e5:fe:8c:7b:56:cb:f6:d5:
         e5:75:ed:98:5d:d3:fc:0f:d8:42:71:e9:a6:5d:7c:00:da:85:
         28:12:43:10:c6:ca:ac:b2:4c:e8:f8:32:b2:2e:05:36:0d:c1:
         bc:30:5f:84:36:20:ad:39:a5:6b:09:c0:52:f2:5c:77:e5:f4:
         80:7d:82:4c:99:59:cf:e9:cb:73:0e:b4:a5:31:7f:cb:e7:95:
         8c:29:4b:4b:0c:5d:22:b8:c0:10:6d:21:13:aa:3f:d2:7b:15:
         d3:d0:72:f8
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIUEa4YQSNJBGvdPN0OLOjkP2MFY8UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDgyMTk2NDc0MTUwMThlNGZmZDNmMTFjMjdhODA3NTMw
ZDdiN2NmMTAeFw0yNjA3MjUxMDI0MjhaFw0yNzA3MjQxMDI5MjhaMDMxMTAvBgNV
BAMTKDc4QTZCMkQ1OEU4MkYzRUVGRTc3ODIyQjE4MEFGQ0UyRjk2RDRFOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1nBEcAJRoXBdiNX2NbK+0q9SZ
pG6I6aPFCEfI0JzRyRL4b5zwwpcIAwnz1X4Hd0GZws3pwwFM1a0YVScnKRsxizEF
9+ZrZEoOpe8RgE/zTK6DRMvls/oijwaAEpZNTDl+8uQfclebr7cp3W1xjVVobHIv
QGDde2xK8fIQNnademsXJkQBeyz2DYoLLice6SEyMOrmzzZseTHcYP1/AIuDJOq7
qGksWs7RGpfTJw/PIYbkgUVn6fgCvSsRmpP/AU5r5FCwiMoSdCXpmnSn/V7Sy647
2X5ABIFzA5UEJLVf39TzpQy/2ybnDRJXvuGIeuI68O9EDo6154e6/qnvA9cDAgMB
AAGjggIFMIICATAdBgNVHQ4EFgQUeKay1Y6C8+7+d4IrGAr84vltTpEwHwYDVR0j
BBgwFoAU2CGWR0FQGOT/0/EcJ6gHUw17fPEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWMwZWQwNDYtZmE5NS00NWMzLTkxNDYtOTcxZGI4YTll
OGJiLzAvRDgyMTk2NDc0MTUwMThFNEZGRDNGMTFDMjdBODA3NTMwRDdCN0NGMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJDR1dSMEZRR09UXzBfRWNKNmdIVXcx
N2ZQRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzljMGVkMDQ2LWZhOTUt
NDVjMy05MTQ2LTk3MWRiOGE5ZThiYi8wL0FTMjE1ODI4LmFzYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNLFDANBgkq
hkiG9w0BAQsFAAOCAQEALOQ0dK35Pd1sUEgS1vN5GM3MSo93sMJulVp9SHO6UW8q
EPDqCBQDVYmE8ui/PDJIH/ZIpQ92OK91dZBN7SisNBN5JmaMAhuzje5aueBhaWTI
DvK/c0ZhK0FirEV+WKM9jQgNIOBcOs6BryAS/lgq4I/VqajToTY0kIRZlplCpfPF
5JWbBJ6RFJn11ZHiUv0CgiQ8S2bmd2NseOX+jHtWy/bV5XXtmF3T/A/YQnHppl18
ANqFKBJDEMbKrLJM6Pgysi4FNg3BvDBfhDYgrTmlawnAUvJcd+X0gH2CTJlZz+nL
cw60pTF/y+eVjClLSwxdIrjAEG0hE6o/0nsV09By+A==
-----END CERTIFICATE-----
Generated at Tue Jul 28 15:49:14 2026 by rpki-client