Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/AS215828.asa
File:                     AS215828.asa (raw, json)
Hash identifier:          VgsD8NIsIss3o16ZxAfQixlQwnZhHsUIcDjeAoab2YU=
Subject key identifier:   4D:B2:A4:2C:31:50:90:CF:40:51:1E:D2:2D:5E:F1:7C:EC:59:3A:7A
Certificate issuer:       /CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Certificate serial:       098BE953FB687F6D3F2C2B4B44E7F64DF642E547
Authority key identifier: D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/AS215828.asa
Signing time:             Thu 04 Jun 2026 02:41:52 +0000
ASPA not before:          Thu 04 Jun 2026 02:36:52 +0000
ASPA not after:           Thu 03 Jun 2027 02:41:52 +0000
Customer ASID:            215828
Providers:                AS: 1299
                          AS: 6204
                          AS: 6939
                          AS: 34927
                          AS: 51202
                          AS: 62255
                          AS: 199310
                          AS: 393577
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:8b:e9:53:fb:68:7f:6d:3f:2c:2b:4b:44:e7:f6:4d:f6:42:e5:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
        Validity
            Not Before: Jun  4 02:36:52 2026 GMT
            Not After : Jun  3 02:41:52 2027 GMT
        Subject: CN=4DB2A42C315090CF40511ED22D5EF17CEC593A7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d4:be:dd:ba:ae:24:da:bc:c8:90:04:e6:7f:
                    0f:80:81:5a:6d:31:8b:d1:38:0e:11:5f:cc:7b:1e:
                    57:b8:ed:76:94:bd:00:13:b6:85:ef:03:0c:90:f5:
                    2b:ad:48:b1:94:23:6f:36:7b:46:57:19:0d:55:50:
                    3f:85:0a:51:b1:8e:c1:d3:ea:02:53:6f:1c:58:03:
                    df:c9:11:20:6a:2c:f1:3a:51:26:8f:be:6e:ba:dc:
                    e8:ab:0f:84:e0:24:14:b7:29:21:4e:06:04:c2:b5:
                    44:47:3c:96:82:0f:00:5c:0a:30:cf:6a:ed:b1:b5:
                    d7:26:18:b2:d1:56:ed:07:e3:a3:24:52:08:fd:23:
                    72:1c:ba:1e:4d:93:c3:f0:41:2b:79:81:f3:2a:16:
                    ec:3a:25:d0:5b:fe:7f:94:ab:a9:1d:7f:e1:80:ea:
                    a3:a0:1d:c7:ac:a2:12:59:43:3f:ca:3d:da:75:6d:
                    ce:35:60:cc:d6:fd:0c:5c:95:e0:0f:90:9d:1d:94:
                    2f:34:62:de:f9:ac:4c:d1:67:ad:a9:af:08:48:3f:
                    c8:10:a8:67:68:fe:7d:00:37:34:8d:3d:2e:7b:b3:
                    73:36:ed:a8:28:e5:b6:2b:2a:3b:61:2f:84:d2:ff:
                    eb:af:8b:77:77:69:b0:53:33:80:3d:1f:57:0c:fc:
                    3f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B2:A4:2C:31:50:90:CF:40:51:1E:D2:2D:5E:F1:7C:EC:59:3A:7A
            X509v3 Authority Key Identifier:
                keyid:D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/AS215828.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215828

    Signature Algorithm: sha256WithRSAEncryption
         19:07:32:80:87:00:8f:30:a1:86:89:3f:c1:12:74:df:f4:2a:
         ca:6c:1b:93:f9:b3:40:55:e1:f7:40:73:97:58:76:81:e5:c7:
         48:95:40:94:0f:b2:94:d1:75:69:92:07:23:41:48:f4:9e:32:
         45:91:f1:75:8b:f4:09:b8:c7:10:c4:a0:7c:9e:83:44:5e:1c:
         29:32:b6:24:b4:e2:6c:b4:25:2f:e7:51:f7:9e:06:34:b0:8a:
         7d:de:bd:99:95:41:b7:7e:1e:89:7f:c4:a4:41:f9:f3:11:7d:
         db:6c:42:e4:c7:15:87:e5:c9:b3:09:15:d6:d5:b7:e1:6d:0b:
         3f:8a:ae:53:38:bd:34:6c:7f:1c:87:e3:32:e9:63:cf:22:da:
         80:52:db:66:9f:f9:32:9a:95:c8:7f:21:39:14:39:f5:e6:3a:
         e5:43:80:72:16:f9:6a:26:29:1e:92:a8:47:ff:ee:93:15:94:
         12:dd:e2:71:25:11:7f:47:53:d1:90:04:c1:e4:57:13:0e:86:
         34:83:69:23:05:35:02:de:ca:70:32:3c:cf:6c:d8:9f:2d:07:
         82:83:b9:e7:d4:14:c2:93:b0:b4:45:ce:86:99:60:84:5b:4c:
         26:a5:6f:b6:75:84:bf:7d:e2:ee:60:6b:34:b4:5c:d2:98:4b:
         2b:04:33:a8
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIUCYvpU/tof20/LCtLROf2TfZC5UcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDgyMTk2NDc0MTUwMThlNGZmZDNmMTFjMjdhODA3NTMw
ZDdiN2NmMTAeFw0yNjA2MDQwMjM2NTJaFw0yNzA2MDMwMjQxNTJaMDMxMTAvBgNV
BAMTKDREQjJBNDJDMzE1MDkwQ0Y0MDUxMUVEMjJENUVGMTdDRUM1OTNBN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl1L7duq4k2rzIkATmfw+AgVpt
MYvROA4RX8x7Hle47XaUvQATtoXvAwyQ9SutSLGUI282e0ZXGQ1VUD+FClGxjsHT
6gJTbxxYA9/JESBqLPE6USaPvm663OirD4TgJBS3KSFOBgTCtURHPJaCDwBcCjDP
au2xtdcmGLLRVu0H46MkUgj9I3Icuh5Nk8PwQSt5gfMqFuw6JdBb/n+Uq6kdf+GA
6qOgHcesohJZQz/KPdp1bc41YMzW/QxcleAPkJ0dlC80Yt75rEzRZ62prwhIP8gQ
qGdo/n0ANzSNPS57s3M27ago5bYrKjthL4TS/+uvi3d3abBTM4A9H1cM/D/HAgMB
AAGjggIFMIICATAdBgNVHQ4EFgQUTbKkLDFQkM9AUR7SLV7xfOxZOnowHwYDVR0j
BBgwFoAU2CGWR0FQGOT/0/EcJ6gHUw17fPEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWMwZWQwNDYtZmE5NS00NWMzLTkxNDYtOTcxZGI4YTll
OGJiLzAvRDgyMTk2NDc0MTUwMThFNEZGRDNGMTFDMjdBODA3NTMwRDdCN0NGMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJDR1dSMEZRR09UXzBfRWNKNmdIVXcx
N2ZQRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzljMGVkMDQ2LWZhOTUt
NDVjMy05MTQ2LTk3MWRiOGE5ZThiYi8wL0FTMjE1ODI4LmFzYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNLFDANBgkq
hkiG9w0BAQsFAAOCAQEAGQcygIcAjzChhok/wRJ03/Qqymwbk/mzQFXh90Bzl1h2
geXHSJVAlA+ylNF1aZIHI0FI9J4yRZHxdYv0CbjHEMSgfJ6DRF4cKTK2JLTibLQl
L+dR954GNLCKfd69mZVBt34eiX/EpEH58xF922xC5McVh+XJswkV1tW34W0LP4qu
Uzi9NGx/HIfjMuljzyLagFLbZp/5MpqVyH8hORQ59eY65UOAchb5aiYpHpKoR//u
kxWUEt3icSURf0dT0ZAEweRXEw6GNINpIwU1At7KcDI8z2zYny0HgoO559QUwpOw
tEXOhplghFtMJqVvtnWEv33i7mBrNLRc0phLKwQzqA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:44:09 2026 by rpki-client