Autonomous System Provider Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/AS208915.asa
File:                     AS208915.asa (raw, json)
Hash identifier:          C/vW+0F5eTIOg6LeD0Ce6DMfnWE+0Z2gXnyCj2Hi9Ww=
Subject key identifier:   09:61:10:7A:EA:15:49:E0:1C:5F:D0:A5:6E:F5:75:7D:97:7B:15:C0
Certificate issuer:       /CN=407daf8dc897d3f1c43d866ea945305303ad73ed
Certificate serial:       27AB2A076BB547B4C51C8BD14EF20503C47720BC
Authority key identifier: 40:7D:AF:8D:C8:97:D3:F1:C4:3D:86:6E:A9:45:30:53:03:AD:73:ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QH2vjciX0_HEPYZuqUUwUwOtc-0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/AS208915.asa
Signing time:             Tue 27 Oct 2026 15:56:34 +0000
ASPA not before:          Tue 27 Oct 2026 15:51:34 +0000
ASPA not after:           Tue 26 Oct 2027 15:56:34 +0000
Customer ASID:            208915
Providers:                AS: 835
                          AS: 1299
                          AS: 6939
                          AS: 21700
                          AS: 52025
                          AS: 207841
                          AS: 209735
                          AS: 400212
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QH2vjciX0_HEPYZuqUUwUwOtc-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Nov 2026 17:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ab:2a:07:6b:b5:47:b4:c5:1c:8b:d1:4e:f2:05:03:c4:77:20:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=407daf8dc897d3f1c43d866ea945305303ad73ed
        Validity
            Not Before: Oct 27 15:51:34 2026 GMT
            Not After : Oct 26 15:56:34 2027 GMT
        Subject: CN=0961107AEA1549E01C5FD0A56EF5757D977B15C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4c:59:bc:b7:0a:48:be:60:3f:ec:10:8b:c8:
                    e7:f8:84:53:18:c4:af:fe:68:39:c3:ec:d7:68:f3:
                    23:d6:b7:a3:a2:1b:b0:1a:fe:52:03:b7:b2:18:59:
                    46:6b:70:19:4e:fa:54:d9:19:7a:5c:84:20:6f:e3:
                    6e:3a:e1:a2:5e:59:3d:ce:80:11:fb:33:a5:09:9d:
                    67:bf:1b:eb:81:04:e5:12:d3:53:99:8e:4b:31:9d:
                    f8:6b:f9:94:27:ab:33:80:ac:51:b4:56:b6:3c:d5:
                    73:88:bc:cb:76:ae:89:46:ce:7c:28:71:17:73:45:
                    31:ad:ce:67:26:73:bf:d3:83:7a:36:d4:99:84:b0:
                    31:be:80:b6:1f:b6:0a:71:f5:ea:73:b0:7e:5a:be:
                    2b:35:51:5d:f2:89:1f:05:14:09:70:34:7e:39:f9:
                    84:e8:dd:a3:a9:0d:74:20:b7:31:60:ae:19:6e:b5:
                    55:db:d7:10:57:c8:f9:b5:38:6c:71:51:e3:a0:07:
                    f3:90:2a:db:06:f7:a0:02:10:77:c6:0f:7a:79:32:
                    23:1c:63:a5:fb:a2:83:56:47:df:23:df:4c:f9:df:
                    a8:81:21:8d:4e:b8:06:fc:ca:6d:c3:e7:b1:20:b5:
                    4f:00:92:18:dd:6a:9a:6c:df:2e:54:51:08:5a:16:
                    0d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:61:10:7A:EA:15:49:E0:1C:5F:D0:A5:6E:F5:75:7D:97:7B:15:C0
            X509v3 Authority Key Identifier:
                keyid:40:7D:AF:8D:C8:97:D3:F1:C4:3D:86:6E:A9:45:30:53:03:AD:73:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QH2vjciX0_HEPYZuqUUwUwOtc-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/AS208915.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208915

    Signature Algorithm: sha256WithRSAEncryption
         0f:f5:a9:25:42:e0:a9:70:9e:63:55:26:ea:e3:de:8a:40:d0:
         5a:79:ee:97:25:bd:49:ae:f1:c9:cc:5f:c1:25:13:46:6d:6b:
         97:b4:51:42:4e:9e:56:0a:f6:6d:e7:bc:47:f3:38:39:69:66:
         57:c0:90:15:10:d9:ff:10:ff:dc:ce:b3:37:e4:95:88:3a:fe:
         0e:e6:97:8a:8e:62:75:42:2b:31:85:bd:cf:43:ac:72:47:1b:
         cd:99:43:54:8e:2e:18:24:14:c6:99:44:f6:d9:86:10:c9:7e:
         33:eb:66:98:12:34:8c:3c:df:85:fc:85:ca:1b:94:12:a4:0d:
         cd:d4:bb:65:b4:33:41:0e:48:2b:2b:9d:82:2b:f3:1d:b5:50:
         8c:f8:da:bf:d1:a1:db:2e:86:ce:df:aa:5c:fd:68:16:82:80:
         80:a6:8c:42:96:9a:63:3d:cc:a8:de:45:5c:70:c1:1d:44:b0:
         6e:74:e1:12:5e:f6:8c:89:1f:46:34:71:13:88:3a:93:2d:cb:
         c7:ab:da:f8:8e:51:d4:f2:ea:89:69:40:2e:f8:d9:9b:5a:6f:
         09:c8:9f:06:fc:3c:76:15:fa:76:48:6d:d7:46:fc:1e:f9:ae:
         58:6e:1c:2b:4c:e0:e5:95:2c:04:c3:e0:85:88:68:0e:84:57:
         3f:15:da:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 09:05:44 2026 by rpki-client