Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/AS205848.asa
File:                     AS205848.asa (raw, json)
Hash identifier:          IikDWCRBwwK8sSNZmwImnmeMmSBFyeMb5C9qOOloZyw=
Subject key identifier:   0E:EA:2E:E8:3C:3B:29:73:CC:B0:E9:1D:D3:DC:C7:58:55:E0:0F:65
Certificate issuer:       /CN=ddda7c4c6a985c465e66bfde4c3e11bd0cfe08ff
Certificate serial:       2A7175E556434A67B8F9BB6A23EEB3AC2FAC2F64
Authority key identifier: DD:DA:7C:4C:6A:98:5C:46:5E:66:BF:DE:4C:3E:11:BD:0C:FE:08:FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3dp8TGqYXEZeZr_eTD4RvQz-CP8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/AS205848.asa
Signing time:             Sat 25 Jul 2026 15:39:09 +0000
ASPA not before:          Sat 25 Jul 2026 15:34:09 +0000
ASPA not after:           Sat 24 Jul 2027 15:39:09 +0000
Customer ASID:            205848
Providers:                AS: 924
                          AS: 1299
                          AS: 6939
                          AS: 34927
                          AS: 35133
                          AS: 36231
                          AS: 52025
                          AS: 61138
                          AS: 208453
                          AS: 209022
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3dp8TGqYXEZeZr_eTD4RvQz-CP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 03:43:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:71:75:e5:56:43:4a:67:b8:f9:bb:6a:23:ee:b3:ac:2f:ac:2f:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddda7c4c6a985c465e66bfde4c3e11bd0cfe08ff
        Validity
            Not Before: Jul 25 15:34:09 2026 GMT
            Not After : Jul 24 15:39:09 2027 GMT
        Subject: CN=0EEA2EE83C3B2973CCB0E91DD3DCC75855E00F65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:08:66:97:76:38:5e:3b:fc:2f:ad:43:3d:bf:
                    29:6a:74:23:80:a0:9c:56:68:a2:51:d9:15:9c:a6:
                    ab:90:c1:95:36:b0:d6:28:87:2a:b1:db:85:af:4d:
                    48:8a:95:d2:39:ef:b1:af:76:80:23:7a:5c:50:4b:
                    61:46:de:d0:15:4e:5d:84:08:3f:18:d8:d6:d5:19:
                    e8:07:23:f5:6a:5a:52:76:30:47:52:2c:c7:4e:45:
                    84:75:8a:84:60:62:3e:d0:ae:e3:d4:e1:22:6d:c1:
                    a0:2d:dc:05:19:8f:79:56:2a:88:7e:fd:09:82:f5:
                    04:25:ae:4c:e9:a1:20:51:4c:03:77:e9:db:9f:0d:
                    9d:2a:35:58:9f:60:2f:3a:5b:69:09:9d:87:19:59:
                    68:8a:79:46:ea:87:03:0d:1b:b7:0f:8e:0b:e2:42:
                    d7:d6:54:f9:6e:21:98:14:85:1a:9f:77:b0:2c:2a:
                    f9:64:4a:df:86:41:54:e0:b0:cb:63:ce:85:2d:26:
                    57:f6:30:dd:5e:d2:16:59:2e:91:4f:d4:f4:f8:93:
                    8f:ca:41:76:21:1d:fd:ab:1a:db:44:78:dc:3d:6a:
                    e4:39:9b:52:17:ca:d6:67:7d:23:46:c8:63:de:52:
                    e4:c6:89:bf:5a:2d:47:ff:66:01:38:86:74:31:d9:
                    e2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:EA:2E:E8:3C:3B:29:73:CC:B0:E9:1D:D3:DC:C7:58:55:E0:0F:65
            X509v3 Authority Key Identifier:
                keyid:DD:DA:7C:4C:6A:98:5C:46:5E:66:BF:DE:4C:3E:11:BD:0C:FE:08:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dp8TGqYXEZeZr_eTD4RvQz-CP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/AS205848.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205848

    Signature Algorithm: sha256WithRSAEncryption
         76:d5:8f:d7:bf:df:30:58:5e:49:52:a4:50:36:d5:73:fc:70:
         01:2e:6c:71:10:3c:dd:11:9a:0f:9b:60:0e:64:d1:50:95:a3:
         08:e2:5e:78:3a:1e:04:d4:66:28:eb:a0:bf:ec:28:ee:7a:fb:
         0c:21:b2:6b:5e:bc:4c:55:3f:1b:03:0d:e9:8a:d3:f7:f6:40:
         5b:bd:00:01:a6:ca:17:67:29:c2:1a:9b:73:91:0c:66:65:a2:
         d1:9f:c2:1b:92:b8:18:5c:fe:a0:f6:a5:62:ce:55:a8:0c:d3:
         5e:30:3d:ba:34:4f:56:d1:19:a3:09:2c:e3:29:fc:92:3d:47:
         0b:6f:34:64:65:1c:00:f9:e2:d6:a0:4d:cb:ec:53:d8:cd:6e:
         e9:e8:4a:bc:8f:45:7e:00:92:de:e7:d8:b3:4c:36:b2:03:13:
         da:2c:6d:e9:ff:6a:b3:5d:e4:35:4a:c1:f4:02:f3:62:72:d2:
         8e:00:53:a9:c1:56:d0:d6:d4:c7:ac:47:37:0a:f8:fb:32:1f:
         c2:6b:27:56:97:59:bd:ea:61:81:a4:3a:42:b6:74:7f:55:5f:
         47:82:e6:5d:39:6c:d9:79:43:93:8b:20:c0:98:c7:2b:13:52:
         64:b5:a6:6f:e7:12:02:3d:f2:4d:06:71:06:50:26:8b:e6:5d:
         e0:d8:e1:f2
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIUKnF15VZDSme4+btqI+6zrC+sL2QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGRkYTdjNGM2YTk4NWM0NjVlNjZiZmRlNGMzZTExYmQw
Y2ZlMDhmZjAeFw0yNjA3MjUxNTM0MDlaFw0yNzA3MjQxNTM5MDlaMDMxMTAvBgNV
BAMTKDBFRUEyRUU4M0MzQjI5NzNDQ0IwRTkxREQzRENDNzU4NTVFMDBGNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsCGaXdjheO/wvrUM9vylqdCOA
oJxWaKJR2RWcpquQwZU2sNYohyqx24WvTUiKldI577GvdoAjelxQS2FG3tAVTl2E
CD8Y2NbVGegHI/VqWlJ2MEdSLMdORYR1ioRgYj7QruPU4SJtwaAt3AUZj3lWKoh+
/QmC9QQlrkzpoSBRTAN36dufDZ0qNVifYC86W2kJnYcZWWiKeUbqhwMNG7cPjgvi
QtfWVPluIZgUhRqfd7AsKvlkSt+GQVTgsMtjzoUtJlf2MN1e0hZZLpFP1PT4k4/K
QXYhHf2rGttEeNw9auQ5m1IXytZnfSNGyGPeUuTGib9aLUf/ZgE4hnQx2eK5AgMB
AAGjggIFMIICATAdBgNVHQ4EFgQUDuou6Dw7KXPMsOkd09zHWFXgD2UwHwYDVR0j
BBgwFoAU3dp8TGqYXEZeZr/eTD4RvQz+CP8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTU5ZThjMmYtZTU5MC00YTRmLTg0NjMtODMxN2MyYTFj
MDQ4LzAvREREQTdDNEM2QTk4NUM0NjVFNjZCRkRFNEMzRTExQkQwQ0ZFMDhGRi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNkcDhUR3FZWEVaZVpyX2VURDRSdlF6
LUNQOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E1OWU4YzJmLWU1OTAt
NGE0Zi04NDYzLTgzMTdjMmExYzA0OC8wL0FTMjA1ODQ4LmFzYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMkGDANBgkq
hkiG9w0BAQsFAAOCAQEAdtWP17/fMFheSVKkUDbVc/xwAS5scRA83RGaD5tgDmTR
UJWjCOJeeDoeBNRmKOugv+wo7nr7DCGya168TFU/GwMN6YrT9/ZAW70AAabKF2cp
whqbc5EMZmWi0Z/CG5K4GFz+oPalYs5VqAzTXjA9ujRPVtEZowks4yn8kj1HC280
ZGUcAPni1qBNy+xT2M1u6ehKvI9FfgCS3ufYs0w2sgMT2ixt6f9qs13kNUrB9ALz
YnLSjgBTqcFW0NbUx6xHNwr4+zIfwmsnVpdZvephgaQ6QrZ0f1VfR4LmXTls2XlD
k4sgwJjHKxNSZLWmb+cSAj3yTQZxBlAmi+Zd4Njh8g==
-----END CERTIFICATE-----
Generated at Tue Jul 28 12:35:54 2026 by rpki-client