Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/AS215248.asa
File:                     AS215248.asa (raw, json)
Hash identifier:          gSIlCwlw8JO7fhHcwb3U8PAw9UJCYWeXxNRBGMYW6JM=
Subject key identifier:   5E:12:7A:9D:BC:EC:E5:CC:E3:96:0F:A6:17:5C:D8:A1:D9:C9:54:AA
Certificate issuer:       /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Certificate serial:       2DCE2825F65385652E4DECE5E39AE31101BAC070
Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/AS215248.asa
Signing time:             Sat 11 Apr 2026 15:23:25 +0000
ASPA not before:          Sat 11 Apr 2026 15:18:25 +0000
ASPA not after:           Sat 10 Apr 2027 15:23:25 +0000
Customer ASID:            215248
Providers:                AS: 835
                          AS: 5405
                          AS: 6204
                          AS: 8283
                          AS: 25091
                          AS: 37739
                          AS: 42093
                          AS: 50263
                          AS: 50917
                          AS: 52025
                          AS: 58115
                          AS: 61049
                          AS: 64289
                          AS: 200132
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:43:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:ce:28:25:f6:53:85:65:2e:4d:ec:e5:e3:9a:e3:11:01:ba:c0:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
        Validity
            Not Before: Apr 11 15:18:25 2026 GMT
            Not After : Apr 10 15:23:25 2027 GMT
        Subject: CN=5E127A9DBCECE5CCE3960FA6175CD8A1D9C954AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9c:f1:c7:23:d4:4c:4a:e4:f5:6e:f6:7f:90:
                    3f:c5:e0:7d:6f:9f:12:a8:eb:f9:dc:fe:ee:f9:e7:
                    53:89:de:c9:45:c7:d0:50:d2:1f:d8:9f:00:a7:4f:
                    44:0f:ca:f7:1f:99:26:45:e9:75:19:a6:ae:5b:4d:
                    be:e4:e4:20:56:09:35:46:db:b9:c9:f5:86:8c:39:
                    72:0c:bc:fa:8c:0e:38:0a:63:a9:5b:33:99:1f:b0:
                    fb:69:12:bf:f8:94:13:a0:c8:95:4d:4e:5d:68:1a:
                    07:73:58:78:97:fa:88:d4:a6:10:59:62:8c:fe:cb:
                    15:e7:bf:66:62:99:d5:6f:17:36:ee:46:2b:aa:2d:
                    06:91:c3:82:c9:33:4e:87:ae:93:d7:2e:6d:d4:d3:
                    ce:80:db:74:a4:c2:a8:60:4c:2d:31:04:1c:87:17:
                    ee:30:91:f8:8e:5f:cf:b2:a9:9c:21:20:c0:ef:9d:
                    2e:be:4f:b8:de:22:d9:a9:77:79:4e:0c:8a:07:7d:
                    26:73:70:ef:4d:ae:56:89:d0:24:d6:0d:ad:48:2d:
                    e5:82:25:4d:4a:41:42:6d:65:86:30:72:e3:d3:bf:
                    07:53:78:30:fa:91:70:1e:4d:41:01:63:46:5e:dd:
                    3d:ea:37:28:20:5a:e4:33:d4:0b:26:f5:f7:bf:d9:
                    88:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:12:7A:9D:BC:EC:E5:CC:E3:96:0F:A6:17:5C:D8:A1:D9:C9:54:AA
            X509v3 Authority Key Identifier:
                keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/AS215248.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215248

    Signature Algorithm: sha256WithRSAEncryption
         67:e4:82:fa:6a:2d:4c:f1:a7:74:50:dd:b6:98:3c:22:d2:ba:
         c3:db:29:21:70:0d:89:bc:30:a2:6d:b5:2d:cc:f7:24:5e:d5:
         1d:06:e6:9c:ed:82:49:2c:a2:82:bd:e8:b7:ae:c1:97:77:26:
         af:28:97:98:2a:e3:92:95:f0:6a:79:b5:b9:c9:d2:c4:78:17:
         b3:38:52:e2:44:44:8c:bd:f9:05:ec:24:f4:ed:40:58:d5:a9:
         3b:b1:f1:d5:2a:c8:a1:19:59:4f:e9:04:27:68:ad:02:b5:97:
         b9:03:06:97:80:63:ab:6b:41:a8:ad:ed:cf:29:0a:4e:61:b4:
         2d:67:81:ac:94:45:f7:eb:6a:f1:9a:10:cf:be:ff:19:7d:45:
         49:ec:e6:25:08:65:2b:80:60:66:15:9b:1c:e8:e3:8a:c5:5e:
         18:d1:4b:4f:3d:55:af:df:9d:a5:f9:1e:cd:00:42:18:77:af:
         1c:c9:ea:97:c8:e1:b7:a9:dd:49:22:56:f7:c7:fb:fb:a7:36:
         62:a3:a2:90:8a:ee:9e:44:d8:db:88:b2:78:0d:c7:67:3d:c9:
         22:a2:6f:b5:9f:f5:91:a9:74:ea:20:fd:b4:a2:af:39:64:b2:
         e7:ec:94:fe:ec:3b:e7:49:0c:41:b6:b0:f6:3b:80:a4:f9:98:
         17:ed:a8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:48:12 2026 by rpki-client