Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/AS202881.asa
File:                     AS202881.asa (raw, json)
Hash identifier:          nU1V64f2UOlswo0H6MWNfigd4IjLYoZXApoQceO/AvU=
Subject key identifier:   94:C4:03:FA:EB:BD:0C:95:05:9B:6C:90:D0:96:DA:DA:AB:2B:A8:28
Certificate issuer:       /CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8
Certificate serial:       58EDEDA648A250307FDE3CD71661500B87D4B28E
Authority key identifier: D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/AS202881.asa
Signing time:             Wed 29 Oct 2025 08:41:09 +0000
ASPA not before:          Wed 29 Oct 2025 08:36:09 +0000
ASPA not after:           Wed 28 Oct 2026 08:41:09 +0000
Customer ASID:            202881
Providers:                AS: 44324
                          AS: 205329
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 03:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:ed:ed:a6:48:a2:50:30:7f:de:3c:d7:16:61:50:0b:87:d4:b2:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8
        Validity
            Not Before: Oct 29 08:36:09 2025 GMT
            Not After : Oct 28 08:41:09 2026 GMT
        Subject: CN=94C403FAEBBD0C95059B6C90D096DADAAB2BA828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:80:42:c3:d5:2e:ca:07:4c:2d:df:54:20:21:
                    aa:b7:81:df:ec:ad:a9:db:88:f0:32:65:d7:e3:04:
                    58:f3:66:eb:22:8d:11:f6:3d:c0:db:c1:a4:a2:e4:
                    45:98:0b:9b:b0:b1:f3:e1:3f:01:ee:c6:85:e3:45:
                    8c:db:23:3d:58:f1:34:2f:3b:5d:fe:9a:b9:e1:8c:
                    06:87:f9:14:1f:30:ed:60:fe:25:13:05:de:3f:ad:
                    8f:52:ef:89:9e:3e:4e:54:be:23:91:c8:34:47:e8:
                    55:a7:f3:cf:37:71:01:08:60:4d:f8:9d:9d:b1:46:
                    37:ff:86:7f:20:21:c8:fe:93:91:3c:12:b9:2e:55:
                    41:55:a6:f1:c0:f6:7c:96:f1:1f:2c:db:58:0f:f5:
                    f6:15:a1:d2:08:9f:32:c1:bb:e0:64:d2:4b:39:05:
                    8c:e6:a8:26:a0:b6:aa:cd:28:52:8a:fd:3e:99:57:
                    b8:22:01:73:8f:8e:fd:4e:1f:a8:40:1a:a2:99:93:
                    e0:cf:4a:14:9e:65:26:b2:8f:8c:ae:aa:3d:40:83:
                    dc:33:c1:40:3f:44:20:7f:3e:2b:cb:ce:a8:5e:94:
                    6c:5d:59:0e:16:91:68:d0:85:de:33:12:c2:52:0f:
                    b0:cb:36:e0:55:3f:e6:55:2e:4e:f9:b7:a1:ac:50:
                    32:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C4:03:FA:EB:BD:0C:95:05:9B:6C:90:D0:96:DA:DA:AB:2B:A8:28
            X509v3 Authority Key Identifier:
                keyid:D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/AS202881.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202881

    Signature Algorithm: sha256WithRSAEncryption
         8f:92:4d:f1:9f:10:57:fe:cb:d2:79:1b:9a:0b:23:5f:22:0b:
         96:ae:0b:98:b5:b4:93:2a:ed:d1:9c:96:92:c3:47:75:d6:f9:
         24:41:fd:33:2e:87:51:5a:0b:e3:d1:fc:dc:3c:dc:68:95:b8:
         ed:0d:c0:22:00:d1:24:2a:c6:7d:be:32:34:82:f3:00:3f:e0:
         b6:d3:fc:57:e9:80:48:2e:ea:13:a9:d8:be:67:bc:a4:cd:6b:
         09:29:a9:3d:f9:4b:d4:1b:31:c9:69:ed:d5:4e:81:6f:63:2c:
         a0:9f:b7:e0:b4:67:76:8d:2b:b2:27:3c:16:19:b2:d9:da:aa:
         81:98:30:db:35:7e:70:c1:32:f4:e7:bb:df:2d:99:c4:f0:da:
         65:e2:0b:b0:a6:c5:a7:e1:a6:9d:92:24:ee:bd:30:fa:67:2d:
         f9:62:9d:0e:82:32:e4:c4:e7:85:f2:bd:0c:10:a3:bb:42:16:
         b7:9d:58:c0:1b:f4:1c:a0:00:df:22:03:41:20:ea:81:18:e5:
         69:4b:99:59:04:df:3e:8f:73:c1:cd:6e:fd:41:b7:a7:c3:f8:
         1f:e7:91:39:7e:1e:31:ad:16:e7:fb:fb:0f:04:96:83:0b:f5:
         33:7a:11:cf:10:d6:18:40:6c:df:8c:35:4b:a6:a4:39:8d:94:
         cb:36:eb:dd
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIUWO3tpkiiUDB/3jzXFmFQC4fUso4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDY0Mjk3NWY1MzVmNDVmZDlmNmQ4ZmVhNjI2YmM2ZDI0
YmM5ZDhkODAeFw0yNTEwMjkwODM2MDlaFw0yNjEwMjgwODQxMDlaMDMxMTAvBgNV
BAMTKDk0QzQwM0ZBRUJCRDBDOTUwNTlCNkM5MEQwOTZEQURBQUIyQkE4MjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGgELD1S7KB0wt31QgIaq3gd/s
ranbiPAyZdfjBFjzZusijRH2PcDbwaSi5EWYC5uwsfPhPwHuxoXjRYzbIz1Y8TQv
O13+mrnhjAaH+RQfMO1g/iUTBd4/rY9S74mePk5UviORyDRH6FWn8883cQEIYE34
nZ2xRjf/hn8gIcj+k5E8ErkuVUFVpvHA9nyW8R8s21gP9fYVodIInzLBu+Bk0ks5
BYzmqCagtqrNKFKK/T6ZV7giAXOPjv1OH6hAGqKZk+DPShSeZSayj4yuqj1Ag9wz
wUA/RCB/PivLzqhelGxdWQ4WkWjQhd4zEsJSD7DLNuBVP+ZVLk75t6GsUDJfAgMB
AAGjggIFMIICATAdBgNVHQ4EFgQUlMQD+uu9DJUFm2yQ0Jba2qsrqCgwHwYDVR0j
BBgwFoAU1kKXX1NfRf2fbY/qYmvG0kvJ2NgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDY5NzE2MGMtYWNjNS00YjUxLWJmNTUtMTBjN2E2ZTY2
OTgwLzMvRDY0Mjk3NUY1MzVGNDVGRDlGNkQ4RkVBNjI2QkM2RDI0QkM5RDhEOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFrS1hYMU5mUmYyZmJZX3FZbXZHMGt2
SjJOZy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Q2OTcxNjBjLWFjYzUt
NGI1MS1iZjU1LTEwYzdhNmU2Njk4MC8zL0FTMjAyODgxLmFzYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMYgTANBgkq
hkiG9w0BAQsFAAOCAQEAj5JN8Z8QV/7L0nkbmgsjXyILlq4LmLW0kyrt0ZyWksNH
ddb5JEH9My6HUVoL49H83DzcaJW47Q3AIgDRJCrGfb4yNILzAD/gttP8V+mASC7q
E6nYvme8pM1rCSmpPflL1BsxyWnt1U6Bb2MsoJ+34LRndo0rsic8Fhmy2dqqgZgw
2zV+cMEy9Oe73y2ZxPDaZeILsKbFp+GmnZIk7r0w+mct+WKdDoIy5MTnhfK9DBCj
u0IWt51YwBv0HKAA3yIDQSDqgRjlaUuZWQTfPo9zwc1u/UG3p8P4H+eROX4eMa0W
5/v7DwSWgwv1M3oRzxDWGEBs34w1S6akOY2Uyzbr3Q==
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:56:38 2025 by rpki-client