Autonomous System Provider Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/6/AS204211.asa
File:                     AS204211.asa (raw, json)
Hash identifier:          nspqzYTdh2cYN+ehCfBpH3dODefqj1UfyxztHHoGnjc=
Subject key identifier:   EB:63:24:E0:62:2F:23:24:06:2A:70:BC:8D:FD:97:B0:3B:98:54:18
Certificate issuer:       /CN=81c1480da58487d056863dd4ab71d8210a3687fa
Certificate serial:       1C4D447C96B81EE1A9175403211B49C1F382566A
Authority key identifier: 81:C1:48:0D:A5:84:87:D0:56:86:3D:D4:AB:71:D8:21:0A:36:87:FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gcFIDaWEh9BWhj3Uq3HYIQo2h_o.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/6/AS204211.asa
Signing time:             Mon 07 Sep 2026 13:17:26 +0000
ASPA not before:          Mon 07 Sep 2026 13:12:26 +0000
ASPA not after:           Mon 06 Sep 2027 13:17:26 +0000
Customer ASID:            204211
Providers:                AS: 174
                          AS: 6939
                          AS: 40929
                          AS: 44324
                          AS: 47778
                          AS: 51087
                          AS: 53667
                          AS: 53808
                          AS: 56584
                          AS: 62246
                          AS: 139317
                          AS: 151673
                          AS: 201944
                          AS: 204539
                          AS: 206069
                          AS: 207529
                          AS: 210176
                          AS: 210352
                          AS: 210440
                          AS: 210773
                          AS: 213605
                          AS: 215172
                          AS: 401804
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/6/81C1480DA58487D056863DD4AB71D8210A3687FA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/6/81C1480DA58487D056863DD4AB71D8210A3687FA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gcFIDaWEh9BWhj3Uq3HYIQo2h_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:4d:44:7c:96:b8:1e:e1:a9:17:54:03:21:1b:49:c1:f3:82:56:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81c1480da58487d056863dd4ab71d8210a3687fa
        Validity
            Not Before: Sep  7 13:12:26 2026 GMT
            Not After : Sep  6 13:17:26 2027 GMT
        Subject: CN=EB6324E0622F2324062A70BC8DFD97B03B985418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8f:fd:d9:09:0c:aa:0f:a0:db:a1:c3:d3:e3:
                    bd:ef:66:21:5f:df:a0:cd:4e:82:fa:39:40:e5:dc:
                    65:1a:3b:2a:ab:1e:13:81:2f:c8:7c:8b:3e:80:a9:
                    1a:d5:5a:69:bc:29:e1:b4:94:10:0a:93:45:2a:e4:
                    25:1c:92:89:99:29:dd:a0:6e:33:b0:18:aa:56:97:
                    6f:77:98:66:1a:87:5c:f3:af:7b:0c:94:ec:0f:78:
                    70:ba:cb:14:ca:89:44:ba:66:d8:fe:6a:14:ef:49:
                    01:78:cb:78:f5:28:8b:06:32:0a:9a:54:20:00:72:
                    a1:29:08:ae:75:2e:34:16:3b:5c:a7:0a:09:29:15:
                    ff:1f:24:00:32:85:7f:c2:12:8f:38:62:51:68:26:
                    17:41:7a:c2:f8:27:5c:05:0c:84:fa:c7:7e:ac:1c:
                    22:9a:7f:6b:85:49:9a:02:57:5a:e0:7a:ad:4a:4d:
                    0b:61:e1:ef:42:2b:20:9b:1d:0c:ba:6d:32:cd:21:
                    2c:d2:df:02:55:d0:6a:4b:bf:9b:c8:e1:4f:aa:a9:
                    19:16:03:6a:db:a5:44:90:a7:4c:7c:33:0b:66:70:
                    a3:91:d1:fb:34:db:8a:4a:d3:5f:3a:3b:8b:6f:c1:
                    92:c5:46:b6:da:25:11:2d:7c:4c:32:36:ec:8b:a6:
                    3b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:63:24:E0:62:2F:23:24:06:2A:70:BC:8D:FD:97:B0:3B:98:54:18
            X509v3 Authority Key Identifier:
                keyid:81:C1:48:0D:A5:84:87:D0:56:86:3D:D4:AB:71:D8:21:0A:36:87:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/6/81C1480DA58487D056863DD4AB71D8210A3687FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcFIDaWEh9BWhj3Uq3HYIQo2h_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/6/AS204211.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204211

    Signature Algorithm: sha256WithRSAEncryption
         26:84:bf:ad:73:cc:1a:4b:45:cc:42:e7:33:81:30:a8:cc:ce:
         2a:a0:cc:ba:82:ed:18:67:6e:64:be:f1:9e:c2:3e:3f:5d:d1:
         b0:d7:6f:4a:58:93:15:28:3b:e2:18:6e:40:21:4c:f6:3f:a4:
         7c:b0:d2:7a:18:a0:9d:3a:de:f1:37:78:d0:c7:a4:5b:5d:91:
         2d:ec:54:e3:4b:54:d4:df:d4:dc:95:69:d6:fd:72:79:9f:d8:
         61:38:f4:a3:4b:c3:0d:7c:8e:30:53:9a:5a:b8:cc:53:aa:f1:
         af:23:84:10:88:44:cd:2b:9d:09:ad:f3:8a:f8:3c:f2:b5:f2:
         5b:dc:f6:6f:48:71:5c:96:e1:9b:84:74:3d:d1:cb:c4:64:08:
         b2:59:5f:0b:b1:66:a8:64:6f:a9:ff:af:fc:36:ad:30:84:f8:
         01:f6:42:1a:f3:4b:dd:65:f7:eb:18:5e:44:01:3d:92:2e:5c:
         43:1d:b1:d2:14:04:c7:e1:d3:be:5f:b4:c2:9c:7b:d9:32:ec:
         22:d1:d2:3d:0f:d9:81:bc:ed:50:9a:70:43:6a:15:5e:fd:7e:
         f7:d6:8a:dd:0e:4e:de:5f:4f:ed:01:5b:ca:36:0b:4a:96:45:
         a1:4a:b2:96:97:9c:3a:7a:71:55:08:48:5f:4b:d4:3e:3b:1f:
         17:59:37:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:55:15 2026 by rpki-client