Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f0e48da2-bf3d-4f94-9c13-c08c1190de18/0/AS213216.asa
File:                     AS213216.asa (raw, json)
Hash identifier:          E44tygSJlhvbcH//RusbDcWbj+tZTXOnGQ3XzZ2jCqQ=
Subject key identifier:   5E:B3:76:DD:BF:7E:C9:E9:03:2F:61:AB:52:64:E6:0D:4D:DF:EE:64
Certificate issuer:       /CN=0177dcd7bee1190629437ca4c8ab83e3ad15c7a9
Certificate serial:       63A3B6F6F946E5027A99F6EFCD5B034F958259F5
Authority key identifier: 01:77:DC:D7:BE:E1:19:06:29:43:7C:A4:C8:AB:83:E3:AD:15:C7:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AXfc177hGQYpQ3ykyKuD460Vx6k.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f0e48da2-bf3d-4f94-9c13-c08c1190de18/0/AS213216.asa
Signing time:             Wed 15 Apr 2026 19:51:30 +0000
ASPA not before:          Wed 15 Apr 2026 19:46:30 +0000
ASPA not after:           Wed 14 Apr 2027 19:51:30 +0000
Customer ASID:            213216
Providers:                AS: 20473
                          AS: 34872
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f0e48da2-bf3d-4f94-9c13-c08c1190de18/0/0177DCD7BEE1190629437CA4C8AB83E3AD15C7A9.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f0e48da2-bf3d-4f94-9c13-c08c1190de18/0/0177DCD7BEE1190629437CA4C8AB83E3AD15C7A9.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AXfc177hGQYpQ3ykyKuD460Vx6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:33:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:a3:b6:f6:f9:46:e5:02:7a:99:f6:ef:cd:5b:03:4f:95:82:59:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0177dcd7bee1190629437ca4c8ab83e3ad15c7a9
        Validity
            Not Before: Apr 15 19:46:30 2026 GMT
            Not After : Apr 14 19:51:30 2027 GMT
        Subject: CN=5EB376DDBF7EC9E9032F61AB5264E60D4DDFEE64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:96:f7:0a:20:21:71:cc:17:64:68:94:29:18:
                    1e:fa:b1:f9:38:ac:68:49:16:d9:43:a1:31:c2:dc:
                    24:19:6c:7b:65:57:3e:d4:78:71:65:4f:5b:6a:e4:
                    66:a3:70:36:71:0c:4b:6d:09:a2:d5:95:f9:99:20:
                    54:5a:b8:f1:2a:6e:f4:d7:6e:15:1a:00:7e:b3:a8:
                    d1:e4:b0:00:93:ef:ef:91:d1:1e:7f:ec:5a:73:69:
                    76:5e:26:b5:e7:e1:2e:5d:fc:00:11:70:c6:e2:c5:
                    5c:1c:7f:cd:c7:4a:2a:0a:09:cc:ed:2a:16:77:45:
                    7b:94:d1:d9:08:69:ea:61:42:4a:b9:85:06:3a:9b:
                    34:44:8d:8f:5e:db:28:18:7c:2d:e0:d7:ce:6c:40:
                    03:92:09:ba:42:73:bd:bf:a5:20:19:77:84:9e:78:
                    d8:d5:21:46:a6:20:c4:6e:2d:1c:5b:c4:d7:2e:12:
                    e6:2e:70:80:51:8e:94:09:bb:79:7c:ac:11:20:02:
                    21:f9:92:4f:4a:cb:de:a2:7f:f0:67:e8:53:20:ea:
                    ea:10:26:94:31:c3:22:72:bd:60:b9:dc:19:bc:b4:
                    e9:b1:3e:53:be:de:0b:65:f7:8d:84:87:6d:51:0b:
                    48:1d:6c:b7:c0:1d:45:31:f4:f7:41:4c:d3:b2:df:
                    d3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B3:76:DD:BF:7E:C9:E9:03:2F:61:AB:52:64:E6:0D:4D:DF:EE:64
            X509v3 Authority Key Identifier:
                keyid:01:77:DC:D7:BE:E1:19:06:29:43:7C:A4:C8:AB:83:E3:AD:15:C7:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f0e48da2-bf3d-4f94-9c13-c08c1190de18/0/0177DCD7BEE1190629437CA4C8AB83E3AD15C7A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXfc177hGQYpQ3ykyKuD460Vx6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f0e48da2-bf3d-4f94-9c13-c08c1190de18/0/AS213216.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213216

    Signature Algorithm: sha256WithRSAEncryption
         23:16:e3:4b:84:8a:9c:a2:80:7f:4b:65:0c:eb:d0:39:55:d8:
         4e:fd:85:33:d1:b5:1f:b0:34:8d:35:13:65:bd:3e:ba:ca:60:
         1c:67:f6:d3:08:93:83:93:cf:e7:dd:1c:d6:54:03:80:ea:89:
         e1:78:7c:00:54:26:39:5b:3e:81:1d:8f:64:06:e3:6e:ca:ef:
         29:b4:e3:f9:ac:9a:69:44:22:4c:b3:cd:e8:0e:b0:65:9f:5d:
         1d:7f:c3:c3:78:6a:32:5f:4f:c5:61:45:9e:c3:72:35:c9:b6:
         24:3d:e9:35:0a:ad:ff:44:e6:8d:05:ae:7f:ef:81:95:96:ca:
         7d:c4:1d:10:c9:07:75:d3:2f:84:79:2b:e7:cf:7b:eb:e7:0a:
         65:0f:d1:28:79:ff:4b:9b:34:17:60:07:7c:08:92:10:0f:38:
         5d:f4:00:7e:8d:df:1f:8e:5f:00:55:a6:00:50:2e:d2:6d:fe:
         23:f6:68:a4:23:b0:d0:82:69:71:42:32:64:7c:64:07:2f:f0:
         88:1e:cc:53:ae:f5:e8:a2:b0:68:88:d9:6e:0f:fe:19:7b:34:
         95:cf:9a:b9:8e:d7:5e:6c:70:ba:e3:51:f8:4c:17:96:07:f1:
         ef:14:68:a0:0a:bd:35:73:25:83:ac:b2:ae:79:56:1b:00:cf:
         26:29:90:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:22:24 2026 by rpki-client