Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/AS204211.asa
File:                     AS204211.asa (raw, json)
Hash identifier:          zDMfjVq63BZ3sFkTQH4iOgUAjk821RfCMKCVR/gIYCg=
Subject key identifier:   C0:00:7D:66:B5:6F:B9:F2:38:E0:F5:2C:D0:7A:5E:94:CA:12:80:03
Certificate issuer:       /CN=c18020bdc5e6ba4a5474d3aa0da4a962a68d98ab
Certificate serial:       2B32AE728652FA8C40A62AF3B7C38FB278058845
Authority key identifier: C1:80:20:BD:C5:E6:BA:4A:54:74:D3:AA:0D:A4:A9:62:A6:8D:98:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/AS204211.asa
Signing time:             Thu 09 Apr 2026 10:15:17 +0000
ASPA not before:          Thu 09 Apr 2026 10:10:17 +0000
ASPA not after:           Thu 08 Apr 2027 10:15:17 +0000
Customer ASID:            204211
Providers:                AS: 174
                          AS: 6939
                          AS: 44324
                          AS: 47778
                          AS: 51087
                          AS: 53667
                          AS: 53808
                          AS: 62246
                          AS: 151673
                          AS: 201944
                          AS: 206069
                          AS: 207529
                          AS: 210176
                          AS: 210352
                          AS: 210440
                          AS: 210773
                          AS: 213605
                          AS: 215172
                          AS: 401804
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:22:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:32:ae:72:86:52:fa:8c:40:a6:2a:f3:b7:c3:8f:b2:78:05:88:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c18020bdc5e6ba4a5474d3aa0da4a962a68d98ab
        Validity
            Not Before: Apr  9 10:10:17 2026 GMT
            Not After : Apr  8 10:15:17 2027 GMT
        Subject: CN=C0007D66B56FB9F238E0F52CD07A5E94CA128003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f7:d9:3b:60:6e:01:65:0b:60:38:00:27:09:
                    db:90:61:0f:86:7d:d1:e5:ff:2f:ce:2a:90:f2:d0:
                    cb:24:79:c5:31:6a:75:0f:7e:32:2c:b2:43:35:be:
                    16:cc:30:ec:2b:41:c5:d1:af:89:8b:4e:d5:91:bd:
                    d9:60:44:37:b1:ad:9b:2e:a1:38:45:e8:85:fb:cd:
                    53:04:5c:25:a6:5a:9a:36:04:b9:35:c4:96:9d:14:
                    ef:f6:c2:2e:2d:3c:c3:71:aa:e1:8e:58:e7:b2:60:
                    3e:e6:f5:3c:b0:8f:4c:46:6e:da:67:0c:f4:1e:54:
                    3a:36:cf:07:55:5f:d9:97:62:58:a3:5e:ab:76:11:
                    cb:1c:1d:62:de:a1:b8:5b:98:ec:51:b0:c0:5e:fb:
                    e4:61:39:b5:d7:fa:d3:ea:83:d9:3b:4a:ae:b2:02:
                    07:fa:f5:41:26:13:fd:8a:09:1d:dc:6b:86:19:e4:
                    3d:bf:fb:10:56:64:9b:2b:d2:c9:70:1d:80:22:30:
                    f1:32:62:94:92:e8:a5:2a:49:e8:08:5f:de:f2:95:
                    4b:3d:0d:d1:51:ed:39:a1:c4:1d:01:96:29:07:6e:
                    f2:60:8d:c9:c3:d5:34:18:ce:0c:e9:4a:70:79:33:
                    15:57:6c:66:58:24:3d:2e:97:6d:48:fb:78:f3:8f:
                    35:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:00:7D:66:B5:6F:B9:F2:38:E0:F5:2C:D0:7A:5E:94:CA:12:80:03
            X509v3 Authority Key Identifier:
                keyid:C1:80:20:BD:C5:E6:BA:4A:54:74:D3:AA:0D:A4:A9:62:A6:8D:98:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/AS204211.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204211

    Signature Algorithm: sha256WithRSAEncryption
         82:c8:63:93:11:4b:29:af:84:17:4a:82:30:30:3c:d0:1e:00:
         66:7f:c1:b7:85:3b:4e:77:84:31:49:ac:13:0b:3b:f5:b8:56:
         92:67:64:b6:bc:9e:48:f9:5f:c9:e3:aa:a8:71:20:72:62:39:
         04:d3:ee:cf:fd:21:31:7b:5a:31:24:ce:69:5a:93:2f:fd:41:
         81:a4:b3:e9:93:39:4d:23:b7:59:dc:06:0f:b5:5f:7c:17:d4:
         35:7b:87:0c:e5:62:14:21:31:97:c0:d9:ac:32:21:98:c6:8f:
         08:44:ae:4b:d0:a0:c4:fb:eb:dc:10:a8:f6:e8:6d:a4:73:c2:
         4e:58:f0:96:9f:22:6f:3c:62:bc:fa:a3:29:91:80:53:d9:a7:
         e9:5d:af:22:e1:88:a1:6c:44:4b:e1:0c:83:7c:b6:2f:d2:e0:
         5a:63:10:55:fc:3e:0a:e0:54:75:90:ad:8d:ac:0e:49:1d:0e:
         34:72:98:0e:77:1f:74:51:3c:82:98:b3:46:0a:7d:f1:5b:90:
         ee:60:99:e1:3f:b4:d0:f8:3a:e5:e7:b5:6e:30:a8:4f:9d:8f:
         c4:e9:4a:b9:b5:4d:95:d1:c7:27:42:1d:54:d6:0a:32:dc:ee:
         f0:e8:51:67:35:66:88:4e:df:7b:5c:88:37:22:cf:4a:4b:2c:
         fb:a6:ce:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:38:27 2026 by rpki-client