Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/AS204211.asa
File:                     AS204211.asa (raw, json)
Hash identifier:          +gyAf3vkIK9aMjQtBtelOvvifSVkf7jZJi8PwPQNix8=
Subject key identifier:   94:E4:64:04:E9:B9:B3:F0:E7:6E:BE:D5:AB:35:0B:0A:9C:4E:4F:56
Certificate issuer:       /CN=c18020bdc5e6ba4a5474d3aa0da4a962a68d98ab
Certificate serial:       34A99AFF52D9CAEEE8E5B914654B2EE66589F6EC
Authority key identifier: C1:80:20:BD:C5:E6:BA:4A:54:74:D3:AA:0D:A4:A9:62:A6:8D:98:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/AS204211.asa
Signing time:             Wed 04 Feb 2026 15:20:35 +0000
ASPA not before:          Wed 04 Feb 2026 15:15:35 +0000
ASPA not after:           Wed 03 Feb 2027 15:20:35 +0000
Customer ASID:            204211
Providers:                AS: 174
                          AS: 6939
                          AS: 44324
                          AS: 47778
                          AS: 53667
                          AS: 53808
                          AS: 62246
                          AS: 151673
                          AS: 201944
                          AS: 207529
                          AS: 210352
                          AS: 210440
                          AS: 210773
                          AS: 213605
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:a9:9a:ff:52:d9:ca:ee:e8:e5:b9:14:65:4b:2e:e6:65:89:f6:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c18020bdc5e6ba4a5474d3aa0da4a962a68d98ab
        Validity
            Not Before: Feb  4 15:15:35 2026 GMT
            Not After : Feb  3 15:20:35 2027 GMT
        Subject: CN=94E46404E9B9B3F0E76EBED5AB350B0A9C4E4F56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:54:f1:9f:5a:81:71:94:0d:6f:db:2d:d4:06:
                    12:6d:72:1c:8e:f8:05:a0:67:4c:2f:e0:95:58:91:
                    5d:2d:07:93:75:bf:ea:0b:a7:d7:a2:5e:74:84:b6:
                    7a:93:c1:09:74:b0:21:e6:f6:3f:39:33:5e:b5:c5:
                    d2:e6:55:f7:e5:04:fc:2a:d1:88:14:e2:b4:92:79:
                    c4:1f:eb:74:c6:61:da:27:1c:01:54:8d:bb:d5:42:
                    88:5d:65:81:85:04:26:b7:87:10:c8:eb:05:13:91:
                    57:6b:5a:2a:9d:a7:5d:bd:53:60:75:3a:15:6c:02:
                    1d:06:7a:0d:f5:c2:26:4f:6d:35:81:95:40:c8:46:
                    db:64:57:43:0b:13:44:b2:20:23:49:4e:d5:7a:1d:
                    1c:bf:e9:55:49:b7:40:57:75:51:7c:16:ea:e2:7b:
                    35:ba:f8:92:13:74:08:4e:08:f5:60:02:a4:0b:22:
                    1c:4d:eb:28:c3:96:92:2a:74:dd:22:77:48:d0:13:
                    b0:37:77:c6:06:70:34:d1:74:54:11:2c:ad:83:da:
                    ca:25:4b:b2:43:c3:31:4c:73:0e:07:2d:46:b3:3a:
                    e1:fd:a9:2c:a1:4f:31:4f:7e:9b:7a:82:d9:d3:a3:
                    1e:44:d5:a8:a0:50:33:c5:df:d5:f1:c4:7d:53:dd:
                    cf:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E4:64:04:E9:B9:B3:F0:E7:6E:BE:D5:AB:35:0B:0A:9C:4E:4F:56
            X509v3 Authority Key Identifier:
                keyid:C1:80:20:BD:C5:E6:BA:4A:54:74:D3:AA:0D:A4:A9:62:A6:8D:98:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/AS204211.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204211

    Signature Algorithm: sha256WithRSAEncryption
         21:55:b8:f4:fc:ee:7d:52:0e:87:a7:80:63:7b:c4:62:bc:ff:
         fe:48:12:36:5e:7c:50:40:10:fa:59:2f:de:33:4f:9f:08:87:
         0f:fa:ce:f5:c0:8e:15:e0:98:17:c1:1a:28:fa:82:a8:59:73:
         1d:d0:ee:86:e5:df:4d:82:ba:65:f4:11:31:4c:e7:af:e7:0a:
         12:fa:1c:be:aa:dc:43:32:63:bb:65:b2:51:33:67:bd:20:8c:
         a2:9d:2b:48:ce:9d:9b:b3:cd:36:81:e4:ec:69:bb:b8:ae:9a:
         f5:33:f6:7a:7a:46:72:56:fe:db:90:a1:cd:ec:fc:33:86:35:
         c7:a1:b2:f1:a3:d8:30:28:8a:eb:6f:a8:07:2c:c7:16:81:b9:
         ca:4a:06:ae:fc:ca:ef:62:46:ba:43:92:3b:06:a1:3c:ff:03:
         12:08:e2:f7:d7:c1:e1:ce:ac:94:b2:4e:c1:24:e1:50:c6:e6:
         ac:22:cf:50:e2:67:03:6a:89:f5:95:04:9b:be:41:be:36:5b:
         0c:d9:6f:d2:5f:f6:e5:c2:0f:d8:55:81:65:59:7f:cd:7d:ad:
         50:45:79:5c:53:bc:f5:83:51:f4:7b:27:5c:9f:0a:22:46:14:
         f6:c8:a4:54:0f:08:e4:dd:33:8c:5b:82:5c:6f:72:d2:83:25:
         95:9d:54:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:06:23 2026 by rpki-client