Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/0490e1-dadb-4889-9fff-0f8c0ba15ca1/1/L8ht9E8DcXzWCPeSSyyZ36n8uB0.asa
File:                     L8ht9E8DcXzWCPeSSyyZ36n8uB0.asa (raw, json)
Hash identifier:          aLGxu4UYr6iu82UJ+37AS1m8rImlWGsXHrpCEYFbFSk=
Subject key identifier:   2F:C8:6D:F4:4F:03:71:7C:D6:08:F7:92:4B:2C:99:DF:A9:FC:B8:1D
Certificate issuer:       /CN=3a2d39c98b4056b36cbbf6885e8fdd6e570fcc81
Certificate serial:       01A019E35174162AF7D1E045B06B95DECAAA
Authority key identifier: 3A:2D:39:C9:8B:40:56:B3:6C:BB:F6:88:5E:8F:DD:6E:57:0F:CC:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Oi05yYtAVrNsu_aIXo_dblcPzIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/0490e1-dadb-4889-9fff-0f8c0ba15ca1/1/L8ht9E8DcXzWCPeSSyyZ36n8uB0.asa
Signing time:             Wed 19 Aug 2026 11:58:42 +0000
ASPA not before:          Wed 19 Aug 2026 11:58:42 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            212066
Providers:                AS: 6663
                          AS: 208398
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/0490e1-dadb-4889-9fff-0f8c0ba15ca1/1/Oi05yYtAVrNsu_aIXo_dblcPzIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/0490e1-dadb-4889-9fff-0f8c0ba15ca1/1/Oi05yYtAVrNsu_aIXo_dblcPzIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Oi05yYtAVrNsu_aIXo_dblcPzIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:19:e3:51:74:16:2a:f7:d1:e0:45:b0:6b:95:de:ca:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a2d39c98b4056b36cbbf6885e8fdd6e570fcc81
        Validity
            Not Before: Aug 19 11:58:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2fc86df44f03717cd608f7924b2c99dfa9fcb81d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:74:cb:f3:e7:ac:67:93:0a:65:35:0a:0e:eb:
                    7b:89:04:66:9e:1f:3b:86:10:9f:de:e1:54:2b:88:
                    d1:9e:4f:ea:4a:06:1f:c9:e4:bc:ae:39:c0:94:63:
                    fb:91:d2:f1:07:a3:2e:55:4b:6f:37:01:31:59:97:
                    5e:5c:85:59:45:7a:4c:d5:c7:85:df:ec:ef:d6:d5:
                    b5:b4:b8:e7:78:35:2a:0c:30:80:7f:3d:1f:35:ea:
                    55:3e:a6:6d:33:d5:71:a4:53:c3:31:be:ca:5c:0b:
                    99:f2:e3:69:de:a0:bf:42:18:a1:54:cb:15:0d:2e:
                    ce:f1:77:4c:d4:56:74:d8:14:b8:64:d1:d7:db:a5:
                    8a:b3:db:96:78:78:e9:fa:30:e4:a8:a7:36:d8:31:
                    1d:c1:d0:02:26:c4:32:eb:97:90:e9:a9:93:9a:a3:
                    6e:d9:86:8a:3d:ec:64:62:d6:a7:8a:13:47:3d:6b:
                    b9:5c:c5:10:49:0a:82:4e:a3:05:8f:7d:85:ea:b6:
                    53:93:39:e9:92:b7:dd:e6:b2:41:be:8f:4f:83:33:
                    2a:0f:2a:e9:cc:0c:36:dd:ab:27:fa:d3:ff:24:9d:
                    90:09:78:40:57:dc:c0:0f:e1:fd:53:24:71:9a:90:
                    15:ee:74:57:87:84:c8:ee:54:ca:cb:86:5a:21:71:
                    09:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C8:6D:F4:4F:03:71:7C:D6:08:F7:92:4B:2C:99:DF:A9:FC:B8:1D
            X509v3 Authority Key Identifier:
                keyid:3A:2D:39:C9:8B:40:56:B3:6C:BB:F6:88:5E:8F:DD:6E:57:0F:CC:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oi05yYtAVrNsu_aIXo_dblcPzIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/0490e1-dadb-4889-9fff-0f8c0ba15ca1/1/L8ht9E8DcXzWCPeSSyyZ36n8uB0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/0490e1-dadb-4889-9fff-0f8c0ba15ca1/1/Oi05yYtAVrNsu_aIXo_dblcPzIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212066

    Signature Algorithm: sha256WithRSAEncryption
         77:2e:71:fe:06:56:be:4a:b7:d5:8c:a4:ab:22:58:2c:79:76:
         79:dd:c8:bd:4a:55:44:13:0d:39:ed:76:4d:5b:66:8d:cc:84:
         06:94:e2:a3:1e:e8:56:8d:34:02:0d:eb:e5:eb:2c:43:03:60:
         e2:17:75:59:0e:92:07:a3:07:ef:8c:0a:1c:90:98:38:53:ca:
         50:a3:6a:a3:cf:24:b4:ff:78:84:7b:b2:70:4e:36:13:96:69:
         53:f6:36:40:6a:13:01:27:50:a9:14:67:40:aa:a7:f8:bb:e8:
         07:7c:6d:c0:5c:5d:3c:94:2b:c4:c6:c6:3d:ce:ac:d5:9d:b9:
         09:4d:d8:ee:9b:72:b5:c0:36:15:65:b7:f7:c3:51:82:db:a5:
         e9:dd:f1:00:1c:af:77:f4:83:2d:6e:52:a8:e7:69:f2:a9:e6:
         e2:14:f0:da:3e:1c:a5:0f:bc:0e:10:b4:2e:06:7e:92:65:2b:
         98:3f:ef:bf:10:c8:2a:aa:d9:05:81:ad:29:5b:e0:da:81:aa:
         54:dd:43:45:c5:44:7b:c2:df:27:15:24:05:be:14:70:a2:98:
         ad:6b:17:0c:43:dc:57:1d:54:d2:0c:db:9c:30:06:88:87:81:
         5e:cc:80:90:06:cd:72:57:7e:c7:c2:5d:42:af:df:9f:00:92:
         c1:c5:5f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:53:13 2026 by rpki-client