Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/8FU176wvyGzu3qZRWgZp007b1qg.asa
File:                     8FU176wvyGzu3qZRWgZp007b1qg.asa (raw, json)
Hash identifier:          x8k6LNUsfOGRKHX9gJ4g2GjQMcqtY9wp9At0D9QB+yM=
Subject key identifier:   F0:55:35:EF:AC:2F:C8:6C:EE:DE:A6:51:5A:06:69:D3:4E:DB:D6:A8
Certificate issuer:       /CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639
Certificate serial:       01A0A05BD333E529C954B029E19F05CBCDE0
Authority key identifier: B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/8FU176wvyGzu3qZRWgZp007b1qg.asa
Signing time:             Mon 14 Sep 2026 14:39:27 +0000
ASPA not before:          Mon 14 Sep 2026 14:39:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214748
Providers:                AS: 8449
                          AS: 34718
                          AS: 197686
                          AS: 200590
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 08:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:a0:5b:d3:33:e5:29:c9:54:b0:29:e1:9f:05:cb:cd:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639
        Validity
            Not Before: Sep 14 14:39:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f05535efac2fc86ceedea6515a0669d34edbd6a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a1:67:38:97:f3:dd:16:8b:83:5d:8b:5a:1f:
                    b1:d2:d6:80:48:05:8b:a1:b4:d2:d7:ea:bb:e6:39:
                    76:55:60:34:72:03:b9:42:09:97:4e:60:fb:be:d8:
                    0b:63:83:53:3e:46:dc:3f:9a:d6:74:00:61:06:bf:
                    b7:4b:67:1c:4c:0d:90:7b:75:65:f8:43:68:26:a6:
                    81:90:2c:46:43:00:5b:ba:35:12:c5:97:8a:de:f9:
                    78:ca:6b:28:5c:6d:d5:77:11:2e:9c:27:44:f3:a2:
                    cf:77:bf:5b:9b:be:ec:b3:38:41:7a:8e:68:b4:53:
                    a2:a3:9d:f4:18:f6:14:62:3b:48:9a:52:ce:78:af:
                    ad:48:88:4e:32:13:93:d7:98:d9:f0:99:d6:7d:a6:
                    fb:4a:32:6a:0b:fe:14:dc:bc:c1:00:0f:61:22:c8:
                    44:e2:41:5a:80:4a:97:46:ef:fb:fe:f9:bf:f4:be:
                    5c:a2:c8:df:77:dd:63:4c:c9:ce:f5:d1:d0:11:92:
                    9f:77:e4:22:0e:2d:ba:d3:c8:18:c0:c0:bd:20:93:
                    05:4d:7c:53:cb:b3:c1:95:6a:93:7e:ed:56:f9:19:
                    d4:f1:b7:7f:cf:21:c9:ad:ef:a0:c7:7b:00:07:29:
                    48:e1:18:c0:b3:37:2f:61:45:9a:75:e9:7c:5b:25:
                    c7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:55:35:EF:AC:2F:C8:6C:EE:DE:A6:51:5A:06:69:D3:4E:DB:D6:A8
            X509v3 Authority Key Identifier:
                keyid:B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/8FU176wvyGzu3qZRWgZp007b1qg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214748

    Signature Algorithm: sha256WithRSAEncryption
         3b:c9:96:57:96:e8:68:e6:1a:45:71:b9:29:5f:39:ef:7a:42:
         eb:d3:21:98:88:6b:6a:db:ea:f6:33:b5:85:d4:9d:66:1c:31:
         90:ef:d9:35:15:dd:5f:1b:39:75:e7:04:71:2b:a5:70:4f:e1:
         1a:0c:b5:01:0c:22:ae:d1:cf:85:a9:44:9b:41:b6:f7:a1:68:
         88:ea:5e:c1:e4:ae:63:21:c9:1a:69:20:b9:a8:56:35:32:8d:
         5f:15:95:c2:fa:97:23:dc:4d:72:06:08:b2:92:a0:c5:25:2b:
         76:d9:ed:be:b7:c2:fe:fd:9c:94:c7:c8:02:a9:70:4f:93:77:
         74:7e:a2:cf:35:df:af:c0:1d:d0:35:79:08:89:b7:0e:f1:26:
         f1:9e:13:4a:68:8f:eb:c8:ae:38:95:12:bc:af:12:54:8b:ec:
         ee:26:90:10:5c:15:9e:b8:e5:a3:68:c6:33:02:d8:d6:ee:ea:
         23:90:6f:34:df:f0:49:83:0b:ab:67:31:75:0c:0f:c8:97:7a:
         f2:2d:b0:c8:a7:5d:b9:1f:b0:a9:fd:c9:cc:ae:e9:4d:a8:2b:
         7b:88:30:fb:6e:83:58:22:08:39:b8:97:19:bc:d1:cf:d2:1e:
         37:52:23:37:9c:00:9a:fb:9f:a0:3b:af:77:a0:a5:fa:52:da:
         e5:29:4b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:49:41 2026 by rpki-client