Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/DhRuJkYL3BPnAOF_5KLHFOS7fEU.asa
File:                     DhRuJkYL3BPnAOF_5KLHFOS7fEU.asa (raw, json)
Hash identifier:          sQIfeWLpZ4jVR+U6OfuhrXRMEOMO8X/NhFz0LDGhKGs=
Subject key identifier:   0E:14:6E:26:46:0B:DC:13:E7:00:E1:7F:E4:A2:C7:14:E4:BB:7C:45
Certificate issuer:       /CN=d0a1db466cf808206293d07e65f2121feb49a33e
Certificate serial:       019C9FC5CF15707E1372519D5AFF771355BE
Authority key identifier: D0:A1:DB:46:6C:F8:08:20:62:93:D0:7E:65:F2:12:1F:EB:49:A3:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/DhRuJkYL3BPnAOF_5KLHFOS7fEU.asa
Signing time:             Fri 27 Feb 2026 15:44:26 +0000
ASPA not before:          Fri 27 Feb 2026 15:44:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            212783
Providers:                AS: 34019
                          AS: 34872
                          AS: 35661
                          AS: 50628
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 03:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:9f:c5:cf:15:70:7e:13:72:51:9d:5a:ff:77:13:55:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0a1db466cf808206293d07e65f2121feb49a33e
        Validity
            Not Before: Feb 27 15:44:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0e146e26460bdc13e700e17fe4a2c714e4bb7c45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ec:c3:aa:27:f1:e0:ba:59:a2:d5:40:63:be:
                    29:33:35:e8:98:c4:ec:09:42:fa:ec:88:83:ae:35:
                    5e:c2:90:1f:7f:08:a0:2b:9b:75:5d:c8:18:64:87:
                    8f:2c:dc:1b:f2:09:e2:56:b6:96:56:a8:0b:a7:ea:
                    e2:ba:fd:2e:cf:ae:df:87:9f:7a:d3:49:47:5c:09:
                    a9:7a:45:64:7d:fa:62:5d:2a:e9:07:a3:2f:2e:9c:
                    d3:4a:58:b7:e2:84:c6:fc:db:16:40:35:78:c6:55:
                    55:ca:d7:68:03:cf:e7:7d:9c:cc:7f:75:ba:e9:8e:
                    02:28:e4:2e:ae:10:41:30:88:2d:70:ba:cd:b5:fe:
                    15:da:26:5e:e0:dd:af:14:b3:0a:41:45:7d:59:0c:
                    91:2e:9d:64:fd:3f:ab:70:9e:4e:90:65:5f:c6:a5:
                    3d:61:5c:32:38:c2:82:c9:33:a8:33:9d:92:dd:4c:
                    47:b3:0b:1d:45:41:e7:95:01:a3:80:7b:73:90:19:
                    6b:8a:df:82:be:98:e5:82:0b:23:f5:89:48:5b:cc:
                    76:18:f2:5b:ae:09:7f:6a:8f:bc:7e:5e:01:dc:b3:
                    23:64:82:ab:8f:4b:c0:f1:17:ab:88:2c:ec:ef:13:
                    34:8e:0c:08:1b:da:bd:cb:0a:16:10:bc:2e:9a:ec:
                    83:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:14:6E:26:46:0B:DC:13:E7:00:E1:7F:E4:A2:C7:14:E4:BB:7C:45
            X509v3 Authority Key Identifier:
                keyid:D0:A1:DB:46:6C:F8:08:20:62:93:D0:7E:65:F2:12:1F:EB:49:A3:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/DhRuJkYL3BPnAOF_5KLHFOS7fEU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212783

    Signature Algorithm: sha256WithRSAEncryption
         8c:de:39:d7:c5:c1:43:13:84:d4:45:e1:6c:f4:93:47:cc:4a:
         79:58:f5:d7:d0:2a:5f:06:c0:57:81:04:1d:bf:1e:31:cf:57:
         69:4c:dc:07:9c:b3:ca:e2:38:84:ff:c3:e3:50:9a:07:12:4d:
         83:d0:a6:b1:64:47:bf:dd:49:bd:06:2b:f1:b1:3c:c8:d5:03:
         50:cd:31:ba:af:76:d3:80:0a:ae:c2:98:9e:1a:01:5b:91:9a:
         46:45:27:56:97:3e:6d:62:91:61:ff:21:60:0c:3e:6d:ab:29:
         6f:c8:89:7e:c3:8b:db:96:de:9c:41:0f:df:8e:9f:81:e6:25:
         96:54:b5:6b:5c:3e:23:bb:bb:29:4c:d4:39:f5:69:96:d4:20:
         20:19:45:c4:e0:42:04:8b:02:6f:1a:f4:d8:d8:7f:4b:a3:b5:
         93:b4:40:76:3e:eb:86:0c:c8:0e:ec:c5:98:61:2d:54:a6:49:
         a0:d7:73:1a:71:4a:c5:91:8f:5a:93:1c:a2:20:ad:5c:02:a5:
         92:77:90:ef:bd:79:80:3c:68:dd:f3:c1:17:8f:ca:de:03:c2:
         3d:45:d4:f6:c1:00:68:3c:e6:2e:15:bc:d8:d3:38:f4:64:0c:
         a3:23:96:e9:a5:1f:2a:09:42:81:7c:2f:83:0e:80:92:45:80:
         a2:73:24:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:35 2026 by rpki-client