Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/DacPm-YXkZdvUQRrf3Qqh3BeD-Y.asa
File:                     DacPm-YXkZdvUQRrf3Qqh3BeD-Y.asa (raw, json)
Hash identifier:          CPSOx+UyYinuFDF/QuUrZzIjQpXtSrKBAj6FAYVvMhs=
Subject key identifier:   0D:A7:0F:9B:E6:17:91:97:6F:51:04:6B:7F:74:2A:87:70:5E:0F:E6
Certificate issuer:       /CN=9e6d1dc6caa41d3beffe8d1da2671a50e7f79a30
Certificate serial:       019C90E70C20F0279AEA20E2B5DEBD658646
Authority key identifier: 9E:6D:1D:C6:CA:A4:1D:3B:EF:FE:8D:1D:A2:67:1A:50:E7:F7:9A:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/DacPm-YXkZdvUQRrf3Qqh3BeD-Y.asa
Signing time:             Tue 24 Feb 2026 18:26:26 +0000
ASPA not before:          Tue 24 Feb 2026 18:26:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            34854
Providers:                AS: 1299
                          AS: 3214
                          AS: 3320
                          AS: 6939
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:90:e7:0c:20:f0:27:9a:ea:20:e2:b5:de:bd:65:86:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e6d1dc6caa41d3beffe8d1da2671a50e7f79a30
        Validity
            Not Before: Feb 24 18:26:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0da70f9be61791976f51046b7f742a87705e0fe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:14:cb:c2:61:a1:e7:c3:55:86:bd:86:79:02:
                    dd:9b:db:8d:3c:bc:0b:28:ed:12:f4:d5:dd:8c:f8:
                    52:50:aa:43:75:1f:e8:11:95:e2:85:05:77:d8:df:
                    36:82:85:22:e2:35:33:3b:bf:70:b4:b1:4d:09:b8:
                    38:2a:f0:e8:9c:de:e6:33:e1:b4:06:45:ec:f6:70:
                    58:23:61:6a:df:5d:26:7d:a9:d4:b2:41:44:6f:ea:
                    2d:17:4f:bf:9d:4e:aa:1d:37:46:9a:e9:9f:0a:46:
                    52:a3:52:77:45:9b:75:a5:6f:6a:1c:c2:3d:a7:db:
                    44:f6:a7:7f:dd:b1:7b:1d:26:75:78:2f:39:6d:68:
                    fd:bb:d4:f2:55:f2:16:6f:ea:84:e5:58:5d:f1:ea:
                    54:67:93:4b:bd:b7:67:19:9d:9e:47:89:96:cc:ba:
                    2a:6f:df:45:bb:9b:bb:ef:5c:d3:13:fb:7c:85:45:
                    7b:dc:99:7a:2f:70:20:a5:3a:e8:19:be:6a:d5:49:
                    66:5a:6a:8e:57:5d:41:86:2c:be:1b:a2:0f:ab:ad:
                    e9:15:8a:3c:1b:74:83:ec:6e:8b:48:08:de:b2:7a:
                    42:c8:83:79:d2:36:a5:bd:e2:0a:47:3f:46:66:7b:
                    0d:65:a7:1e:78:47:63:62:d6:bb:c3:e8:c4:8d:ab:
                    1b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A7:0F:9B:E6:17:91:97:6F:51:04:6B:7F:74:2A:87:70:5E:0F:E6
            X509v3 Authority Key Identifier:
                keyid:9E:6D:1D:C6:CA:A4:1D:3B:EF:FE:8D:1D:A2:67:1A:50:E7:F7:9A:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/DacPm-YXkZdvUQRrf3Qqh3BeD-Y.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34854

    Signature Algorithm: sha256WithRSAEncryption
         71:fb:3d:6e:58:5a:ce:f0:21:af:9c:e1:e9:7d:4f:01:7b:9d:
         58:7e:62:eb:4c:5c:cd:4e:ae:63:f6:55:d1:be:3c:4e:b5:e6:
         97:08:61:bd:6f:ae:5d:42:74:35:59:d3:2f:64:58:a3:20:fd:
         c9:c5:99:b0:83:55:ed:29:b9:ad:84:e2:c6:7f:7a:48:61:63:
         66:c6:bc:87:81:70:92:3d:85:e4:f4:2f:a2:5f:72:ff:c4:fc:
         a0:96:66:21:6b:49:28:53:0e:93:be:fb:f9:6d:30:49:a2:83:
         68:ed:de:af:5c:37:0a:d1:7d:c5:d9:ee:64:e0:59:85:9c:12:
         bb:15:ea:a2:f4:72:09:a9:0b:77:41:4d:a3:73:88:4e:e9:69:
         be:86:33:8e:5f:e2:d4:b6:3a:95:10:2e:4c:d2:b3:a1:d8:06:
         ab:8f:9b:9a:ea:51:5a:e5:f1:55:51:db:a0:11:29:f5:9c:74:
         20:8c:c0:a3:11:09:bd:d4:4b:28:19:a2:f8:48:de:1b:bc:fc:
         23:41:50:90:c3:b0:63:48:d5:b7:96:7e:bf:0c:69:30:58:99:
         bf:b4:64:b3:97:ed:27:ce:2e:d3:0d:ad:c3:e3:0b:7b:23:a6:
         7d:f2:93:bf:aa:12:66:38:4a:0b:be:09:ce:64:ac:3e:51:2b:
         3c:44:7a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:59 2026 by rpki-client