Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/Wm2YbkHQUqmv6dPv413SQviiSp4.asa
File:                     Wm2YbkHQUqmv6dPv413SQviiSp4.asa (raw, json)
Hash identifier:          qLrEjb9bWVLw7gePtUWvNul8m+GY4UnYRXh6gwmIR7c=
Subject key identifier:   5A:6D:98:6E:41:D0:52:A9:AF:E9:D3:EF:E3:5D:D2:42:F8:A2:4A:9E
Certificate issuer:       /CN=bbca3f25d54620b50ef8520657634d3b096bac57
Certificate serial:       01A07C4918F5B13F42684FEC9E00383EE195
Authority key identifier: BB:CA:3F:25:D5:46:20:B5:0E:F8:52:06:57:63:4D:3B:09:6B:AC:57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/Wm2YbkHQUqmv6dPv413SQviiSp4.asa
Signing time:             Mon 07 Sep 2026 14:32:40 +0000
ASPA not before:          Mon 07 Sep 2026 14:32:40 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            58212
Providers:                AS: 2914
                          AS: 3257
                          AS: 3320
                          AS: 6453
                          AS: 16276
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:7c:49:18:f5:b1:3f:42:68:4f:ec:9e:00:38:3e:e1:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbca3f25d54620b50ef8520657634d3b096bac57
        Validity
            Not Before: Sep  7 14:32:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5a6d986e41d052a9afe9d3efe35dd242f8a24a9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1d:52:59:ff:5f:14:7c:35:1e:a3:cd:1d:ac:
                    60:70:ba:5f:89:1e:ce:b1:1a:8b:8c:40:6d:84:e7:
                    30:11:83:1f:80:f6:65:cb:b6:b5:c2:a9:01:04:fb:
                    e4:04:46:8e:ee:48:82:c5:a7:81:a6:f0:76:54:73:
                    0e:03:a3:6e:69:8a:1e:f1:b3:1a:39:78:94:06:73:
                    30:bf:62:7b:66:4c:1b:27:61:a3:ff:92:88:a2:14:
                    28:75:a0:1b:a8:1a:21:48:70:f9:a1:ab:75:cb:ec:
                    0a:3f:3f:11:04:9e:96:bc:3b:29:6f:90:57:84:50:
                    4c:21:05:a8:e6:1d:cb:19:30:49:99:2d:71:2c:8c:
                    d5:21:cf:0c:67:14:e1:42:87:55:cb:e5:28:79:29:
                    9e:43:f0:1f:d2:c8:24:b9:af:c3:54:a2:41:77:50:
                    73:ac:92:22:7b:70:15:32:28:47:02:f2:19:fb:9b:
                    b6:14:50:31:18:cd:bd:77:24:52:f4:60:51:43:58:
                    4a:fc:d5:aa:a7:08:aa:51:f5:1d:ed:8c:d1:a6:55:
                    00:2e:07:f3:49:99:57:ff:28:9a:60:7d:24:60:68:
                    62:f6:05:6f:69:62:6d:67:c2:7c:58:93:ec:74:ff:
                    ec:db:18:8a:df:90:6e:e2:f9:a5:03:8d:63:0c:8f:
                    b1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:6D:98:6E:41:D0:52:A9:AF:E9:D3:EF:E3:5D:D2:42:F8:A2:4A:9E
            X509v3 Authority Key Identifier:
                keyid:BB:CA:3F:25:D5:46:20:B5:0E:F8:52:06:57:63:4D:3B:09:6B:AC:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/Wm2YbkHQUqmv6dPv413SQviiSp4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58212

    Signature Algorithm: sha256WithRSAEncryption
         13:da:26:6a:e5:c3:db:94:83:0e:89:14:3a:44:70:5d:bb:10:
         99:2b:f2:f3:54:f9:8b:ac:a2:2c:a3:46:ff:97:aa:7e:e1:25:
         2f:4b:9f:92:cf:dd:01:96:77:36:c8:ea:1b:a1:76:a8:b3:02:
         bb:91:1d:e9:3e:51:f1:4d:8a:63:0c:6f:36:ed:d2:74:9a:dd:
         14:9c:76:cc:7c:12:fc:7f:de:f0:4c:eb:4c:df:f7:58:5b:e3:
         4d:2b:17:eb:26:92:10:36:80:ac:09:47:ee:23:4f:bb:35:df:
         be:5f:06:86:19:d4:a3:67:7a:c3:a4:f1:c3:bc:df:b8:2c:a8:
         55:6f:fa:ce:0d:8b:3f:a1:57:b9:34:19:e1:e0:58:91:68:b5:
         c2:6a:0d:29:30:60:15:94:e4:37:5f:ce:ba:f3:52:4e:1a:b2:
         b6:44:58:5c:fc:90:75:06:32:95:af:63:1a:0a:c9:12:b9:08:
         3d:7e:c0:85:48:c5:52:de:6d:b0:58:0f:24:95:09:90:cb:8b:
         0e:1c:05:0d:84:e0:09:90:b1:87:a5:b9:b4:64:bb:e6:98:8e:
         6a:7d:b2:ec:a6:40:a0:89:2a:55:9d:c2:c5:85:b0:8f:89:d6:
         e7:2c:8d:09:75:86:61:ec:0a:af:2c:b3:6e:fd:99:e4:5c:65:
         82:4f:ae:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:17:55 2026 by rpki-client