Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/zN3M-NW-eOPef_Z1aiSkpXCmjvQ.asa
File:                     zN3M-NW-eOPef_Z1aiSkpXCmjvQ.asa (raw, json)
Hash identifier:          Ol9ak7DFM6PGOdbmrgZeklYVA6UZroOM8l16Y2RGxxA=
Subject key identifier:   CC:DD:CC:F8:D5:BE:78:E3:DE:7F:F6:75:6A:24:A4:A5:70:A6:8E:F4
Certificate issuer:       /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial:       019C5842B64BE9AADF373AC24BC660A09108
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/zN3M-NW-eOPef_Z1aiSkpXCmjvQ.asa
Signing time:             Fri 13 Feb 2026 18:28:12 +0000
ASPA not before:          Fri 13 Feb 2026 18:28:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            211507
Providers:                AS: 51395
                          AS: 203380
                          AS: 213468
                          AS: 216078
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:58:42:b6:4b:e9:aa:df:37:3a:c2:4b:c6:60:a0:91:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
        Validity
            Not Before: Feb 13 18:28:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ccddccf8d5be78e3de7ff6756a24a4a570a68ef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:50:bb:92:9e:4a:69:87:e2:fd:33:5f:c0:4f:
                    c0:0a:ac:cf:6a:fe:bc:e6:85:63:38:e1:1a:ad:8e:
                    62:37:80:01:93:21:7d:61:45:b2:75:94:a0:f7:eb:
                    8e:d3:f3:3b:82:fa:a2:25:6a:e2:b6:f9:fc:ba:24:
                    8e:a3:10:46:33:d0:cc:a3:51:d2:f0:ca:db:de:18:
                    cc:34:c8:48:1b:3d:46:84:d4:9e:f6:f8:84:36:d2:
                    0f:93:05:6f:4c:fc:0d:b5:63:3e:03:ce:2d:f9:79:
                    c7:15:c9:c4:58:e7:ce:46:c3:43:7b:3b:07:06:6c:
                    27:e6:42:ef:54:0a:0e:92:fa:64:cf:f1:8a:a3:26:
                    ce:6d:0a:f3:7a:bc:16:9f:0f:4e:49:81:37:ed:6d:
                    00:bb:2d:d4:47:56:93:4c:07:63:62:98:74:7c:af:
                    73:6e:81:fc:67:67:ea:6b:a1:ed:30:af:20:a2:8e:
                    fe:0f:8c:61:3c:02:41:a9:ca:dd:23:04:62:28:85:
                    6e:a3:bf:c4:b0:cb:53:05:f7:fe:b3:b1:cb:89:64:
                    28:ae:25:a8:94:05:47:ab:54:60:c4:08:c8:e6:b1:
                    ae:b3:0c:f5:ec:dd:65:74:bf:97:12:b8:c4:75:9c:
                    da:5a:85:40:2e:a1:73:59:c4:48:6b:cf:7e:43:f3:
                    19:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:DD:CC:F8:D5:BE:78:E3:DE:7F:F6:75:6A:24:A4:A5:70:A6:8E:F4
            X509v3 Authority Key Identifier:
                keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/zN3M-NW-eOPef_Z1aiSkpXCmjvQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211507

    Signature Algorithm: sha256WithRSAEncryption
         48:4a:a2:ca:5f:c6:4a:5e:63:7a:b7:18:12:c1:5a:70:35:c5:
         af:4e:cc:f5:9b:63:ec:2b:41:a0:33:93:18:55:0a:60:c7:82:
         1e:7d:ea:f0:e5:4a:3d:30:c0:e7:40:13:10:9e:4d:6c:8d:cd:
         a2:81:31:0a:fe:e6:0d:78:e9:47:d6:29:c8:88:c8:e1:ca:55:
         eb:f6:2e:5e:a9:79:e3:d3:80:66:e1:9a:af:37:5b:3c:1e:20:
         a6:8f:65:82:13:1f:1c:86:aa:6a:4a:9b:55:9b:22:82:86:75:
         4a:7d:0f:39:e2:f5:d3:df:0f:2c:80:23:ea:0d:ec:19:33:6d:
         78:b2:de:bd:e2:9e:33:10:ce:ad:90:b5:16:6a:81:e5:f5:c3:
         c4:a9:50:e6:86:1c:01:8f:f4:48:dc:a4:cb:6f:83:88:20:98:
         62:91:76:d6:f4:dd:51:d7:3a:fd:7f:5a:97:4e:4f:19:24:aa:
         7b:dc:f4:4b:e1:c9:97:55:c9:e3:97:dc:d4:70:3f:2c:7c:4f:
         54:b5:62:e4:3e:3e:47:94:9a:cc:f1:b4:79:f5:91:9a:a0:59:
         d1:35:32:6f:80:c5:b6:8c:7f:d9:2d:bf:57:c6:97:8b:4c:df:
         db:8d:22:c4:06:5a:f3:fc:e4:40:5c:66:73:93:da:89:e3:54:
         61:ab:69:6a
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZxYQrZL6arfNzrCS8ZgoJEIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YjNkZTVmOWFkYjUwZmU0MWY2ZGM3OGZmZDBhMmM5MDg2
ZDI1MTIwHhcNMjYwMjEzMTgyODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjY2RkY2NmOGQ1YmU3OGUzZGU3ZmY2NzU2YTI0YTRhNTcwYTY4ZWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1C7kp5KaYfi/TNfwE/ACqzPav68
5oVjOOEarY5iN4ABkyF9YUWydZSg9+uO0/M7gvqiJWritvn8uiSOoxBGM9DMo1HS
8Mrb3hjMNMhIGz1GhNSe9viENtIPkwVvTPwNtWM+A84t+XnHFcnEWOfORsNDezsH
Bmwn5kLvVAoOkvpkz/GKoybObQrzerwWnw9OSYE37W0Auy3UR1aTTAdjYph0fK9z
boH8Z2fqa6HtMK8goo7+D4xhPAJBqcrdIwRiKIVuo7/EsMtTBff+s7HLiWQoriWo
lAVHq1RgxAjI5rGuswz17N1ldL+XErjEdZzaWoVALqFzWcRIa89+Q/MZMwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFMzdzPjVvnjj3n/2dWokpKVwpo70MB8GA1UdIwQY
MBaAFFiz3l+a21D+QfbceP/QoskIbSUSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUt
NTMyMWQ2OWQ5NzlkLzEvek4zTS1OVy1lT1BlZl9aMWFpU2twWENtanZRLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUtNTMyMWQ2OWQ5Nzlk
LzEvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM6MzANBgkqhkiG
9w0BAQsFAAOCAQEASEqiyl/GSl5jercYEsFacDXFr07M9Ztj7CtBoDOTGFUKYMeC
Hn3q8OVKPTDA50ATEJ5NbI3NooExCv7mDXjpR9YpyIjI4cpV6/YuXql549OAZuGa
rzdbPB4gpo9lghMfHIaqakqbVZsigoZ1Sn0POeL1098PLIAj6g3sGTNteLLeveKe
MxDOrZC1FmqB5fXDxKlQ5oYcAY/0SNyky2+DiCCYYpF21vTdUdc6/X9al05PGSSq
e9z0S+HJl1XJ45fc1HA/LHxPVLVi5D4+R5SazPG0efWRmqBZ0TUyb4DFtox/2S2/
V8aXi0zf240ixAZa8/zkQFxmc5PaieNUYatpag==
-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:17 2026 by rpki-client