Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/060791-8c65-4f99-b08b-b2ae163bb30a/1/DGaX8VzqMOO9YjuJBud1E9JS0yI.asa
File:                     DGaX8VzqMOO9YjuJBud1E9JS0yI.asa (raw, json)
Hash identifier:          9uriduubYgUt2AMHTcFPln9N/Vkk50cWUi1XIU74peg=
Subject key identifier:   0C:66:97:F1:5C:EA:30:E3:BD:62:3B:89:06:E7:75:13:D2:52:D3:22
Certificate issuer:       /CN=6b558fe688a89485e296df1d3188077b5a5e5525
Certificate serial:       01A08BF8FAD42A5FFF35B26CCCE727ABC7AC
Authority key identifier: 6B:55:8F:E6:88:A8:94:85:E2:96:DF:1D:31:88:07:7B:5A:5E:55:25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a1WP5oiolIXilt8dMYgHe1peVSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/060791-8c65-4f99-b08b-b2ae163bb30a/1/DGaX8VzqMOO9YjuJBud1E9JS0yI.asa
Signing time:             Thu 10 Sep 2026 15:39:05 +0000
ASPA not before:          Thu 10 Sep 2026 15:39:05 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            212332
Providers:                AS: 6939
                          AS: 11967
                          AS: 31898
                          AS: 34872
                          AS: 209533
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/060791-8c65-4f99-b08b-b2ae163bb30a/1/a1WP5oiolIXilt8dMYgHe1peVSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/060791-8c65-4f99-b08b-b2ae163bb30a/1/a1WP5oiolIXilt8dMYgHe1peVSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a1WP5oiolIXilt8dMYgHe1peVSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:f8:fa:d4:2a:5f:ff:35:b2:6c:cc:e7:27:ab:c7:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b558fe688a89485e296df1d3188077b5a5e5525
        Validity
            Not Before: Sep 10 15:39:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0c6697f15cea30e3bd623b8906e77513d252d322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4c:29:5d:d8:31:16:12:94:74:73:d0:1e:a8:
                    2c:36:12:54:6d:2e:75:0e:76:40:6b:59:8e:62:9f:
                    0a:8a:a6:2a:fb:d3:a2:a1:48:86:de:55:a3:59:7a:
                    6e:bd:af:83:75:d9:13:ab:50:b3:90:fa:63:25:92:
                    5b:45:c5:ad:fa:6c:26:d4:ea:17:f8:cb:3e:17:38:
                    e8:44:8e:de:a7:e8:86:90:fe:b7:9c:7a:39:b2:38:
                    1d:42:a0:93:b2:5b:89:19:82:ef:5c:6b:70:38:c3:
                    1e:6a:34:22:d9:d2:b2:f6:6b:ef:87:21:37:22:6b:
                    d3:9f:d5:95:28:13:1e:aa:ae:e0:a6:93:2f:31:e7:
                    d1:2f:6f:33:cc:ee:bf:d2:be:81:ea:13:ed:36:ef:
                    3f:8b:47:c8:c7:51:d4:54:a0:73:ff:d2:a2:28:35:
                    fd:c2:ad:ad:91:6e:c9:8e:19:ff:b3:85:40:13:38:
                    c7:ba:7b:7e:62:a0:89:72:35:19:d2:71:2d:ac:7c:
                    39:e2:4e:44:e8:db:3c:61:3a:f7:e2:3a:2b:ff:e9:
                    f6:d7:f5:8b:fd:49:8a:f1:21:7f:1c:1e:33:64:f3:
                    9b:fb:0f:df:c5:38:d4:6c:19:c3:b3:1b:ee:f7:dc:
                    5f:1c:17:92:e3:46:8e:7d:93:5b:a6:8c:b9:a1:1a:
                    c4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:66:97:F1:5C:EA:30:E3:BD:62:3B:89:06:E7:75:13:D2:52:D3:22
            X509v3 Authority Key Identifier:
                keyid:6B:55:8F:E6:88:A8:94:85:E2:96:DF:1D:31:88:07:7B:5A:5E:55:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1WP5oiolIXilt8dMYgHe1peVSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/060791-8c65-4f99-b08b-b2ae163bb30a/1/DGaX8VzqMOO9YjuJBud1E9JS0yI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/060791-8c65-4f99-b08b-b2ae163bb30a/1/a1WP5oiolIXilt8dMYgHe1peVSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212332

    Signature Algorithm: sha256WithRSAEncryption
         59:69:21:79:9a:cb:5a:9c:d0:a2:52:a0:c5:5a:50:c5:db:f5:
         1c:05:1c:8a:a3:12:7f:96:38:a7:d7:f9:9e:bf:2b:8a:8e:ca:
         24:97:d5:bb:62:f9:81:ca:c0:c7:f4:b3:20:b1:16:ae:fa:26:
         89:5d:35:3a:dd:34:89:31:e7:e0:fc:57:57:fc:f6:94:70:ce:
         c4:23:8d:fd:59:9f:a4:a5:54:00:09:cc:72:20:ed:8b:b8:77:
         a7:fb:5c:cb:5f:66:70:fb:47:ab:4c:fb:12:72:dc:fc:57:d2:
         28:69:d2:77:20:d0:c9:79:db:a6:63:78:99:6c:77:10:ca:e8:
         82:57:2d:6e:4d:f3:03:81:ea:b1:55:70:38:88:dd:8c:93:90:
         ca:75:4a:da:b3:12:52:f4:6c:02:80:b5:a4:57:61:ef:c5:d6:
         05:99:0f:05:dd:32:e9:09:77:02:4e:c5:f1:4d:01:99:d1:cc:
         5d:ac:67:fa:cf:68:16:13:eb:47:e6:e4:62:0d:5e:86:ab:bc:
         19:12:20:e5:3a:c9:34:e7:1f:ca:9f:f3:d1:c9:3d:2a:0e:7e:
         47:08:23:b5:9c:2c:30:72:c4:6c:ce:cb:95:a0:57:5e:c2:65:
         51:2b:0a:15:09:d1:26:ba:c2:7f:4e:3b:3b:cc:7c:ac:45:29:
         54:2b:e4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:17:53 2026 by rpki-client