Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/AKhH-RxhDGBHoPBLt36mNoOUnzE.asa
File:                     AKhH-RxhDGBHoPBLt36mNoOUnzE.asa (raw, json)
Hash identifier:          vacKAjC4WnfpK0iVOhoFFwXHvoDhDDseRW6C3A9oKYE=
Subject key identifier:   00:A8:47:F9:1C:61:0C:60:47:A0:F0:4B:B7:7E:A6:36:83:94:9F:31
Certificate issuer:       /CN=0776334dc6f70f563e998f6080ad328aab7f8d0e
Certificate serial:       019E4B15BE4E1F2FE3BE4B062CDEE30C8335
Authority key identifier: 07:76:33:4D:C6:F7:0F:56:3E:99:8F:60:80:AD:32:8A:AB:7F:8D:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/AKhH-RxhDGBHoPBLt36mNoOUnzE.asa
Signing time:             Thu 21 May 2026 15:09:36 +0000
ASPA not before:          Thu 21 May 2026 15:09:36 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            208755
Providers:                AS: 212683
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:4b:15:be:4e:1f:2f:e3:be:4b:06:2c:de:e3:0c:83:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0776334dc6f70f563e998f6080ad328aab7f8d0e
        Validity
            Not Before: May 21 15:09:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=00a847f91c610c6047a0f04bb77ea63683949f31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:01:47:79:9f:ff:30:72:a7:f2:73:35:b9:b5:
                    fc:41:31:76:e2:28:e6:e3:19:5f:bf:cd:66:4f:11:
                    2d:b1:0b:18:de:07:b9:69:a0:e2:c5:c5:87:34:68:
                    b5:64:92:99:91:6e:d5:f3:cf:80:e5:94:9d:35:0d:
                    08:9e:fb:13:f8:32:ad:5c:7f:5e:45:31:36:2e:aa:
                    0c:27:a3:24:78:76:12:93:db:49:35:0c:10:61:fa:
                    0f:42:57:7b:1f:fa:f5:47:13:c5:4c:25:47:4a:dd:
                    9d:b9:61:07:2b:13:6e:4c:7f:90:fb:e8:4c:6d:0b:
                    2a:8c:45:f9:d0:5d:ab:69:59:31:8f:6a:50:b0:ee:
                    4f:dd:d3:a8:ab:e1:6f:3b:e8:cb:91:09:ce:4c:3a:
                    14:b5:c7:a5:3a:8d:f5:30:9c:87:5d:e6:ab:4d:1f:
                    bd:df:97:c0:f7:38:18:85:73:3f:d4:cd:79:df:82:
                    77:b7:d3:71:44:97:e1:58:d7:69:cb:e4:06:98:ab:
                    d2:38:52:b5:80:a0:88:b7:8b:e5:9c:97:83:8a:e8:
                    27:d7:11:d6:87:40:a1:59:91:63:79:1f:e8:8b:7f:
                    6d:f0:d7:51:04:a0:74:20:23:d9:84:76:b2:67:1f:
                    58:48:d0:93:4d:b7:46:12:84:e8:38:fe:32:25:4c:
                    5d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A8:47:F9:1C:61:0C:60:47:A0:F0:4B:B7:7E:A6:36:83:94:9F:31
            X509v3 Authority Key Identifier:
                keyid:07:76:33:4D:C6:F7:0F:56:3E:99:8F:60:80:AD:32:8A:AB:7F:8D:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/AKhH-RxhDGBHoPBLt36mNoOUnzE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208755

    Signature Algorithm: sha256WithRSAEncryption
         12:83:95:89:99:e4:24:8a:3f:39:b2:07:03:37:d6:45:3e:0d:
         de:f5:1a:bb:58:5f:15:14:c9:44:af:92:2a:f7:0a:32:fb:b6:
         34:f8:23:c6:ee:72:45:70:ba:99:85:32:2a:d8:05:81:ff:d8:
         a6:f3:d2:40:0e:25:81:17:1d:5b:c3:cc:d6:47:51:9a:22:26:
         1e:f4:19:7e:3f:00:c8:00:c8:7c:4b:e2:e6:5f:40:0e:8e:4f:
         18:5c:75:59:dc:e1:ee:14:54:45:b7:a4:ef:46:f1:dd:6e:5e:
         33:b0:e3:b8:29:7e:53:9c:17:b7:cf:2e:c8:cd:9e:38:04:4d:
         55:94:d9:13:18:82:f7:2a:96:b6:d6:6a:9b:8c:13:79:f7:91:
         08:78:dc:e1:8b:73:01:5d:5f:d4:17:e4:ca:4a:9e:4c:0f:e7:
         80:23:7a:72:4a:ad:d4:e5:c0:ea:f0:ec:12:02:be:6f:fd:52:
         4b:3d:9d:23:20:9c:c9:d1:43:64:5d:72:51:2f:c0:ad:8d:e7:
         42:94:6a:2b:8e:d2:85:d5:ab:1f:f1:c7:da:37:9f:56:d4:b0:
         67:76:ab:f0:d4:0c:50:08:22:a7:3f:db:32:4e:06:50:ea:f2:
         77:63:f8:bb:d7:63:b6:ae:ff:f5:3a:15:8a:06:42:af:a9:f4:
         4c:6b:75:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:38:57 2026 by rpki-client