Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/ihWl0bmGqyjVFVNbZ28Lvd8oBKE.asa
File:                     ihWl0bmGqyjVFVNbZ28Lvd8oBKE.asa (raw, json)
Hash identifier:          AbrhEPhb6lBxE5UGNQRDlRoCGXrbC18DKsQp32jSHuc=
Subject key identifier:   8A:15:A5:D1:B9:86:AB:28:D5:15:53:5B:67:6F:0B:BD:DF:28:04:A1
Certificate issuer:       /CN=fbad2288035e4056eb0cec15446a0c4180d26ea4
Certificate serial:       01A07D296641D473BAB4055EF60BBFB201F8
Authority key identifier: FB:AD:22:88:03:5E:40:56:EB:0C:EC:15:44:6A:0C:41:80:D2:6E:A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-60iiANeQFbrDOwVRGoMQYDSbqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/ihWl0bmGqyjVFVNbZ28Lvd8oBKE.asa
Signing time:             Mon 07 Sep 2026 18:37:40 +0000
ASPA not before:          Mon 07 Sep 2026 18:37:40 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            215899
Providers:                AS: 8772
                          AS: 11967
                          AS: 29632
                          AS: 41051
                          AS: 56630
                          AS: 201398
                          AS: 205941
                          AS: 208753
                          AS: 209533
                          AS: 212895
                          AS: 393577
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-60iiANeQFbrDOwVRGoMQYDSbqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:7d:29:66:41:d4:73:ba:b4:05:5e:f6:0b:bf:b2:01:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbad2288035e4056eb0cec15446a0c4180d26ea4
        Validity
            Not Before: Sep  7 18:37:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8a15a5d1b986ab28d515535b676f0bbddf2804a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ec:39:5b:52:a3:6c:fc:c2:69:0f:18:9e:fc:
                    c4:8c:31:14:b5:5a:b9:ac:0d:d6:c0:b4:4b:a5:3f:
                    01:1d:17:1f:8e:bb:0a:12:75:ec:d3:6a:c5:d2:d4:
                    22:b1:d2:a8:27:21:52:47:64:24:90:2e:68:a4:ae:
                    08:22:1a:7d:a2:66:ac:3a:41:e6:f8:c1:fb:33:73:
                    f4:1d:42:fe:ef:2f:38:71:36:fa:41:07:24:08:01:
                    80:36:41:5b:9d:ac:00:de:b8:6b:27:09:14:06:6d:
                    b2:6c:60:81:26:8f:aa:2e:61:ca:f2:d9:d8:c1:d1:
                    ca:09:98:c2:40:95:be:c8:32:c1:7f:7c:ae:16:b9:
                    6f:86:17:e7:e9:96:ef:25:e2:a5:35:69:97:63:ab:
                    4c:5c:bc:97:56:c7:c1:79:92:4f:4b:bc:0a:dc:bc:
                    55:11:5b:04:6a:40:42:34:6b:8c:4a:2c:b6:46:6b:
                    96:d2:f1:a7:c9:27:97:0f:f1:9b:7c:9b:f0:df:a1:
                    98:53:e8:a6:fe:53:4f:94:54:8c:5c:3a:78:88:92:
                    89:4e:37:81:5c:55:78:8a:b5:ee:42:27:07:32:3b:
                    99:f8:4e:82:70:fb:f5:85:9d:82:a2:ec:2c:c6:f3:
                    f9:ac:6a:28:90:3c:57:d1:ee:04:fa:80:34:8e:16:
                    11:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:15:A5:D1:B9:86:AB:28:D5:15:53:5B:67:6F:0B:BD:DF:28:04:A1
            X509v3 Authority Key Identifier:
                keyid:FB:AD:22:88:03:5E:40:56:EB:0C:EC:15:44:6A:0C:41:80:D2:6E:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-60iiANeQFbrDOwVRGoMQYDSbqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/ihWl0bmGqyjVFVNbZ28Lvd8oBKE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215899

    Signature Algorithm: sha256WithRSAEncryption
         6f:07:d0:7b:52:9a:ac:e4:0e:b8:d3:69:52:a2:79:82:f6:b1:
         82:8b:82:56:63:95:ea:eb:d1:7d:7b:11:8d:88:cc:55:5c:9f:
         c2:ca:6f:91:be:24:1f:b6:2b:2a:7a:a4:7f:cf:a7:ca:22:a3:
         30:d1:e7:ef:84:52:15:69:3f:44:04:75:4d:a3:c7:5d:f3:c6:
         4b:11:1b:54:11:9e:b6:51:26:83:2a:0a:5f:65:ff:fd:9d:81:
         ba:84:b2:5b:4f:44:e3:86:ca:55:6d:46:45:c7:a3:2b:25:2b:
         c1:20:be:63:73:cb:3d:5b:c7:a5:8d:7b:95:05:56:41:4a:f0:
         a7:6c:b3:9e:09:2e:c2:d7:92:4f:2f:0c:55:b6:5a:35:cf:51:
         65:d6:54:c3:3c:83:50:56:9e:53:e0:f1:d9:13:96:f5:ff:c0:
         5f:81:74:e0:d5:7f:ec:d4:b5:91:3f:77:0b:74:32:7b:b6:71:
         71:3e:74:4e:cb:7c:5e:2f:a2:cc:2f:b8:fd:9c:10:8d:26:35:
         3d:e6:41:01:15:5f:f5:40:cf:b8:06:72:d4:1a:23:b6:1d:24:
         f6:2a:8f:a7:63:6f:13:a7:9c:33:96:24:08:85:f1:59:ec:a2:
         ec:6b:33:89:80:bf:53:1c:5a:80:64:fd:71:da:ef:1f:03:31:
         90:5a:4b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:01:36 2026 by rpki-client