Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/5177fd-89ed-4e6f-8c3d-23b8611cce23/1/DvED03J9CRg063gdO7Lb7Xsj4TY.asa
File:                     DvED03J9CRg063gdO7Lb7Xsj4TY.asa (raw, json)
Hash identifier:          ebMJSF+82paHH3e/7fp7MK41+dHtYx6s+v3wJUufGAs=
Subject key identifier:   0E:F1:03:D3:72:7D:09:18:34:EB:78:1D:3B:B2:DB:ED:7B:23:E1:36
Certificate issuer:       /CN=3cfeccd6bf6406b0cf44f682b93cd86e3346524a
Certificate serial:       01A164A3ED5956FA2418BD8ED85FD5598B53
Authority key identifier: 3C:FE:CC:D6:BF:64:06:B0:CF:44:F6:82:B9:3C:D8:6E:33:46:52:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PP7M1r9kBrDPRPaCuTzYbjNGUko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/5177fd-89ed-4e6f-8c3d-23b8611cce23/1/DvED03J9CRg063gdO7Lb7Xsj4TY.asa
Signing time:             Thu 22 Oct 2026 17:23:47 +0000
ASPA not before:          Thu 22 Oct 2026 17:23:47 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            211635
Providers:                AS: 6939
                          AS: 34549
                          AS: 34927
                          AS: 41051
                          AS: 48646
                          AS: 212895
                          AS: 215296
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/5177fd-89ed-4e6f-8c3d-23b8611cce23/1/PP7M1r9kBrDPRPaCuTzYbjNGUko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/5177fd-89ed-4e6f-8c3d-23b8611cce23/1/PP7M1r9kBrDPRPaCuTzYbjNGUko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PP7M1r9kBrDPRPaCuTzYbjNGUko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 08:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:64:a3:ed:59:56:fa:24:18:bd:8e:d8:5f:d5:59:8b:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cfeccd6bf6406b0cf44f682b93cd86e3346524a
        Validity
            Not Before: Oct 22 17:23:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0ef103d3727d091834eb781d3bb2dbed7b23e136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bf:e6:3d:ec:2f:63:0a:32:5f:9f:30:a4:54:
                    5d:93:1f:d5:49:9c:ce:28:b7:43:bc:7d:27:d2:77:
                    1c:4a:79:c5:8b:68:b7:45:90:f9:81:2c:e8:64:6e:
                    1e:f7:43:89:8e:1c:e8:ac:f0:98:0e:a1:c1:08:dd:
                    b8:b3:49:2a:1f:18:1c:1b:52:6b:12:a3:c9:7a:9f:
                    09:b3:33:98:ce:b2:dc:25:90:48:94:9e:3d:98:72:
                    83:84:8c:ba:80:4e:e7:6f:c4:04:aa:7a:7f:48:9c:
                    a3:3b:04:ea:c8:0e:7e:ae:6d:fb:9f:63:e2:07:7b:
                    a4:7a:65:af:c6:58:f2:2f:6a:9e:65:67:8b:24:01:
                    f8:ca:76:1f:5b:29:d7:64:86:72:24:9b:3e:7a:b9:
                    f5:1d:7d:43:3a:f3:ce:cf:62:16:a0:97:57:1d:34:
                    82:a7:01:38:fc:25:5d:11:9c:56:d5:d5:15:7a:f0:
                    bd:46:fa:b4:22:7a:65:e0:dc:d3:ae:5e:70:4b:1f:
                    17:96:1e:7a:58:4d:b5:84:a4:fa:cc:9e:0c:af:bf:
                    49:a7:13:89:5b:75:95:df:75:ac:1a:c5:ed:49:19:
                    77:f3:16:68:b5:0e:ab:6a:49:87:d7:b9:a2:27:35:
                    cb:cf:81:b8:bd:f7:0a:88:5b:16:cd:4f:ee:21:ee:
                    54:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F1:03:D3:72:7D:09:18:34:EB:78:1D:3B:B2:DB:ED:7B:23:E1:36
            X509v3 Authority Key Identifier:
                keyid:3C:FE:CC:D6:BF:64:06:B0:CF:44:F6:82:B9:3C:D8:6E:33:46:52:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PP7M1r9kBrDPRPaCuTzYbjNGUko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5177fd-89ed-4e6f-8c3d-23b8611cce23/1/DvED03J9CRg063gdO7Lb7Xsj4TY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5177fd-89ed-4e6f-8c3d-23b8611cce23/1/PP7M1r9kBrDPRPaCuTzYbjNGUko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211635

    Signature Algorithm: sha256WithRSAEncryption
         91:38:cb:14:75:18:5f:87:d0:f1:4c:9d:f0:6c:51:10:8a:e9:
         8a:85:d2:bb:ce:18:1c:da:4c:5a:fd:85:3d:e6:d3:60:96:63:
         f2:fd:9c:75:33:de:96:70:b3:46:2b:37:23:10:90:81:db:78:
         4d:42:7d:59:3e:71:69:8b:c0:fa:e1:32:48:9d:ea:46:74:7d:
         9f:e6:3d:fe:f2:6f:db:26:31:d8:7f:f6:eb:69:65:d3:4d:73:
         f4:d0:c4:65:14:f4:1a:2c:4a:67:d5:e4:81:27:05:66:95:e6:
         f6:26:a5:9f:74:73:c6:22:83:37:32:5f:97:65:4f:60:cd:ac:
         6a:eb:59:e8:02:eb:b1:42:6b:74:f6:6a:bd:87:1f:1c:3b:b1:
         da:ff:9d:3b:8f:f9:96:15:dd:88:08:3c:e9:16:ff:d3:60:02:
         03:4c:c6:33:fd:37:7d:25:eb:30:94:e7:4f:a9:fe:66:c8:3b:
         50:3d:08:7b:82:4b:fc:ef:23:58:bc:35:09:b6:61:d4:b1:9c:
         77:f1:fd:a5:a7:3b:b2:8c:87:fa:16:84:8f:f4:73:b8:7a:99:
         c4:d2:27:1d:d9:7b:71:bd:7a:ac:3f:bc:79:e8:6c:79:5b:bc:
         e1:e4:db:43:fc:4b:a7:63:75:ad:9f:26:6c:09:e2:ee:04:98:
         7b:63:67:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:46:17 2026 by rpki-client