Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cd0bda-cbb2-48f3-9dd2-52d8d6e6d298/1/h6c3rKlsCh2Ta6ieH4wNZunbZ_c.asa
File:                     h6c3rKlsCh2Ta6ieH4wNZunbZ_c.asa (raw, json)
Hash identifier:          wHSgIizYN0GV/TTAR4CRTTTf21VDW35ePjsqiIQojnU=
Subject key identifier:   87:A7:37:AC:A9:6C:0A:1D:93:6B:A8:9E:1F:8C:0D:66:E9:DB:67:F7
Certificate issuer:       /CN=a85111a75e9d39cc430ea85b8d292060d9e8a7c2
Certificate serial:       019EBCFCE7DD437B70A77EA2D40601B4BEF3
Authority key identifier: A8:51:11:A7:5E:9D:39:CC:43:0E:A8:5B:8D:29:20:60:D9:E8:A7:C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qFERp16dOcxDDqhbjSkgYNnop8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/cd0bda-cbb2-48f3-9dd2-52d8d6e6d298/1/h6c3rKlsCh2Ta6ieH4wNZunbZ_c.asa
Signing time:             Fri 12 Jun 2026 17:59:11 +0000
ASPA not before:          Fri 12 Jun 2026 17:59:11 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            219446
Providers:                AS: 13335
                          AS: 34872
                          AS: 210233
                          AS: 265919
                          AS: 401661
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/cd0bda-cbb2-48f3-9dd2-52d8d6e6d298/1/qFERp16dOcxDDqhbjSkgYNnop8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/cd0bda-cbb2-48f3-9dd2-52d8d6e6d298/1/qFERp16dOcxDDqhbjSkgYNnop8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qFERp16dOcxDDqhbjSkgYNnop8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bc:fc:e7:dd:43:7b:70:a7:7e:a2:d4:06:01:b4:be:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a85111a75e9d39cc430ea85b8d292060d9e8a7c2
        Validity
            Not Before: Jun 12 17:59:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=87a737aca96c0a1d936ba89e1f8c0d66e9db67f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:26:31:97:cd:d5:6c:d1:59:1c:a9:03:5a:c5:
                    40:59:7e:2f:1c:05:99:84:8f:48:39:98:9d:b7:71:
                    56:4c:bf:29:25:10:d2:5a:56:40:93:5b:33:ee:8c:
                    f3:09:de:31:04:a0:48:38:8b:8b:ed:4f:ef:ce:63:
                    00:86:26:cb:7d:0d:64:af:8f:96:b8:23:1c:01:bb:
                    fa:7e:c3:9c:f6:9e:34:78:4d:59:6a:5f:ba:5b:51:
                    b7:63:32:1e:ec:04:0f:bf:f7:61:d4:7c:25:25:cc:
                    76:c7:ae:35:b7:4e:c7:fd:d3:5e:e7:26:e5:80:0e:
                    9f:4e:bd:7e:8b:1f:74:00:18:c4:81:d6:7f:7c:a1:
                    63:34:a3:65:61:76:85:59:b0:5c:b4:da:9f:8a:6b:
                    c8:40:02:6f:59:b3:c7:b8:62:20:e2:91:e7:07:00:
                    1f:db:86:72:00:3e:dd:66:e0:e1:3b:cf:0b:28:da:
                    1a:9d:a5:cd:d0:b1:1d:8b:5a:e5:3a:fa:1e:33:19:
                    a7:36:d7:71:bd:65:c9:43:58:a9:81:ab:a1:ba:2c:
                    07:58:72:fe:f6:07:11:5f:4c:04:b2:11:35:57:6c:
                    60:d2:5a:4d:b2:98:70:fd:f0:f3:43:05:d6:31:68:
                    82:a8:42:b4:8b:9a:e9:14:cf:b3:11:50:ca:c3:a5:
                    6a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A7:37:AC:A9:6C:0A:1D:93:6B:A8:9E:1F:8C:0D:66:E9:DB:67:F7
            X509v3 Authority Key Identifier:
                keyid:A8:51:11:A7:5E:9D:39:CC:43:0E:A8:5B:8D:29:20:60:D9:E8:A7:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFERp16dOcxDDqhbjSkgYNnop8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cd0bda-cbb2-48f3-9dd2-52d8d6e6d298/1/h6c3rKlsCh2Ta6ieH4wNZunbZ_c.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cd0bda-cbb2-48f3-9dd2-52d8d6e6d298/1/qFERp16dOcxDDqhbjSkgYNnop8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  219446

    Signature Algorithm: sha256WithRSAEncryption
         02:95:30:e9:e8:7b:04:db:49:48:a8:25:80:73:f0:45:1a:5c:
         29:36:57:f4:7d:88:1b:97:07:d1:f2:71:d6:0c:3f:92:a9:a8:
         5f:90:76:46:24:d6:4c:0b:71:68:db:26:56:89:cf:44:4a:4f:
         d3:83:1d:49:42:f2:0f:4a:f9:5e:0e:d1:d5:6c:2c:1e:4e:62:
         a7:7c:d4:45:e0:4e:28:a8:55:72:25:ff:02:3a:3d:b4:d6:56:
         44:b3:2b:61:96:ca:96:83:de:18:ea:af:13:ab:0f:b4:b2:fd:
         97:92:ce:74:66:de:a2:cf:b9:2a:97:f0:c8:e6:a7:f5:bc:4b:
         55:f4:4e:69:7f:a3:47:9d:bb:0f:9e:b9:14:d1:ff:d5:ac:79:
         05:98:58:3e:3c:a9:82:5f:ff:c9:5c:57:12:cc:5e:b7:4b:63:
         f2:5f:c4:1d:6c:90:85:a2:06:df:3b:09:b5:d6:aa:75:c4:4a:
         c1:e4:b5:e8:c8:39:05:f8:9e:ec:12:3a:29:62:b7:52:6b:d0:
         ec:56:ab:8e:19:3a:b2:80:62:05:29:97:e7:bc:4e:19:09:03:
         38:4f:0c:81:3b:ef:8e:79:8a:2c:e8:67:81:2d:56:9a:2c:8d:
         a9:23:27:29:9e:d8:af:0a:d6:20:9f:6d:77:ca:38:3f:8b:fc:
         9f:86:2e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:39:53 2026 by rpki-client