Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/956748-e858-473c-81c5-09f250e1b9ea/1/0qbC2zcROWgilwH2if8psrMseJA.asa
File:                     0qbC2zcROWgilwH2if8psrMseJA.asa (raw, json)
Hash identifier:          bry0r2AzfCz6SVFMSJS2WpMGwkDwgvIKD0bN9E0lzZg=
Subject key identifier:   D2:A6:C2:DB:37:11:39:68:22:97:01:F6:89:FF:29:B2:B3:2C:78:90
Certificate issuer:       /CN=360c26f9f5bd5176fb9ad0b65a948d0e8dd90ee4
Certificate serial:       019EBEAEDD7E3B5EE1846A7104DF13DB4862
Authority key identifier: 36:0C:26:F9:F5:BD:51:76:FB:9A:D0:B6:5A:94:8D:0E:8D:D9:0E:E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/956748-e858-473c-81c5-09f250e1b9ea/1/0qbC2zcROWgilwH2if8psrMseJA.asa
Signing time:             Sat 13 Jun 2026 01:53:11 +0000
ASPA not before:          Sat 13 Jun 2026 01:53:11 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214806
Providers:                AS: 6939
                          AS: 33387
                          AS: 34927
                          AS: 53667
                          AS: 215296
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/956748-e858-473c-81c5-09f250e1b9ea/1/Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/956748-e858-473c-81c5-09f250e1b9ea/1/Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ae:dd:7e:3b:5e:e1:84:6a:71:04:df:13:db:48:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=360c26f9f5bd5176fb9ad0b65a948d0e8dd90ee4
        Validity
            Not Before: Jun 13 01:53:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d2a6c2db37113968229701f689ff29b2b32c7890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:77:42:32:46:be:11:5c:f3:9d:d7:ba:93:f1:
                    f7:63:94:ac:bb:12:4b:7e:fa:37:ce:2a:fd:66:6f:
                    30:18:be:81:69:24:06:99:5f:83:b0:6e:31:bd:53:
                    79:de:84:e1:22:2c:f3:42:6d:70:c3:ee:d9:c7:35:
                    6c:5a:bf:b8:cd:5d:34:3a:82:df:b7:4d:e0:16:b5:
                    c7:39:c7:78:c8:ca:b6:83:f4:8e:d2:4e:f7:8d:81:
                    c7:bb:3c:f6:90:89:07:20:cf:f1:f4:06:cc:7f:fa:
                    c1:11:c1:5d:50:ae:fa:68:d7:f8:5f:c8:3e:23:2e:
                    08:78:f1:eb:da:51:17:e2:ba:33:20:3e:9d:33:ee:
                    fc:23:ce:c3:06:1f:2b:2c:83:ae:f5:ad:81:dd:bb:
                    5d:7e:b3:3f:01:d8:78:98:e6:fc:5d:f6:7e:dd:06:
                    fa:b2:5c:66:26:c9:93:6b:e9:a8:5c:f2:8f:c1:d5:
                    6c:9b:36:e2:b5:61:8e:8a:c1:70:7b:0f:36:a4:a6:
                    a3:04:df:66:15:b3:54:6d:b4:0a:a3:d8:4c:2c:0a:
                    2b:2e:eb:12:d1:bb:a1:e4:b6:99:fd:16:ff:cc:9b:
                    dc:1c:ff:e2:ac:1a:a7:ae:6e:1d:21:ae:04:e4:b9:
                    20:ed:0d:98:62:8a:23:40:82:93:bd:50:58:fd:77:
                    a5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:A6:C2:DB:37:11:39:68:22:97:01:F6:89:FF:29:B2:B3:2C:78:90
            X509v3 Authority Key Identifier:
                keyid:36:0C:26:F9:F5:BD:51:76:FB:9A:D0:B6:5A:94:8D:0E:8D:D9:0E:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/956748-e858-473c-81c5-09f250e1b9ea/1/0qbC2zcROWgilwH2if8psrMseJA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/956748-e858-473c-81c5-09f250e1b9ea/1/Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214806

    Signature Algorithm: sha256WithRSAEncryption
         43:73:f4:77:50:0d:98:ef:f5:45:a7:ac:c7:ad:a7:8a:87:40:
         38:9f:d0:80:b5:cd:4f:bd:20:13:1f:42:1f:2d:43:dc:1d:1d:
         c8:9d:a3:aa:00:17:7b:fa:f7:3e:83:c6:bc:f8:02:c9:85:28:
         3f:18:99:07:54:9c:6e:de:98:09:ab:e7:75:e9:70:00:f0:16:
         74:2c:e8:cb:b2:a1:2d:b3:b2:ad:bc:f5:0f:1d:5b:8e:00:89:
         59:95:70:8b:e5:35:d0:c7:04:12:9f:2c:a3:d5:7d:e6:64:97:
         c8:a0:7c:b3:4b:9a:31:3e:b0:11:e2:ae:41:1a:fe:ac:74:25:
         81:a6:be:80:e2:8e:7e:f1:6e:15:80:60:5b:58:9a:72:9e:e3:
         65:9b:70:93:d7:d3:9d:c0:12:40:8f:ea:4e:47:1c:0b:bc:6d:
         55:36:ff:2e:d7:13:8c:b5:1a:17:da:16:13:2b:c6:ac:4d:b4:
         ea:20:8b:14:1f:f3:23:70:e0:2c:df:5d:40:9c:17:3f:07:be:
         94:bd:2b:58:a2:00:38:00:05:af:d1:0b:90:8b:14:bb:36:9b:
         00:a0:3c:17:6f:2c:0d:c5:2d:e3:60:3b:34:85:ab:11:d3:9c:
         81:5a:f4:1b:aa:6c:2b:71:dc:aa:69:34:86:a8:ac:43:ea:bf:
         5a:29:6f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:00:40 2026 by rpki-client