Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/5983ae-f43f-4cf7-9352-60857f688cf7/1/w-_1Vw_rVcb5CeO2-vHEHj-tSBA.asa
File:                     w-_1Vw_rVcb5CeO2-vHEHj-tSBA.asa (raw, json)
Hash identifier:          ie2jMbTNrbOkhoLjnDpYKQWWB1120wNXKcxVuv6IahM=
Subject key identifier:   C3:EF:F5:57:0F:EB:55:C6:F9:09:E3:B6:FA:F1:C4:1E:3F:AD:48:10
Certificate issuer:       /CN=6da71dc079c9d8c2d2029ad640e7a3bf97f4dced
Certificate serial:       019C8D622BF552884F4D9D2AD1EBD99AA684
Authority key identifier: 6D:A7:1D:C0:79:C9:D8:C2:D2:02:9A:D6:40:E7:A3:BF:97:F4:DC:ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bacdwHnJ2MLSAprWQOejv5f03O0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/5983ae-f43f-4cf7-9352-60857f688cf7/1/w-_1Vw_rVcb5CeO2-vHEHj-tSBA.asa
Signing time:             Tue 24 Feb 2026 02:02:26 +0000
ASPA not before:          Tue 24 Feb 2026 02:02:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            215110
Providers:                AS: 11967
                          AS: 34927
                          AS: 202358
                          AS: 205941
                          AS: 209533
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/5983ae-f43f-4cf7-9352-60857f688cf7/1/bacdwHnJ2MLSAprWQOejv5f03O0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/5983ae-f43f-4cf7-9352-60857f688cf7/1/bacdwHnJ2MLSAprWQOejv5f03O0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bacdwHnJ2MLSAprWQOejv5f03O0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:8d:62:2b:f5:52:88:4f:4d:9d:2a:d1:eb:d9:9a:a6:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6da71dc079c9d8c2d2029ad640e7a3bf97f4dced
        Validity
            Not Before: Feb 24 02:02:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c3eff5570feb55c6f909e3b6faf1c41e3fad4810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:99:84:cd:de:94:b9:33:93:38:5f:fe:c2:54:
                    d8:c7:b4:35:e2:f1:3a:ad:f6:4e:63:09:08:dc:ef:
                    4c:1d:33:b7:ac:0f:26:d5:63:fb:1f:4e:58:bb:40:
                    99:3d:89:ed:a9:c9:96:7d:59:8f:f2:72:6c:5d:15:
                    1d:69:da:18:f7:51:1c:a9:11:b7:13:5c:2e:73:c7:
                    ae:b7:3d:c3:4a:ce:93:e1:56:a0:4b:e3:87:53:9a:
                    0f:75:34:c3:41:b6:30:b8:fb:cb:fe:ad:de:f8:bf:
                    65:c6:b7:b8:02:28:cd:c7:13:ba:3a:4f:fd:da:31:
                    1c:8c:d6:78:57:01:a2:d7:b8:92:1b:e3:c6:c2:4e:
                    c8:65:1b:80:e2:22:2e:4b:53:8a:27:38:c7:1e:03:
                    cb:8f:c6:ed:27:7a:f1:11:c7:40:a7:93:f0:1a:25:
                    0f:a0:21:df:10:bd:6c:de:25:7c:72:1c:88:40:74:
                    87:f4:9a:89:41:01:88:d3:c7:de:0b:a7:e2:96:79:
                    a0:28:b4:b6:de:a9:9d:66:9c:fe:86:b5:76:74:94:
                    09:a1:d5:cd:22:e8:dd:52:62:5f:5d:10:e9:f4:42:
                    fa:66:22:42:f0:66:a3:74:26:c1:7c:06:fb:0b:c9:
                    f1:2e:c0:82:86:8f:da:da:9e:86:76:ce:d5:77:9e:
                    20:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:EF:F5:57:0F:EB:55:C6:F9:09:E3:B6:FA:F1:C4:1E:3F:AD:48:10
            X509v3 Authority Key Identifier:
                keyid:6D:A7:1D:C0:79:C9:D8:C2:D2:02:9A:D6:40:E7:A3:BF:97:F4:DC:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bacdwHnJ2MLSAprWQOejv5f03O0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5983ae-f43f-4cf7-9352-60857f688cf7/1/w-_1Vw_rVcb5CeO2-vHEHj-tSBA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5983ae-f43f-4cf7-9352-60857f688cf7/1/bacdwHnJ2MLSAprWQOejv5f03O0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215110

    Signature Algorithm: sha256WithRSAEncryption
         59:5e:cb:f3:c5:9b:bf:00:c2:67:c1:89:91:2b:ac:65:94:45:
         8c:8f:65:44:b2:7f:15:e3:51:39:64:7c:17:2c:67:24:b2:b3:
         32:68:72:4d:96:ba:c3:09:05:ff:09:85:64:a8:f9:1c:52:b8:
         51:fc:d5:df:34:b0:8d:14:be:4f:5e:a3:bf:5d:37:94:7c:d9:
         ba:35:ca:f8:bd:9c:5c:6a:9d:fc:03:b8:f5:69:ea:56:10:43:
         af:e3:52:7c:3f:f7:2c:db:73:ed:90:fd:81:00:1d:c3:c2:d3:
         ee:70:9d:43:cf:80:14:62:2c:03:3e:ce:d6:f4:2c:ef:5d:cd:
         2b:63:00:67:0a:59:a6:c4:03:d8:13:65:ed:f9:ea:58:b1:4e:
         6d:fc:d9:68:0d:b2:d9:7e:92:82:fd:03:28:02:e7:ed:c4:9d:
         15:10:65:af:e4:1f:90:d5:1b:3e:81:42:81:78:83:b4:60:c6:
         49:9b:61:c0:e0:d5:27:15:c5:1a:cf:bb:b2:75:c2:4f:60:d0:
         49:f3:bc:b8:48:a5:58:2a:b2:a1:6d:78:8d:60:f1:5e:d3:b5:
         44:de:3a:c8:ff:5e:bf:d4:b5:aa:c9:e4:ee:da:14:81:af:52:
         35:dc:4d:1d:a3:e3:61:c4:12:3a:6f:5f:ae:5b:4d:29:6f:8b:
         e1:94:ca:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:45 2026 by rpki-client