Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/fDssjW4WfEi8N3-AvGgQmjo0vY8.asa
File:                     fDssjW4WfEi8N3-AvGgQmjo0vY8.asa (raw, json)
Hash identifier:          rvrghT9pjFaxSIUt3vHfRXYb/rvrP76GCg0i3Ls4d1I=
Subject key identifier:   7C:3B:2C:8D:6E:16:7C:48:BC:37:7F:80:BC:68:10:9A:3A:34:BD:8F
Certificate issuer:       /CN=f04dcb1ca1d468bc04470f1db4a46ecf5b827848
Certificate serial:       01A1BA39BC98AA8924BF8B340DBEC81C1E31
Authority key identifier: F0:4D:CB:1C:A1:D4:68:BC:04:47:0F:1D:B4:A4:6E:CF:5B:82:78:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8E3LHKHUaLwERw8dtKRuz1uCeEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/fDssjW4WfEi8N3-AvGgQmjo0vY8.asa
Signing time:             Sun 08 Nov 2026 08:15:08 +0000
ASPA not before:          Sun 08 Nov 2026 08:15:08 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            213796
Providers:                AS: 41051
                          AS: 60446
                          AS: 199524
                          AS: 203545
                          AS: 208972
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8E3LHKHUaLwERw8dtKRuz1uCeEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 11:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:ba:39:bc:98:aa:89:24:bf:8b:34:0d:be:c8:1c:1e:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04dcb1ca1d468bc04470f1db4a46ecf5b827848
        Validity
            Not Before: Nov  8 08:15:08 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7c3b2c8d6e167c48bc377f80bc68109a3a34bd8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:21:60:af:2e:7c:e1:4a:0f:0d:90:7e:c1:4c:
                    a3:64:45:24:ea:86:d3:5b:1d:98:e1:ae:cb:36:9f:
                    44:16:25:cb:2e:69:9d:7d:b6:c5:4b:f0:16:5f:15:
                    ec:ad:17:ea:b3:48:15:d4:7c:18:ed:65:89:36:cd:
                    ab:83:64:d0:1d:08:fb:dd:c3:b2:42:20:bc:1b:45:
                    99:4d:d5:49:61:69:6c:e0:72:98:50:c7:a7:b6:f8:
                    7a:e9:2e:d8:c1:c8:16:2b:39:5a:9b:cf:15:a0:56:
                    1b:85:f2:2a:c5:bd:ae:4e:30:96:df:f3:74:ea:f5:
                    8d:ff:0d:9d:ce:f4:e4:1f:bd:39:4b:55:84:cc:cd:
                    e0:02:52:e9:70:81:c2:5d:f9:d5:3e:19:c6:67:cc:
                    7e:01:ac:b6:70:3c:96:49:ff:12:27:ed:72:2b:41:
                    d0:46:4f:bf:f9:75:9c:98:0a:6c:97:be:5c:d2:ef:
                    63:b2:02:ec:d9:1c:8a:fe:c5:81:fc:64:51:1d:7d:
                    2e:d2:32:8a:ba:ee:05:1b:92:23:d3:58:a2:6d:9b:
                    1f:29:c8:b2:68:a5:56:6e:39:83:d7:0d:6e:5c:6b:
                    87:6a:17:66:16:8d:b3:4b:03:5d:d5:d0:a2:74:f2:
                    73:51:57:48:86:bf:1a:fd:57:8b:e2:4a:3a:a6:96:
                    6d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:3B:2C:8D:6E:16:7C:48:BC:37:7F:80:BC:68:10:9A:3A:34:BD:8F
            X509v3 Authority Key Identifier:
                keyid:F0:4D:CB:1C:A1:D4:68:BC:04:47:0F:1D:B4:A4:6E:CF:5B:82:78:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E3LHKHUaLwERw8dtKRuz1uCeEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/fDssjW4WfEi8N3-AvGgQmjo0vY8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213796

    Signature Algorithm: sha256WithRSAEncryption
         94:9d:f2:e8:10:a3:d8:3c:2f:8b:7c:5f:03:54:e5:67:95:ef:
         e3:fe:a9:9b:91:cb:ae:ef:23:7d:c4:15:83:5f:11:46:e8:0e:
         5c:e1:c7:9a:93:bc:35:2b:b5:57:3a:5e:55:09:41:39:99:e6:
         d0:5d:f3:82:16:78:c0:41:24:a6:fc:38:cb:64:ff:30:25:00:
         d4:05:c8:53:e5:d6:08:e9:ac:74:4a:38:34:40:47:71:8f:41:
         bb:a1:1f:5b:60:33:46:e2:72:f6:e3:f8:b4:06:54:d8:cb:b9:
         d3:9a:34:97:70:ce:e3:09:6a:2b:9c:a4:7a:a5:ed:d6:f0:09:
         f7:cc:81:ce:69:45:2a:ee:35:02:84:3a:d8:1d:66:f5:3e:f6:
         99:69:40:00:16:46:57:fd:d6:72:2c:57:b8:37:c4:cd:5e:44:
         c4:cc:0e:8d:c6:c1:81:d7:df:a2:81:10:7d:1e:8f:08:52:e6:
         82:ad:54:c3:b5:e0:6a:01:df:f7:58:db:42:81:c9:2f:ea:b9:
         73:77:59:02:d0:1b:4c:43:c1:b9:96:e2:c7:d2:15:e6:0d:95:
         6f:d9:f1:4b:b5:b5:be:e6:05:d1:bc:88:1b:fb:01:78:77:a8:
         b1:a5:b1:ff:d9:ed:02:1d:e2:3f:aa:a7:fc:93:81:b1:13:76:
         37:60:05:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:29:48 2026 by rpki-client