Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/85Ye01P3vYW2SoshWRnHI_PVVes.asa
File:                     85Ye01P3vYW2SoshWRnHI_PVVes.asa (raw, json)
Hash identifier:          TACNBPEbUEiMrnvGz9yncx2/1KD78oen4u9nuec4q4U=
Subject key identifier:   F3:96:1E:D3:53:F7:BD:85:B6:4A:8B:21:59:19:C7:23:F3:D5:55:EB
Certificate issuer:       /CN=212eaf59a2bff3cab118711894478bb9eff93b85
Certificate serial:       01A0C8B568D688BA02D4C6368805DB913C63
Authority key identifier: 21:2E:AF:59:A2:BF:F3:CA:B1:18:71:18:94:47:8B:B9:EF:F9:3B:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/85Ye01P3vYW2SoshWRnHI_PVVes.asa
Signing time:             Tue 22 Sep 2026 10:42:07 +0000
ASPA not before:          Tue 22 Sep 2026 10:42:07 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            24958
Providers:                AS: 174
                          AS: 8928
                          AS: 24916
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 10:42:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:b5:68:d6:88:ba:02:d4:c6:36:88:05:db:91:3c:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=212eaf59a2bff3cab118711894478bb9eff93b85
        Validity
            Not Before: Sep 22 10:42:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f3961ed353f7bd85b64a8b215919c723f3d555eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:38:ff:4b:f4:a5:9b:d5:f2:ef:52:e5:6d:e3:
                    6f:5b:87:11:d4:21:19:b7:9e:6d:4a:2f:0a:2a:43:
                    ba:a2:40:7a:e8:b1:f6:fe:bf:22:eb:82:51:c2:93:
                    7c:f3:01:c7:f5:3a:14:3b:f5:e6:44:66:c7:e2:ad:
                    7a:3b:7a:fe:bb:bc:27:bd:e0:6a:c9:74:5d:e4:c4:
                    12:07:88:c1:f2:39:2f:4c:3e:7e:3e:c5:36:c8:05:
                    1a:b1:7b:77:78:f2:a2:d9:46:fe:fe:3b:65:4c:a4:
                    04:b9:7f:30:ce:6c:46:34:e9:62:3a:4a:72:88:1c:
                    bf:2b:67:f6:06:12:f7:b8:59:f9:7c:1f:6b:02:0d:
                    a0:4b:2d:40:20:90:d6:d7:7d:d1:b6:5f:f3:51:6a:
                    63:f6:18:4b:f6:80:a8:a5:ed:14:d7:03:8c:27:21:
                    0d:6f:20:b1:03:e3:60:da:d8:56:41:aa:cb:75:6d:
                    bb:2d:83:dc:ce:a9:20:5f:df:5d:e4:ef:9c:ed:d0:
                    2a:70:e6:1e:81:b8:6e:1b:c1:85:ff:f1:47:1b:d1:
                    b3:fe:f1:0d:14:15:66:fe:84:c0:d2:b1:ec:59:d4:
                    e9:3e:df:c1:a7:fe:18:cc:b8:89:88:f3:68:c5:00:
                    61:65:e0:3b:28:29:fc:0d:b4:2c:71:c7:9e:0b:38:
                    5a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:96:1E:D3:53:F7:BD:85:B6:4A:8B:21:59:19:C7:23:F3:D5:55:EB
            X509v3 Authority Key Identifier:
                keyid:21:2E:AF:59:A2:BF:F3:CA:B1:18:71:18:94:47:8B:B9:EF:F9:3B:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/85Ye01P3vYW2SoshWRnHI_PVVes.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  24958

    Signature Algorithm: sha256WithRSAEncryption
         3e:99:53:0e:43:8b:31:eb:d2:50:69:af:44:26:fb:4d:ab:35:
         e5:da:d7:08:3b:16:52:62:43:bf:5e:fc:2a:2d:6f:88:17:41:
         3d:6a:18:ad:38:c4:6c:4e:83:a1:ec:e4:fb:ee:dd:5e:17:45:
         b5:23:30:e1:27:a7:dc:4c:3c:83:f6:7c:ac:5f:bb:ed:8d:e6:
         3b:92:b6:c1:2e:12:e0:c6:a9:64:da:14:25:11:08:8e:14:58:
         f6:85:4c:6d:28:bc:7c:fa:a2:62:97:03:71:ba:fa:0b:03:c8:
         fb:ed:f3:9d:3b:d9:1e:3b:aa:65:a9:c2:02:e3:0b:4d:74:80:
         a8:59:40:0a:fc:8c:4c:2d:08:43:ce:8a:d8:1f:39:f5:e1:65:
         f2:c0:43:43:da:67:ab:bd:1b:66:c3:86:bd:f5:24:99:79:fd:
         b0:82:67:54:c3:61:a1:c4:76:ca:8f:73:f9:98:e0:4c:32:49:
         c8:b0:31:f2:76:cb:77:7e:e3:22:5f:df:ce:6d:6b:a1:43:c6:
         81:0a:7b:91:18:18:6b:8b:1f:ce:76:b5:6a:64:9d:f8:39:85:
         1d:3c:2c:57:55:95:8d:72:95:9b:bd:81:5f:52:52:4d:ca:bb:
         7f:50:a0:5e:bc:5a:4b:1b:b6:75:3f:80:da:2b:cb:eb:88:83:
         dd:42:f1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:29:14 2026 by rpki-client