Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/pR8uoRHmjzuqDm2UmtIpAf0Q9-8.asa
File:                     pR8uoRHmjzuqDm2UmtIpAf0Q9-8.asa (raw, json)
Hash identifier:          6nzDVLyXzHpAYDmeN36wag1rAm8UPup27hN5gW2vOnk=
Subject key identifier:   A5:1F:2E:A1:11:E6:8F:3B:AA:0E:6D:94:9A:D2:29:01:FD:10:F7:EF
Certificate issuer:       /CN=6f9e9696dccf6c1a432090408514aecdc3f60739
Certificate serial:       019F3C2D35AC60E12CC7A61DE1122783930C
Authority key identifier: 6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/pR8uoRHmjzuqDm2UmtIpAf0Q9-8.asa
Signing time:             Tue 07 Jul 2026 10:43:43 +0000
ASPA not before:          Tue 07 Jul 2026 10:43:43 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            211797
Providers:                AS: 8308
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 13:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:3c:2d:35:ac:60:e1:2c:c7:a6:1d:e1:12:27:83:93:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f9e9696dccf6c1a432090408514aecdc3f60739
        Validity
            Not Before: Jul  7 10:43:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a51f2ea111e68f3baa0e6d949ad22901fd10f7ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:32:49:9b:00:f6:83:76:06:1f:09:fb:64:82:
                    9d:22:4c:ab:01:73:8c:55:3e:76:a8:fb:5f:6e:46:
                    a6:fb:46:f2:0e:2a:8b:b4:7d:b2:37:1c:fb:95:50:
                    52:77:9b:2a:78:0c:76:77:f4:1c:40:2a:d9:8e:c1:
                    c1:ec:ed:9b:97:38:53:0e:4e:af:af:5f:5c:cc:ab:
                    e7:0c:d5:c3:80:60:b4:60:3b:73:ed:19:99:b2:08:
                    c2:02:b2:88:ac:c5:d1:03:da:51:e5:70:25:49:8c:
                    bc:0c:b4:07:fb:2f:76:b6:84:b9:1c:ea:66:5e:31:
                    55:ea:5a:e5:1c:40:7b:73:29:eb:d1:26:f4:75:72:
                    d5:44:49:b1:77:0c:57:bd:10:81:47:0c:bf:75:1f:
                    c0:97:70:fa:3e:94:46:7d:bc:e8:c7:2d:7c:f1:d1:
                    f2:0a:0b:ba:c2:00:0c:76:cb:f7:02:10:6c:0b:95:
                    0f:11:31:d3:23:a6:e5:f4:5b:6a:cf:e2:36:a4:1a:
                    5b:7a:83:ed:87:89:9b:3b:cc:53:ad:0b:66:91:c1:
                    b4:f9:a3:ae:0f:2b:fa:79:9c:3d:a0:c9:5b:0c:a0:
                    f8:79:15:55:6b:fa:5b:7e:3f:1f:28:9c:47:38:66:
                    25:5f:8f:00:d6:9b:3a:fc:7b:69:01:77:eb:23:1c:
                    98:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:1F:2E:A1:11:E6:8F:3B:AA:0E:6D:94:9A:D2:29:01:FD:10:F7:EF
            X509v3 Authority Key Identifier:
                keyid:6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/pR8uoRHmjzuqDm2UmtIpAf0Q9-8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211797

    Signature Algorithm: sha256WithRSAEncryption
         9a:0b:a3:40:3d:1c:80:6d:3c:28:19:71:42:a7:73:80:45:c0:
         c2:1d:b7:17:1b:b1:e9:eb:41:09:43:62:4e:ad:6a:1c:6e:a8:
         77:13:69:57:df:40:bb:f1:95:3e:58:89:b5:fc:7c:9f:05:46:
         fc:38:49:a1:05:17:02:50:38:92:d0:e8:48:17:43:6c:c2:f0:
         c5:f4:f9:e7:66:fa:68:9b:ad:d5:13:6d:4f:fc:16:d3:d6:a7:
         ef:43:10:be:45:71:1b:26:e6:8d:3d:24:ef:12:5c:7f:96:35:
         db:e0:de:bb:50:68:17:70:3b:2a:e0:e6:21:2a:1c:29:5e:c1:
         bf:a1:16:be:a8:7c:fc:b8:1f:2f:44:8c:6c:be:86:3d:c2:74:
         45:ce:bc:11:6b:83:a9:f7:9f:df:ff:b5:69:b1:09:a6:96:a1:
         a5:00:db:d4:3c:6e:a5:f1:93:2e:9c:4f:31:e6:6a:21:06:d5:
         ae:81:f7:71:82:c2:f2:8c:68:f3:83:96:c5:19:39:7c:6a:52:
         8a:90:03:b6:cf:73:4b:89:6e:24:81:6f:f3:96:f8:8d:e6:8f:
         df:18:28:0c:d5:7f:2d:fd:34:6e:08:6d:1e:d7:49:d6:62:30:
         ce:2d:34:96:be:f1:4a:89:95:17:64:4c:07:bd:fa:6e:38:84:
         ca:84:35:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 18:59:32 2026 by rpki-client