Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/w0e6jkiUX1sni-XsVknCS6jjnrs.asa
File:                     w0e6jkiUX1sni-XsVknCS6jjnrs.asa (raw, json)
Hash identifier:          dlOu1937WJHpDAsAncwHV+rfvJq6GFUalmkUWER/diE=
Subject key identifier:   C3:47:BA:8E:48:94:5F:5B:27:8B:E5:EC:56:49:C2:4B:A8:E3:9E:BB
Certificate issuer:       /CN=28f22a53909b527735246340f0417ebefd326b31
Certificate serial:       019DEBE46D5456B05A8FC7E3AF8D3C17F56D
Authority key identifier: 28:F2:2A:53:90:9B:52:77:35:24:63:40:F0:41:7E:BE:FD:32:6B:31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KPIqU5CbUnc1JGNA8EF-vv0yazE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/w0e6jkiUX1sni-XsVknCS6jjnrs.asa
Signing time:             Sun 03 May 2026 03:31:49 +0000
ASPA not before:          Sun 03 May 2026 03:31:49 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            210773
Providers:                AS: 44324
                          AS: 214933
                          AS: 216211
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KPIqU5CbUnc1JGNA8EF-vv0yazE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 12:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:eb:e4:6d:54:56:b0:5a:8f:c7:e3:af:8d:3c:17:f5:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28f22a53909b527735246340f0417ebefd326b31
        Validity
            Not Before: May  3 03:31:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c347ba8e48945f5b278be5ec5649c24ba8e39ebb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e7:d2:58:d2:c8:c5:e1:43:db:79:fd:ba:c5:
                    98:26:19:03:9c:a2:82:7f:16:23:14:93:f3:3a:76:
                    e7:78:c9:31:3c:2f:1e:81:80:4a:e4:a6:64:4e:1d:
                    58:ce:e1:d1:ac:68:1d:22:34:19:e6:75:0b:72:0e:
                    49:f1:92:8b:44:58:d3:00:c1:0a:75:db:c7:fb:52:
                    34:16:f4:a2:fd:ee:55:72:2c:f9:d8:18:bd:a0:07:
                    ab:38:ba:56:10:e5:95:a9:e1:32:b3:34:f0:e2:4e:
                    27:c9:e5:87:94:2a:31:f6:dc:33:71:a2:e0:36:43:
                    bf:f3:fc:5f:ca:a7:3d:d6:c3:8c:84:60:4b:8e:50:
                    24:78:1f:e6:3c:c6:f8:cc:cd:4c:6b:18:73:ba:31:
                    7b:97:d0:86:d0:38:59:a2:44:af:23:dd:11:bd:94:
                    f4:f6:25:ce:36:7f:45:0e:b3:59:e2:0c:ba:dd:7a:
                    cf:e8:34:e9:60:40:92:10:3b:d2:f0:0f:86:5c:3f:
                    4e:31:b1:13:2d:e1:01:2a:04:5a:38:3b:8d:f3:4f:
                    4c:18:33:46:6e:ba:9a:c5:c2:4a:67:06:3d:be:8c:
                    af:c1:73:09:e3:8e:be:43:2c:e2:63:87:33:d0:4f:
                    80:3b:e0:1f:06:85:bf:13:ee:2d:22:ea:7d:4a:14:
                    9d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:47:BA:8E:48:94:5F:5B:27:8B:E5:EC:56:49:C2:4B:A8:E3:9E:BB
            X509v3 Authority Key Identifier:
                keyid:28:F2:2A:53:90:9B:52:77:35:24:63:40:F0:41:7E:BE:FD:32:6B:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPIqU5CbUnc1JGNA8EF-vv0yazE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/w0e6jkiUX1sni-XsVknCS6jjnrs.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210773

    Signature Algorithm: sha256WithRSAEncryption
         24:b8:c1:f6:ec:a5:b0:53:31:03:4b:72:17:79:ae:97:91:b4:
         6a:0e:46:3e:70:97:a5:55:38:77:91:5a:4e:73:cb:36:e1:74:
         45:f7:36:15:47:78:9f:40:d2:da:3e:94:f0:6a:f4:79:a6:f8:
         da:df:c0:63:be:1f:6f:c5:12:4d:f6:01:f9:6a:bb:b0:67:3b:
         ed:da:a5:64:fa:0c:af:71:e7:ad:5f:da:a1:16:b3:a3:0f:d7:
         5f:8f:0e:40:1d:78:9f:05:01:69:9b:7e:68:30:a5:a6:b0:c8:
         ad:18:5f:11:3f:51:41:d4:23:88:f1:a2:07:ab:75:70:a3:3b:
         36:a8:f9:85:64:f2:a5:49:27:d7:75:0f:ed:81:ff:9a:fe:a2:
         23:f2:83:2e:8e:47:e7:12:84:e8:23:ab:53:f7:2b:3d:75:8b:
         88:00:24:11:1e:0f:70:52:8b:8a:7a:76:8d:3b:03:7c:c7:c0:
         46:d6:42:6b:8d:f1:e7:78:60:3b:0f:76:d2:cf:c9:c9:be:d7:
         cc:61:33:45:be:33:f8:41:ba:07:a7:27:2e:15:07:f9:5c:ac:
         f7:1d:1a:a3:db:5b:80:f7:e9:be:6e:e0:05:99:80:c6:fa:53:
         af:e9:58:dc:e2:57:ae:a6:fe:32:9f:76:41:cf:b5:f7:29:89:
         43:0a:d1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:13:13 2026 by rpki-client