Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/d0uZV4R2ZgcihJhZxxbOzJmT7aA.asa
File:                     d0uZV4R2ZgcihJhZxxbOzJmT7aA.asa (raw, json)
Hash identifier:          hiLRbd8efXwY4y/uVjZMI1vjDCS3VzxgU7eclUwARa8=
Subject key identifier:   77:4B:99:57:84:76:66:07:22:84:98:59:C7:16:CE:CC:99:93:ED:A0
Certificate issuer:       /CN=0d6dc66cc38436b6ac31e97e712d219407c83cf4
Certificate serial:       019E1CE20C3C39A3E4D54A9C8FAD59DCD626
Authority key identifier: 0D:6D:C6:6C:C3:84:36:B6:AC:31:E9:7E:71:2D:21:94:07:C8:3C:F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DW3GbMOENrasMel-cS0hlAfIPPQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/d0uZV4R2ZgcihJhZxxbOzJmT7aA.asa
Signing time:             Tue 12 May 2026 15:50:36 +0000
ASPA not before:          Tue 12 May 2026 15:50:36 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            216386
Providers:                AS: 8772
                          AS: 29632
                          AS: 211509
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DW3GbMOENrasMel-cS0hlAfIPPQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:e2:0c:3c:39:a3:e4:d5:4a:9c:8f:ad:59:dc:d6:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d6dc66cc38436b6ac31e97e712d219407c83cf4
        Validity
            Not Before: May 12 15:50:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=774b99578476660722849859c716cecc9993eda0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0a:26:a5:85:74:68:9f:05:5b:4e:cd:1c:ba:
                    9f:ee:2c:e3:1e:26:20:47:f1:53:cd:8c:e9:35:26:
                    b9:ea:37:60:b8:0f:6d:a1:ee:82:97:f5:fe:00:92:
                    71:fc:aa:22:90:06:d3:c2:52:c4:e0:43:36:ba:19:
                    9f:ea:74:b1:51:0e:88:71:b6:f8:e1:71:ad:3a:7c:
                    49:5d:46:03:bf:c4:af:9c:f3:79:24:e7:17:f2:44:
                    46:13:57:89:8f:93:42:57:54:ec:4a:1d:94:17:81:
                    a3:c0:46:df:54:d8:01:b0:ba:7a:e7:9d:53:65:25:
                    b4:cd:ff:6e:66:12:71:b3:e0:4d:61:04:0a:8b:40:
                    c8:6d:fb:73:77:01:9f:d5:b9:b8:9b:39:c8:c0:b7:
                    2b:d9:cf:ff:20:f3:ff:a8:3b:2a:a8:83:4c:55:3e:
                    68:7b:22:20:81:33:4a:b4:93:a4:3f:97:99:c0:46:
                    12:b9:4f:db:f5:2c:9e:03:2e:ad:db:c9:c7:bc:7e:
                    0a:f8:1a:08:8b:9c:3f:ee:22:25:de:fd:1d:3e:00:
                    84:05:eb:69:32:a7:52:32:20:8e:ee:09:e5:a6:8d:
                    4b:1d:13:36:d1:79:0c:dc:c7:48:6f:0a:80:3b:cd:
                    51:fe:0c:be:12:10:d6:48:ee:06:8d:cc:1c:19:c1:
                    64:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:4B:99:57:84:76:66:07:22:84:98:59:C7:16:CE:CC:99:93:ED:A0
            X509v3 Authority Key Identifier:
                keyid:0D:6D:C6:6C:C3:84:36:B6:AC:31:E9:7E:71:2D:21:94:07:C8:3C:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DW3GbMOENrasMel-cS0hlAfIPPQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/d0uZV4R2ZgcihJhZxxbOzJmT7aA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216386

    Signature Algorithm: sha256WithRSAEncryption
         03:83:e6:b8:fc:93:c7:68:7e:09:b3:84:bf:86:29:be:ea:03:
         f9:0d:63:62:48:16:fb:0a:b4:48:9c:34:b3:82:ca:6b:2d:f2:
         63:bc:1c:8c:7f:1b:17:0b:0d:c2:22:e7:37:1f:27:e3:b6:61:
         5a:ff:6f:1d:3d:66:9e:00:70:cc:a2:3f:70:63:9d:14:23:e3:
         f4:bc:d3:89:c3:9b:14:66:10:5a:0e:26:4a:99:96:01:a5:19:
         6f:c5:d6:ac:ea:06:ca:49:a2:d3:ce:87:cb:8e:9b:2b:fb:4e:
         6b:5d:a2:e5:62:4d:ea:d6:78:3c:ab:3b:2e:0c:8d:45:90:b0:
         81:88:2b:53:7b:19:76:e9:47:be:bb:b3:69:37:e5:9a:6d:65:
         65:a2:56:26:0b:88:09:2b:31:a2:5f:f6:38:18:99:87:8c:81:
         a1:d6:74:ed:63:51:da:ca:e2:55:75:00:f2:b3:5e:8f:26:5e:
         e2:f4:19:af:12:06:57:a2:03:cf:79:cf:a6:fb:2c:98:74:ff:
         8a:84:72:91:48:b1:64:d1:4a:cb:67:84:94:5c:c1:93:02:a3:
         07:8d:6d:58:9b:35:04:ae:5d:da:f4:05:dc:07:89:a1:6f:8b:
         de:eb:8a:f1:53:f0:d3:43:5f:e9:ec:d8:f8:e0:d9:ff:1f:db:
         91:41:bf:9d
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ4c4gw8OaPk1Uqcj61Z3NYmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNmRjNjZjYzM4NDM2YjZhYzMxZTk3ZTcxMmQyMTk0MDdj
ODNjZjQwHhcNMjYwNTEyMTU1MDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzRiOTk1Nzg0NzY2NjA3MjI4NDk4NTljNzE2Y2VjYzk5OTNlZGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAompYV0aJ8FW07NHLqf7izjHiYg
R/FTzYzpNSa56jdguA9toe6Cl/X+AJJx/KoikAbTwlLE4EM2uhmf6nSxUQ6Icbb4
4XGtOnxJXUYDv8SvnPN5JOcX8kRGE1eJj5NCV1TsSh2UF4GjwEbfVNgBsLp6551T
ZSW0zf9uZhJxs+BNYQQKi0DIbftzdwGf1bm4mznIwLcr2c//IPP/qDsqqINMVT5o
eyIggTNKtJOkP5eZwEYSuU/b9SyeAy6t28nHvH4K+BoIi5w/7iIl3v0dPgCEBetp
MqdSMiCO7gnlpo1LHRM20XkM3MdIbwqAO81R/gy+EhDWSO4GjcwcGcFk5QIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFHdLmVeEdmYHIoSYWccWzsyZk+2gMB8GA1UdIwQY
MBaAFA1txmzDhDa2rDHpfnEtIZQHyDz0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFczR2JNT0VOcmFzTWVsLWNTMGhsQWZJUFBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zODU5ZTYtNDNhYy00Yzc0LWI0ZmEt
OWRkNTIzMTNhZTdjLzEvZDB1WlY0UjJaZ2NpaEpoWnh4Yk96Sm1UN2FBLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8zODU5ZTYtNDNhYy00Yzc0LWI0ZmEtOWRkNTIzMTNhZTdj
LzEvRFczR2JNT0VOcmFzTWVsLWNTMGhsQWZJUFBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNNQjANBgkqhkiG
9w0BAQsFAAOCAQEAA4PmuPyTx2h+CbOEv4YpvuoD+Q1jYkgW+wq0SJw0s4LKay3y
Y7wcjH8bFwsNwiLnNx8n47ZhWv9vHT1mngBwzKI/cGOdFCPj9LzTicObFGYQWg4m
SpmWAaUZb8XWrOoGykmi086Hy46bK/tOa12i5WJN6tZ4PKs7LgyNRZCwgYgrU3sZ
dulHvruzaTflmm1lZaJWJguICSsxol/2OBiZh4yBodZ07WNR2sriVXUA8rNejyZe
4vQZrxIGV6IDz3nPpvssmHT/ioRykUixZNFKy2eElFzBkwKjB41tWJs1BK5d2vQF
3AeJoW+L3uuK8VPw00Nf6ezY+ODZ/x/bkUG/nQ==
-----END CERTIFICATE-----
Generated at Tue May 12 21:13:00 2026 by rpki-client