Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/iDmrGyT2_8VfHmuTPupUa0IuNV4.asa
File:                     iDmrGyT2_8VfHmuTPupUa0IuNV4.asa (raw, json)
Hash identifier:          Ypgogs+5S00XaUTZPDtGkhiyVts+itcvKy82afM0XuA=
Subject key identifier:   88:39:AB:1B:24:F6:FF:C5:5F:1E:6B:93:3E:EA:54:6B:42:2E:35:5E
Certificate issuer:       /CN=ed1a57a4f186fc227f2e01e1c9c46d85ab3beddc
Certificate serial:       019F2368F692D7FAC26807C8D28A9E68D252
Authority key identifier: ED:1A:57:A4:F1:86:FC:22:7F:2E:01:E1:C9:C4:6D:85:AB:3B:ED:DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7RpXpPGG_CJ_LgHhycRthas77dw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/iDmrGyT2_8VfHmuTPupUa0IuNV4.asa
Signing time:             Thu 02 Jul 2026 15:18:29 +0000
ASPA not before:          Thu 02 Jul 2026 15:18:29 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            216386
Providers:                AS: 8772
                          AS: 29632
                          AS: 211509
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/7RpXpPGG_CJ_LgHhycRthas77dw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/7RpXpPGG_CJ_LgHhycRthas77dw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7RpXpPGG_CJ_LgHhycRthas77dw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:68:f6:92:d7:fa:c2:68:07:c8:d2:8a:9e:68:d2:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed1a57a4f186fc227f2e01e1c9c46d85ab3beddc
        Validity
            Not Before: Jul  2 15:18:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8839ab1b24f6ffc55f1e6b933eea546b422e355e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f8:b9:b5:19:16:8a:8c:dd:45:0c:88:79:ed:
                    02:fd:de:da:26:c2:b1:ee:a3:f9:52:85:68:05:1b:
                    d1:2b:b1:d3:8e:2a:d6:12:1d:bc:ac:61:93:30:bd:
                    31:e5:42:1e:2a:68:6e:03:63:7a:fd:bb:b7:bd:eb:
                    56:3d:6d:01:66:89:aa:45:ac:6c:f8:34:52:f8:3b:
                    6a:72:0c:58:eb:0b:f4:fd:2a:fe:9a:95:04:da:d5:
                    6e:c9:99:43:4b:40:89:6d:72:36:83:b9:8d:1c:7b:
                    3f:72:4d:19:38:17:a8:8e:52:21:05:4e:61:93:66:
                    ea:6a:fa:8a:e5:7c:0c:cc:12:a6:5f:e2:22:2b:3e:
                    e3:22:82:00:18:01:23:9c:27:9c:06:59:b8:f0:bb:
                    7f:57:58:01:fa:b8:55:b7:cf:09:06:21:88:0d:de:
                    7f:eb:ed:53:99:e5:12:e7:47:96:a9:54:e2:46:8a:
                    91:29:6b:1d:4d:b6:6a:e0:b5:85:cb:d3:08:a1:e7:
                    70:eb:72:01:56:8c:b8:1f:15:84:3f:c5:1b:8d:bd:
                    bb:39:b6:1c:77:80:f3:81:ab:67:78:80:56:9c:04:
                    58:72:c4:cd:25:35:33:74:16:36:0d:c7:df:8f:7f:
                    15:86:02:21:d2:45:ed:8b:9c:1f:4b:54:a9:11:7f:
                    e5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:39:AB:1B:24:F6:FF:C5:5F:1E:6B:93:3E:EA:54:6B:42:2E:35:5E
            X509v3 Authority Key Identifier:
                keyid:ED:1A:57:A4:F1:86:FC:22:7F:2E:01:E1:C9:C4:6D:85:AB:3B:ED:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7RpXpPGG_CJ_LgHhycRthas77dw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/iDmrGyT2_8VfHmuTPupUa0IuNV4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/7RpXpPGG_CJ_LgHhycRthas77dw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216386

    Signature Algorithm: sha256WithRSAEncryption
         71:b1:01:c2:74:c7:2f:f0:c7:da:db:26:0c:35:f6:df:71:c8:
         cb:46:be:dc:e8:e9:26:5b:96:3a:60:2b:91:10:ae:5d:f4:d6:
         33:48:38:8a:47:a8:d9:0f:cc:e0:84:a0:6f:8c:fc:9f:f3:7a:
         f0:40:a9:43:1c:9c:88:7c:8f:37:3c:c6:5c:a3:d0:91:96:61:
         83:bc:a3:b3:9a:02:af:c5:d0:b4:6c:f7:78:5f:1c:81:ee:49:
         71:f6:44:a9:ce:4f:bc:a6:19:3d:e6:cd:36:3d:55:5d:df:1c:
         c1:ec:a4:bb:31:81:69:47:b5:27:fe:8c:be:da:c0:b2:fc:30:
         32:6c:f2:7a:ae:9e:b8:97:d2:93:de:14:ab:a3:18:11:b3:e9:
         dd:f9:3c:10:f6:95:70:72:5f:87:f7:8b:9b:89:64:b6:0f:c3:
         4b:d1:a8:2e:63:5f:d9:3a:7d:a7:4a:85:e5:5b:dd:b9:1b:c4:
         0e:d5:79:7c:dc:c2:89:55:38:8e:0b:59:db:d5:5b:74:27:7d:
         21:e9:0c:32:29:1d:1b:96:56:35:a3:05:32:38:e6:41:e5:0f:
         2e:35:8f:16:09:4b:3f:41:3d:e4:9f:9f:6f:c4:2b:9e:7b:12:
         82:03:fd:46:8d:0f:a3:f5:c7:40:8d:bc:01:db:96:4d:f1:19:
         71:6a:90:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:00:09 2026 by rpki-client