Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/8e09ab-6108-4421-b38c-4d071c7b5187/1/RMzDvmtOqFCdl5vHYWn-4JPkhBc.asa
File:                     RMzDvmtOqFCdl5vHYWn-4JPkhBc.asa (raw, json)
Hash identifier:          6FBTJTQJCqZB8z+0sqmUko06T36YD4suvUIzStU/iZs=
Subject key identifier:   44:CC:C3:BE:6B:4E:A8:50:9D:97:9B:C7:61:69:FE:E0:93:E4:84:17
Certificate issuer:       /CN=d8e02ea4f386c7cf6e690191b59e0e1a6f7bbf56
Certificate serial:       01A025E82C8724D5F85335DDD4C31DC94397
Authority key identifier: D8:E0:2E:A4:F3:86:C7:CF:6E:69:01:91:B5:9E:0E:1A:6F:7B:BF:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2OAupPOGx89uaQGRtZ4OGm97v1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/8e09ab-6108-4421-b38c-4d071c7b5187/1/RMzDvmtOqFCdl5vHYWn-4JPkhBc.asa
Signing time:             Fri 21 Aug 2026 19:59:27 +0000
ASPA not before:          Fri 21 Aug 2026 19:59:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            212470
Providers:                AS: 8772
                          AS: 11967
                          AS: 29632
                          AS: 39249
                          AS: 41051
                          AS: 52025
                          AS: 207656
                          AS: 209533
                          AS: 212895
                          AS: 214757
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/8e09ab-6108-4421-b38c-4d071c7b5187/1/2OAupPOGx89uaQGRtZ4OGm97v1Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/8e09ab-6108-4421-b38c-4d071c7b5187/1/2OAupPOGx89uaQGRtZ4OGm97v1Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2OAupPOGx89uaQGRtZ4OGm97v1Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 19:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:25:e8:2c:87:24:d5:f8:53:35:dd:d4:c3:1d:c9:43:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8e02ea4f386c7cf6e690191b59e0e1a6f7bbf56
        Validity
            Not Before: Aug 21 19:59:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=44ccc3be6b4ea8509d979bc76169fee093e48417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:73:c7:3e:6a:8d:fb:e5:f3:f1:73:22:d1:b5:
                    4a:02:bb:6a:63:b2:fa:72:1b:b2:d7:62:b9:e3:66:
                    32:5a:80:a3:39:48:8e:51:60:69:72:26:64:e1:7d:
                    6e:c2:30:ba:25:e7:1e:d3:57:53:29:67:47:ca:61:
                    df:03:ac:a1:58:1b:18:21:56:ab:74:16:86:38:34:
                    c7:8b:1f:d4:a5:50:c6:40:e4:2c:9b:8b:c2:e1:f6:
                    94:41:d2:a7:61:2c:2c:f7:05:8d:09:bb:a0:85:4c:
                    35:a1:9b:f2:04:2e:a4:27:4f:95:5e:d0:1d:60:3a:
                    5b:0c:05:ca:85:ba:d2:e1:f0:9b:9a:32:6b:a5:44:
                    84:e0:ab:15:55:8f:72:50:fa:fc:42:44:3d:fa:69:
                    e9:d1:94:3b:84:18:d3:aa:ab:ba:99:9f:c9:4e:dd:
                    fd:73:76:9a:da:67:42:a1:2e:72:79:6f:4b:b1:04:
                    4d:63:7b:1d:c4:87:86:9a:ae:37:73:4f:8a:3e:f6:
                    c4:c7:3c:37:01:ed:ea:47:a2:5a:46:d7:71:ec:98:
                    d9:44:78:ce:63:21:3d:d9:2b:b0:47:d8:a5:28:f7:
                    0a:82:e3:b0:e0:da:ce:7b:ef:bc:cb:83:25:5b:6f:
                    47:d8:af:7e:5a:f9:b0:70:f5:22:29:18:80:a3:a9:
                    d5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:CC:C3:BE:6B:4E:A8:50:9D:97:9B:C7:61:69:FE:E0:93:E4:84:17
            X509v3 Authority Key Identifier:
                keyid:D8:E0:2E:A4:F3:86:C7:CF:6E:69:01:91:B5:9E:0E:1A:6F:7B:BF:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2OAupPOGx89uaQGRtZ4OGm97v1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8e09ab-6108-4421-b38c-4d071c7b5187/1/RMzDvmtOqFCdl5vHYWn-4JPkhBc.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8e09ab-6108-4421-b38c-4d071c7b5187/1/2OAupPOGx89uaQGRtZ4OGm97v1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212470

    Signature Algorithm: sha256WithRSAEncryption
         98:22:cc:06:5d:c8:b4:23:cc:13:ff:b5:19:74:46:8a:48:c3:
         71:56:ec:86:74:9d:33:51:cd:c1:02:86:17:64:f2:ef:d6:02:
         e1:e1:3d:7d:b0:a8:55:d4:18:53:99:7a:0a:74:0a:23:07:46:
         ee:a2:25:22:03:36:7e:91:15:fe:f6:d8:43:b8:c8:b9:e4:5b:
         ff:3d:54:bf:9f:af:3f:9c:68:b4:e4:fc:c0:aa:09:34:f9:8f:
         6a:17:62:6a:52:d2:5c:a6:8f:d0:67:97:d9:f3:84:8a:d0:b2:
         16:24:2b:1b:f2:c1:a7:3d:f1:43:38:af:45:bd:74:a9:b3:5e:
         1e:9f:42:b2:22:38:34:56:75:27:a8:49:02:8c:6d:cd:76:bc:
         3e:a0:31:0a:02:cd:58:8b:46:e5:dc:81:13:94:59:a4:5d:9a:
         6e:27:8c:af:87:c7:71:30:8b:e2:fe:12:ea:7f:5d:ac:91:8a:
         4f:4b:ba:fe:2b:ba:e7:90:6d:b2:1d:3e:90:91:65:26:54:9b:
         7e:9c:71:3c:1a:f9:c6:11:3e:b3:f3:b8:61:3b:5d:e8:40:60:
         12:c4:97:c7:3f:c7:ed:0a:6c:8a:77:ce:7f:92:bd:70:72:99:
         c0:f6:b6:41:a0:bc:36:c1:c7:23:7d:d9:91:14:29:06:7e:ee:
         4a:21:db:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 05:30:46 2026 by rpki-client