Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/az_a0F3S6ZaTZm6F3odUHZ8rOGk.asa
File:                     az_a0F3S6ZaTZm6F3odUHZ8rOGk.asa (raw, json)
Hash identifier:          ppEl12OE1RE5HBk8uQqWZRulcPOxwPqtDMEXFlXrnBQ=
Subject key identifier:   6B:3F:DA:D0:5D:D2:E9:96:93:66:6E:85:DE:87:54:1D:9F:2B:38:69
Certificate issuer:       /CN=f08c19648470091fca7c0ed79ce9df6bdaa0cdff
Certificate serial:       01A183D7CB730429DA84650322625E02693E
Authority key identifier: F0:8C:19:64:84:70:09:1F:CA:7C:0E:D7:9C:E9:DF:6B:DA:A0:CD:FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8IwZZIRwCR_KfA7XnOnfa9qgzf8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/az_a0F3S6ZaTZm6F3odUHZ8rOGk.asa
Signing time:             Wed 28 Oct 2026 18:48:39 +0000
ASPA not before:          Wed 28 Oct 2026 18:48:39 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            216222
Providers:                AS: 198831
                          AS: 216155
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8IwZZIRwCR_KfA7XnOnfa9qgzf8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:83:d7:cb:73:04:29:da:84:65:03:22:62:5e:02:69:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f08c19648470091fca7c0ed79ce9df6bdaa0cdff
        Validity
            Not Before: Oct 28 18:48:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6b3fdad05dd2e99693666e85de87541d9f2b3869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:27:53:6e:51:07:f9:c6:c6:58:9b:cd:4f:a2:
                    a1:eb:75:b0:24:b0:19:83:36:2b:26:8e:a9:9a:38:
                    ca:8c:d4:68:b4:04:b9:4d:d7:fd:6d:9e:fa:b3:1d:
                    b4:e1:e3:11:a0:55:33:e8:6a:26:f8:39:1a:99:8f:
                    ea:8c:94:8c:ca:e0:b0:89:1e:ff:05:2e:9e:4b:9b:
                    8f:8a:95:d0:31:44:e5:90:b0:b2:75:f1:b4:25:fb:
                    6d:c7:d4:df:2f:ec:4e:d1:43:ad:df:e9:a0:bd:76:
                    db:29:a5:97:6f:88:8f:cd:30:5d:5c:6d:58:23:67:
                    ce:a3:cc:ba:d9:4f:c9:22:20:47:e7:b1:f2:4e:f4:
                    47:2c:21:04:b1:3e:11:30:08:7e:d3:10:16:99:57:
                    90:73:c5:8a:90:74:39:1b:6f:ea:88:2c:01:09:68:
                    72:6a:59:53:a3:fa:c5:20:d1:5f:e4:f5:1e:f8:8b:
                    40:39:29:79:2f:d6:3b:98:4d:f7:0e:36:0d:34:0a:
                    d9:0c:bc:82:47:00:b0:8d:2c:b2:52:de:47:6a:cf:
                    f6:01:82:f7:3c:fa:10:e3:30:3a:33:f2:e1:72:39:
                    14:e0:a5:2d:c8:02:df:14:fc:cf:42:33:ef:85:46:
                    f3:49:c2:60:1f:c0:57:87:ef:0f:72:fa:86:3e:d6:
                    e5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:3F:DA:D0:5D:D2:E9:96:93:66:6E:85:DE:87:54:1D:9F:2B:38:69
            X509v3 Authority Key Identifier:
                keyid:F0:8C:19:64:84:70:09:1F:CA:7C:0E:D7:9C:E9:DF:6B:DA:A0:CD:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8IwZZIRwCR_KfA7XnOnfa9qgzf8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/az_a0F3S6ZaTZm6F3odUHZ8rOGk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216222

    Signature Algorithm: sha256WithRSAEncryption
         34:36:83:d5:f1:b6:e8:9c:ed:d9:3e:2c:76:d3:fb:a2:52:ff:
         57:50:9b:4e:cc:d7:52:c4:f2:8f:f5:f6:89:bb:ea:b1:fd:cd:
         aa:56:99:58:2a:5c:c1:fb:6e:91:18:e4:01:b7:2c:83:e1:02:
         61:06:f7:ad:79:46:0d:9e:3a:6e:e8:a4:b1:5d:59:57:e6:8e:
         71:34:90:da:a2:12:cb:51:01:74:cf:59:15:9a:28:c4:84:38:
         1b:72:ca:99:cf:a3:59:06:fc:30:12:2f:72:ec:7f:0f:96:4f:
         20:8b:1e:6f:7e:24:93:b9:39:c0:a3:e4:2a:fc:07:a2:eb:d4:
         79:89:ec:87:d9:82:05:44:64:e4:d6:63:86:23:ff:5f:9b:01:
         e6:25:2e:c6:98:09:01:83:c2:5e:ea:4e:15:dc:20:9b:03:0f:
         28:80:de:4a:d8:e0:35:1e:ef:a3:d2:cf:24:7d:a2:c8:ac:a6:
         f7:03:6a:2b:aa:2a:aa:dd:88:32:bc:42:16:84:aa:cf:a8:0d:
         04:50:9a:6f:a6:5f:4b:06:2a:7a:1c:c6:a3:47:1e:3a:b7:64:
         0a:3a:68:12:07:9f:61:6e:fc:a2:47:88:2a:b3:01:b1:93:f6:
         68:4f:43:15:2c:6e:7c:13:d7:9f:8b:26:65:7a:f7:b3:e4:c9:
         e3:fc:cb:3d
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAaGD18tzBCnahGUDImJeAmk+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwOGMxOTY0ODQ3MDA5MWZjYTdjMGVkNzljZTlkZjZiZGFh
MGNkZmYwHhcNMjYxMDI4MTg0ODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjNmZGFkMDVkZDJlOTk2OTM2NjZlODVkZTg3NTQxZDlmMmIzODY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSdTblEH+cbGWJvNT6Kh63WwJLAZ
gzYrJo6pmjjKjNRotAS5Tdf9bZ76sx204eMRoFUz6Gom+DkamY/qjJSMyuCwiR7/
BS6eS5uPipXQMUTlkLCydfG0Jfttx9TfL+xO0UOt3+mgvXbbKaWXb4iPzTBdXG1Y
I2fOo8y62U/JIiBH57HyTvRHLCEEsT4RMAh+0xAWmVeQc8WKkHQ5G2/qiCwBCWhy
allTo/rFINFf5PUe+ItAOSl5L9Y7mE33DjYNNArZDLyCRwCwjSyyUt5Has/2AYL3
PPoQ4zA6M/LhcjkU4KUtyALfFPzPQjPvhUbzScJgH8BXh+8PcvqGPtblBQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFGs/2tBd0umWk2Zuhd6HVB2fKzhpMB8GA1UdIwQY
MBaAFPCMGWSEcAkfynwO15zp32vaoM3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEl3WlpJUndDUl9LZkE3WG5PbmZhOXFnemY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9jNTQ4NWUtMzgyNi00M2U4LThiZTIt
ZDFmZThjYjAxNDU2LzEvYXpfYTBGM1M2WmFUWm02RjNvZFVIWjhyT0drLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9jNTQ4NWUtMzgyNi00M2U4LThiZTItZDFmZThjYjAxNDU2
LzEvOEl3WlpJUndDUl9LZkE3WG5PbmZhOXFnemY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNMnjANBgkqhkiG
9w0BAQsFAAOCAQEANDaD1fG26Jzt2T4sdtP7olL/V1CbTszXUsTyj/X2ibvqsf3N
qlaZWCpcwftukRjkAbcsg+ECYQb3rXlGDZ46buiksV1ZV+aOcTSQ2qISy1EBdM9Z
FZooxIQ4G3LKmc+jWQb8MBIvcux/D5ZPIIseb34kk7k5wKPkKvwHouvUeYnsh9mC
BURk5NZjhiP/X5sB5iUuxpgJAYPCXupOFdwgmwMPKIDeStjgNR7vo9LPJH2iyKym
9wNqK6oqqt2IMrxCFoSqz6gNBFCab6ZfSwYqehzGo0ceOrdkCjpoEgefYW78okeI
KrMBsZP2aE9DFSxufBPXn4smZXr3s+TJ4/zLPQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 14:35:02 2026 by rpki-client