Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/Q8wWq7EcHqwQzxMdViJIZ-e3vnM.asa
File:                     Q8wWq7EcHqwQzxMdViJIZ-e3vnM.asa (raw, json)
Hash identifier:          IWdQCgfAESFcbnSOXJTTXv/1cj83MCQ+nkxfdyN3N2g=
Subject key identifier:   43:CC:16:AB:B1:1C:1E:AC:10:CF:13:1D:56:22:48:67:E7:B7:BE:73
Certificate issuer:       /CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Certificate serial:       019F190143524CBA8C03D5B16823F2A1DFEF
Authority key identifier: 08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/Q8wWq7EcHqwQzxMdViJIZ-e3vnM.asa
Signing time:             Tue 30 Jun 2026 14:49:00 +0000
ASPA not before:          Tue 30 Jun 2026 14:49:00 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            205929
Providers:                AS: 1299
                          AS: 6830
                          AS: 6939
                          AS: 34927
                          AS: 58299
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:43:52:4c:ba:8c:03:d5:b1:68:23:f2:a1:df:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
        Validity
            Not Before: Jun 30 14:49:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=43cc16abb11c1eac10cf131d56224867e7b7be73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b1:3b:67:d9:ed:29:d1:6f:3c:63:a1:ab:93:
                    5f:52:8e:26:34:9d:86:80:fd:8a:28:3e:8c:f6:71:
                    a9:f8:09:16:ed:15:79:98:9b:0c:16:30:14:23:7c:
                    3b:60:f2:31:89:cd:b4:bf:c2:98:48:e4:56:97:b4:
                    44:79:ec:22:c6:c6:92:b8:32:43:80:b8:17:e1:8c:
                    08:e1:2e:a3:61:39:f3:60:51:6a:01:04:be:02:36:
                    19:85:ba:c9:2b:24:6c:3e:45:3c:32:49:9e:b0:08:
                    b1:a3:cc:b8:d9:85:25:a7:5a:5a:7d:fa:c2:3a:a0:
                    dc:ff:6e:e0:e4:ef:e9:29:00:1b:bb:b1:e6:87:cc:
                    2d:8c:af:14:64:fb:2b:a0:a4:a7:3c:57:4d:64:31:
                    18:b0:b6:bb:ec:a3:39:5a:d5:75:9a:5a:6f:1e:74:
                    8e:3a:6c:10:b0:77:7a:58:83:12:9e:45:db:25:9f:
                    81:27:3d:e3:2c:0e:3e:ab:9f:b0:b2:38:e1:c2:e4:
                    3f:f3:e5:f5:b8:4c:b7:56:56:73:2a:9d:c3:55:49:
                    fe:41:47:7f:ef:d6:15:67:57:7f:10:0d:9b:20:e6:
                    a8:34:4d:f8:50:ec:53:fb:8b:3c:aa:58:9c:1a:42:
                    5a:7a:96:0f:f5:42:ec:66:1f:a2:1a:8b:02:2a:31:
                    59:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:CC:16:AB:B1:1C:1E:AC:10:CF:13:1D:56:22:48:67:E7:B7:BE:73
            X509v3 Authority Key Identifier:
                keyid:08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/Q8wWq7EcHqwQzxMdViJIZ-e3vnM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205929

    Signature Algorithm: sha256WithRSAEncryption
         4a:78:f2:39:46:d5:99:91:63:9f:ac:cb:6b:70:b6:d0:53:3f:
         c5:8d:27:f8:10:00:47:cd:eb:1a:53:04:9b:e6:cd:c0:f6:f1:
         da:31:9f:68:0e:b7:c6:93:fa:ee:b9:a0:18:5b:f9:24:6f:79:
         b0:a0:46:37:70:04:36:04:36:e1:10:bc:3b:f0:88:c7:ec:a3:
         3b:a9:d3:a3:3b:9d:8f:1f:e5:69:fa:42:c9:19:47:70:28:69:
         b5:2d:aa:1e:91:d6:db:22:d2:90:38:ba:d4:0d:15:36:8a:ae:
         45:a9:1d:d6:03:07:50:92:f4:16:6c:35:f9:10:24:b4:c7:de:
         46:df:63:6a:e4:1c:50:5c:7e:b8:73:04:b7:84:69:d5:be:b4:
         4b:c7:0d:b0:2a:d8:ec:b6:1d:13:4c:b5:0b:85:68:9a:1a:5f:
         be:06:35:2f:46:1e:07:c4:58:d9:a9:63:08:33:c1:f8:44:86:
         6d:57:59:89:91:33:11:af:d2:62:ca:68:9a:ab:5f:be:86:00:
         eb:1c:36:c5:69:46:50:85:cb:ef:a7:14:46:39:27:a3:95:62:
         7e:ae:c7:e2:a6:6f:59:1a:61:e4:76:9a:0f:5d:52:f6:aa:0f:
         ac:a9:e2:75:ab:b2:92:3b:cd:03:fa:7f:36:b5:29:c2:9b:e6:
         98:df:f9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:39 2026 by rpki-client