Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/bEcb6mJG7iCjlx3MBYnus4nMrP8.asa
File:                     bEcb6mJG7iCjlx3MBYnus4nMrP8.asa (raw, json)
Hash identifier:          YUZIJf3sKNZrkiUCtSJPScroHKhNFxjZxkZytz7Yd84=
Subject key identifier:   6C:47:1B:EA:62:46:EE:20:A3:97:1D:CC:05:89:EE:B3:89:CC:AC:FF
Certificate issuer:       /CN=d286c339aac88ddf33430e46bc9f5e07efcdaea8
Certificate serial:       019F190106A2942C61687EF04F9E6BFE3DEC
Authority key identifier: D2:86:C3:39:AA:C8:8D:DF:33:43:0E:46:BC:9F:5E:07:EF:CD:AE:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/bEcb6mJG7iCjlx3MBYnus4nMrP8.asa
Signing time:             Tue 30 Jun 2026 14:48:45 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:45 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            211776
Providers:                AS: 44306
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:06:a2:94:2c:61:68:7e:f0:4f:9e:6b:fe:3d:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d286c339aac88ddf33430e46bc9f5e07efcdaea8
        Validity
            Not Before: Jun 30 14:48:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6c471bea6246ee20a3971dcc0589eeb389ccacff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:65:db:8f:bd:58:7d:ef:ac:63:5b:bd:1a:37:
                    72:3c:aa:24:b1:97:ef:8e:8c:89:14:1d:85:ba:e4:
                    2e:03:ae:40:b7:ec:54:86:b9:a9:19:bb:09:1a:b7:
                    31:5c:57:ea:10:33:f3:d8:47:97:05:36:8b:c9:61:
                    9a:31:d3:4f:6b:3d:d4:01:5a:f6:8a:67:f4:fd:36:
                    8a:10:1b:fb:5d:bd:22:f7:9b:ad:45:08:0f:d2:7f:
                    c3:35:64:44:8b:b5:e8:8b:89:2d:76:3a:64:73:86:
                    3c:75:83:e9:90:2b:1a:a1:3b:cb:08:1b:cf:fe:4f:
                    8a:b9:db:7e:38:cf:fe:ec:e2:87:00:a9:69:18:31:
                    69:66:b4:87:af:73:91:84:3c:9d:3d:3a:73:f2:fa:
                    43:5f:25:fc:35:8f:ab:e9:23:9f:3e:54:56:6d:6b:
                    75:b5:c5:ea:bc:13:58:58:d5:cf:84:29:d9:ed:12:
                    bd:91:68:27:83:d2:35:55:44:b7:2b:77:a1:67:d5:
                    aa:19:d5:73:32:46:6b:2e:9d:be:06:04:a1:51:95:
                    a1:5f:60:d4:bb:25:4c:87:57:5a:4c:de:20:f4:7a:
                    be:24:d0:86:67:49:ef:9e:34:43:dc:a3:df:52:28:
                    cc:d4:86:71:d1:01:5e:8a:97:cd:8a:4a:ed:78:ac:
                    a0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:47:1B:EA:62:46:EE:20:A3:97:1D:CC:05:89:EE:B3:89:CC:AC:FF
            X509v3 Authority Key Identifier:
                keyid:D2:86:C3:39:AA:C8:8D:DF:33:43:0E:46:BC:9F:5E:07:EF:CD:AE:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/bEcb6mJG7iCjlx3MBYnus4nMrP8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211776

    Signature Algorithm: sha256WithRSAEncryption
         8d:ed:e2:a8:14:7a:23:ef:20:d5:a4:14:7d:e6:2f:6f:20:28:
         94:d2:a6:6c:30:b6:2d:14:6a:32:d2:31:0d:b6:29:04:64:d4:
         9f:36:b8:c7:1b:ba:78:87:7a:3d:c6:a8:3c:85:ea:12:ed:8d:
         98:d7:64:54:d5:8c:22:07:db:51:a1:25:ce:ae:78:18:55:68:
         21:98:48:1f:82:0a:5c:ba:4c:fa:e6:a9:3d:d5:55:23:71:46:
         80:07:45:e0:1d:c7:e9:bc:fc:20:06:5e:c9:f4:11:c4:83:84:
         95:13:6f:6e:2c:d3:9f:47:1f:6d:21:0c:fa:3c:ea:71:4c:57:
         64:3c:c8:9c:67:ed:3a:09:ad:ef:c7:a5:bb:b3:3b:07:f7:b8:
         bb:b9:e6:b0:91:8c:29:c4:1e:b3:e9:63:c6:d7:82:7d:f6:b5:
         fa:fd:e8:28:0b:e6:1c:35:51:3b:0e:df:7a:9c:ac:fa:3c:76:
         8a:1e:7d:a8:04:53:48:42:a5:c2:a7:a2:d5:79:cb:6c:4c:35:
         9d:07:bf:11:d9:94:fb:f9:c2:98:ec:22:5a:04:7a:c6:03:b3:
         47:09:1b:ce:43:cd:ae:6a:e2:12:6c:5a:24:4d:f6:05:bd:d3:
         f8:45:66:d1:5f:86:8c:90:8f:75:79:80:35:cf:23:e8:0c:4b:
         50:9e:49:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:00:07 2026 by rpki-client