Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/8NgcjLPwi4C-rpW04ANs6GcSgJ8.asa
File:                     8NgcjLPwi4C-rpW04ANs6GcSgJ8.asa (raw, json)
Hash identifier:          iTtRgVbNtKgQ9MR4BoISBrN3IJ+TIW9LtTTrDeAFx1k=
Subject key identifier:   F0:D8:1C:8C:B3:F0:8B:80:BE:AE:95:B4:E0:03:6C:E8:67:12:80:9F
Certificate issuer:       /CN=023f63fb2bfc631c44f4bb6d94bdf28b3ec9dff7
Certificate serial:       019F190117FF95B1ECEB77161622BB7F6EFA
Authority key identifier: 02:3F:63:FB:2B:FC:63:1C:44:F4:BB:6D:94:BD:F2:8B:3E:C9:DF:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/8NgcjLPwi4C-rpW04ANs6GcSgJ8.asa
Signing time:             Tue 30 Jun 2026 14:48:49 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:49 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214710
Providers:                AS: 8478
                          AS: 25400
                          AS: 41164
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 14:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:17:ff:95:b1:ec:eb:77:16:16:22:bb:7f:6e:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=023f63fb2bfc631c44f4bb6d94bdf28b3ec9dff7
        Validity
            Not Before: Jun 30 14:48:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f0d81c8cb3f08b80beae95b4e0036ce86712809f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:89:05:19:e2:3c:ce:49:23:07:b1:2a:b0:96:
                    13:b9:4d:b1:d4:2f:9f:5d:db:cd:8b:cb:ad:e5:c8:
                    85:17:b7:08:0d:18:3e:54:c8:da:f6:2b:a6:1c:87:
                    46:03:d9:b8:7d:ee:6a:19:d0:c2:1f:ec:ac:04:ea:
                    09:5e:6d:ce:d2:4f:3f:64:4c:b9:e7:fc:82:4c:1c:
                    a5:a6:46:02:d5:90:3b:b7:eb:ab:21:62:dd:1a:31:
                    09:24:67:ae:cf:90:f0:4e:35:ab:94:2d:19:d5:9c:
                    b8:a4:e3:1b:22:e9:6b:54:8a:38:cd:fe:c5:e7:2b:
                    08:83:fc:20:9f:5d:9b:f7:60:a8:12:5e:df:f2:60:
                    a8:ca:88:35:3a:2c:9b:bc:01:94:24:42:ff:71:5d:
                    9e:70:9c:a0:6b:ff:fe:10:ef:d9:e4:d0:c9:7a:1b:
                    67:34:9e:9b:ea:b3:d9:a3:5f:8c:ee:85:91:27:db:
                    25:c7:c0:76:33:31:84:41:64:5f:db:31:63:2f:3a:
                    5b:5a:d0:9d:6a:44:0b:6c:fb:9f:4d:c9:b5:11:e4:
                    f4:31:f4:59:30:af:ec:16:fd:05:9c:a4:ad:0b:2e:
                    fe:59:5b:64:cf:7a:47:cc:23:80:a4:21:06:7f:ad:
                    bb:c5:ef:e9:cf:66:3c:dc:b7:d4:29:1d:d4:18:2a:
                    87:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D8:1C:8C:B3:F0:8B:80:BE:AE:95:B4:E0:03:6C:E8:67:12:80:9F
            X509v3 Authority Key Identifier:
                keyid:02:3F:63:FB:2B:FC:63:1C:44:F4:BB:6D:94:BD:F2:8B:3E:C9:DF:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/8NgcjLPwi4C-rpW04ANs6GcSgJ8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214710

    Signature Algorithm: sha256WithRSAEncryption
         7b:79:41:16:13:62:82:d8:38:a6:87:56:5c:b4:c4:42:1a:20:
         46:a4:33:00:47:e1:88:32:01:4d:19:f3:fd:55:d1:c0:6c:00:
         5e:8a:c2:ee:18:66:fe:0c:d3:6d:71:41:81:63:e1:24:b3:d4:
         79:70:b6:87:5e:38:57:60:10:bd:21:bf:93:6f:db:fb:e2:e5:
         2c:7b:bc:f0:66:69:4c:b8:ce:c4:b1:7f:54:58:7a:f0:7a:19:
         89:f8:04:3c:93:33:6f:69:5a:f3:2e:20:23:ee:a6:91:f3:b6:
         9f:e9:15:80:ce:df:d6:65:2b:51:d3:ae:f9:14:f2:89:92:27:
         bc:0e:5a:41:f0:f6:cf:02:2c:84:97:e6:db:9b:c2:b3:85:4e:
         c4:cd:34:c8:64:f1:29:77:41:8c:a9:ad:36:ac:d3:28:bc:28:
         07:fc:d0:18:67:f3:d9:72:36:c0:6b:d4:d7:0c:1e:d8:dc:71:
         e4:39:5c:da:7e:8a:2a:71:7f:39:d6:83:28:3b:9f:5d:59:3d:
         b2:24:44:d2:89:92:dc:55:e4:94:d3:9e:24:1e:e6:87:0f:5c:
         cc:28:13:44:a6:8b:6b:be:b2:d8:d9:6d:a4:22:c2:fc:09:6a:
         cf:63:3d:fc:2f:74:56:3e:0a:b8:96:e6:98:ba:97:2c:77:7e:
         86:ef:56:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:28:00 2026 by rpki-client