Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/mdi8isJF9ZQ0I7Jg6Yr0cVHa8Ic.asa
File:                     mdi8isJF9ZQ0I7Jg6Yr0cVHa8Ic.asa (raw, json)
Hash identifier:          54Ei/fKavstT42M7Nu3Fn+AfVQtGsu2BCI644ANc1Xs=
Subject key identifier:   99:D8:BC:8A:C2:45:F5:94:34:23:B2:60:E9:8A:F4:71:51:DA:F0:87
Certificate issuer:       /CN=3aea4dae3e994fd9fe7be7433e42f96f67159378
Certificate serial:       019FD376EDD71879FAF44B9C4F0F92CF7116
Authority key identifier: 3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/mdi8isJF9ZQ0I7Jg6Yr0cVHa8Ic.asa
Signing time:             Wed 05 Aug 2026 19:46:54 +0000
ASPA not before:          Wed 05 Aug 2026 19:46:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            209460
Providers:                AS: 41051
                          AS: 209533
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 22:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:d3:76:ed:d7:18:79:fa:f4:4b:9c:4f:0f:92:cf:71:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aea4dae3e994fd9fe7be7433e42f96f67159378
        Validity
            Not Before: Aug  5 19:46:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=99d8bc8ac245f5943423b260e98af47151daf087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:42:ed:b7:00:29:33:cd:aa:b3:5c:2f:a5:66:
                    18:28:ac:14:72:1f:ee:63:89:d0:f0:e3:6d:45:a1:
                    44:1c:59:9e:c1:76:f7:ff:f3:6a:ce:cb:a8:95:a8:
                    31:57:da:29:40:19:52:2b:e7:51:86:7e:1e:46:97:
                    94:57:e1:57:e0:a5:ff:6e:64:14:50:8a:f8:23:d7:
                    d7:ab:c3:77:71:5b:73:96:3a:7e:51:ee:a9:01:51:
                    da:36:a3:96:2a:0c:52:b3:29:5f:12:13:38:4d:44:
                    22:46:6a:dc:2b:6c:53:68:62:b2:d0:dd:49:cf:0f:
                    03:ec:8a:9e:3b:34:aa:83:2a:98:28:f5:85:23:ab:
                    9b:41:2d:09:cd:09:16:5f:43:ff:c5:ed:82:03:40:
                    3b:0a:da:2a:6d:14:ca:77:96:e2:08:cb:55:fa:57:
                    70:d6:12:a7:88:1e:9d:7b:d0:53:fc:b1:8c:be:cc:
                    fc:ea:62:c3:d6:62:24:f5:e7:28:ec:a6:eb:67:41:
                    30:5b:ce:e7:4c:7d:bf:5d:8a:df:76:9d:54:74:a4:
                    21:e7:c1:1a:fe:55:19:72:82:1b:a4:4a:9d:2c:bb:
                    43:53:27:b9:6b:7a:e7:f2:f6:d1:23:1b:39:03:f6:
                    19:d1:de:4a:0c:2d:6d:08:61:f6:ff:82:73:83:88:
                    f5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D8:BC:8A:C2:45:F5:94:34:23:B2:60:E9:8A:F4:71:51:DA:F0:87
            X509v3 Authority Key Identifier:
                keyid:3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/mdi8isJF9ZQ0I7Jg6Yr0cVHa8Ic.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209460

    Signature Algorithm: sha256WithRSAEncryption
         6d:21:65:ba:c6:d7:67:f5:91:4f:36:19:3b:fd:c9:02:ec:51:
         51:12:34:2e:45:5a:c2:24:99:71:16:18:68:12:78:8c:5f:b3:
         93:86:46:be:4b:8e:04:d6:31:10:f9:c6:61:05:ba:97:1a:f6:
         48:d1:93:fd:f7:ea:ad:7f:7b:74:bd:77:8b:23:b5:8b:36:b1:
         dc:af:f6:91:b6:44:0e:50:a5:f9:89:94:51:0c:12:09:fe:0e:
         89:a6:57:08:17:a1:5c:fe:41:00:5d:50:cf:61:13:cf:ff:c5:
         4b:2c:77:a6:b2:f1:2d:9c:2c:cd:39:e7:d5:2d:a1:d9:99:01:
         fa:31:0e:29:30:14:39:4a:d9:87:50:83:07:30:c5:74:5e:8f:
         c1:1b:86:f6:6a:f7:52:6f:64:f2:f0:83:49:0f:34:b4:cc:c0:
         ce:1e:ff:74:29:cc:3c:31:0d:fb:1d:c9:cd:a6:74:5e:01:01:
         8d:14:15:13:01:4a:d7:9b:30:c4:bf:92:45:d8:5a:e9:b1:07:
         4f:7a:34:f9:3d:0d:62:b2:d5:6c:07:d4:86:2f:a5:60:c1:d8:
         a3:bd:9e:c8:84:19:3c:50:d5:04:11:b4:93:e4:90:1a:f5:92:
         82:91:67:33:86:58:fb:1b:10:5e:63:ee:bd:b6:28:9c:52:1e:
         20:2e:66:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:50:23 2026 by rpki-client