Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/wd-iGenEsSEYeN76Et_ASHZXGzk.asa
File:                     wd-iGenEsSEYeN76Et_ASHZXGzk.asa (raw, json)
Hash identifier:          /utXYRth6nsfy1UD2VCrrwyVfDnEH3dST3zTWAwDw20=
Subject key identifier:   C1:DF:A2:19:E9:C4:B1:21:18:78:DE:FA:12:DF:C0:48:76:57:1B:39
Certificate issuer:       /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial:       019F236922745C56D62CAC0ADE82282D41F5
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/wd-iGenEsSEYeN76Et_ASHZXGzk.asa
Signing time:             Thu 02 Jul 2026 15:18:40 +0000
ASPA not before:          Thu 02 Jul 2026 15:18:40 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            3303
Providers:                AS: 174
                          AS: 2914
                          AS: 3320
                          AS: 6939
                          AS: 7473
                          AS: 12956
                          AS: 33891
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 Jul 2026 14:46:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:69:22:74:5c:56:d6:2c:ac:0a:de:82:28:2d:41:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
        Validity
            Not Before: Jul  2 15:18:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c1dfa219e9c4b1211878defa12dfc04876571b39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:75:50:a6:35:67:08:cf:9f:ea:44:cf:ee:11:
                    60:d0:46:cd:1f:65:03:56:ae:3f:d5:f1:6b:f6:4d:
                    ad:53:f2:1c:d5:08:da:1d:90:fd:6d:53:33:03:f9:
                    a9:da:1a:78:24:3a:26:68:5b:04:00:63:9b:87:81:
                    32:e2:e7:35:8c:1c:ba:4a:97:30:8b:82:fb:ab:09:
                    19:83:8c:26:ed:c2:bc:86:d1:a2:23:b1:d5:9b:86:
                    c7:fa:14:17:40:32:46:9a:56:89:18:c6:f2:d9:10:
                    d1:0c:44:39:0d:7c:ea:99:cb:51:15:68:d7:7a:bf:
                    80:61:5b:1d:ed:a6:b4:11:45:f4:ce:e9:1a:18:14:
                    2d:4e:0c:4e:7b:40:3a:46:b2:a0:20:d4:17:b2:2a:
                    d0:4c:32:5e:b5:59:96:e4:35:d7:58:bf:f8:f1:a4:
                    45:93:09:51:0b:51:5c:6b:88:f5:9c:b9:43:52:fd:
                    f9:72:16:76:b8:25:9d:8d:2a:7e:d5:ea:7d:e1:cc:
                    b4:f7:d2:54:2a:91:49:93:f3:f1:2f:3d:ec:50:fc:
                    3c:10:12:e0:82:45:8d:86:75:7d:35:db:6a:53:cb:
                    8d:9b:82:11:2e:bb:8a:bc:c6:2d:04:37:a3:c5:28:
                    0b:c3:5b:c4:42:57:a4:e0:96:c9:cd:55:0a:f4:78:
                    45:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:DF:A2:19:E9:C4:B1:21:18:78:DE:FA:12:DF:C0:48:76:57:1B:39
            X509v3 Authority Key Identifier:
                keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/wd-iGenEsSEYeN76Et_ASHZXGzk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  3303

    Signature Algorithm: sha256WithRSAEncryption
         99:bc:2a:90:43:77:05:31:c7:d8:31:0a:6e:37:1a:cc:19:56:
         93:16:5d:dd:fa:c8:1c:d4:a1:9e:62:f2:5e:d9:e0:6f:b7:8c:
         a1:bd:d1:ba:fd:db:12:40:3f:30:e8:1f:c6:d2:be:aa:1d:e9:
         ef:3f:c3:0e:72:3c:a4:bd:70:47:69:70:5c:2e:4a:e2:ea:0c:
         2e:bf:b2:7a:ca:56:43:4c:6f:99:d4:0c:d7:db:fb:0c:b1:f9:
         c3:6e:da:88:39:ac:3f:65:1c:45:24:6c:27:26:5a:66:8c:83:
         ba:e4:13:9e:69:5b:3a:91:58:f7:10:b0:ba:c9:78:d1:51:f9:
         66:13:1c:13:2b:b9:1d:7b:29:50:e3:08:31:4f:f7:3f:ec:3c:
         3d:9d:e6:4c:95:18:0a:36:d0:46:17:e3:25:9e:1d:41:df:3c:
         5e:79:aa:ab:dd:5b:f7:3c:60:cc:b0:17:41:3a:52:25:34:79:
         76:d6:26:86:11:a9:66:f7:00:93:8f:72:da:71:2d:43:9f:5f:
         e2:bd:ee:53:b3:3e:8e:12:e3:15:9e:4a:56:6e:15:c8:1e:cf:
         76:82:5c:bd:e8:a8:77:6d:11:13:67:c5:c6:1d:bb:f7:41:1b:
         bd:92:b9:41:15:7e:bb:7a:cf:e7:3a:8f:1d:e0:44:01:85:8f:
         c9:23:fd:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:57:31 2026 by rpki-client