Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cwaVlyUcrRob1yQGfrzbyd4SXY8.asa
File:                     cwaVlyUcrRob1yQGfrzbyd4SXY8.asa (raw, json)
Hash identifier:          hxp7g2uf5EIcMdBETFCVoZR6vdDL2LqgNsCC4ZPPusU=
Subject key identifier:   73:06:95:97:25:1C:AD:1A:1B:D7:24:06:7E:BC:DB:C9:DE:12:5D:8F
Certificate issuer:       /CN=723335b0507554ae6c6cc294750764cafd0bd688
Certificate serial:       019CE332EB14638039F49079F3C91B691E04
Authority key identifier: 72:33:35:B0:50:75:54:AE:6C:6C:C2:94:75:07:64:CA:FD:0B:D6:88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cjM1sFB1VK5sbMKUdQdkyv0L1og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cwaVlyUcrRob1yQGfrzbyd4SXY8.asa
Signing time:             Thu 12 Mar 2026 17:58:10 +0000
ASPA not before:          Thu 12 Mar 2026 17:58:10 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            208790
Providers:                AS: 50338
                          AS: 209533
                          AS: 212895
                          AS: 214675
                          AS: 214757
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cjM1sFB1VK5sbMKUdQdkyv0L1og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Mar 2026 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e3:32:eb:14:63:80:39:f4:90:79:f3:c9:1b:69:1e:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=723335b0507554ae6c6cc294750764cafd0bd688
        Validity
            Not Before: Mar 12 17:58:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=73069597251cad1a1bd724067ebcdbc9de125d8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:42:4a:3e:d9:7d:76:ee:eb:98:e5:f9:fe:9f:
                    ba:75:3e:25:a7:fa:fb:83:bb:bf:0a:50:07:ca:bd:
                    63:04:49:cf:28:b2:f3:c4:3d:a1:9a:ae:06:cf:81:
                    32:b3:df:38:f5:6d:4e:2f:09:ad:8e:66:ba:71:73:
                    56:fd:03:08:6a:71:6b:b8:df:f9:f4:4c:08:0e:ff:
                    f8:fd:2a:1d:4b:77:76:b8:fd:e7:a9:6b:23:8e:17:
                    a4:5c:f9:be:49:b0:23:eb:22:d3:14:38:cd:24:8e:
                    fa:a0:47:35:dc:ab:19:22:66:99:95:3d:07:4a:09:
                    96:6f:c3:4b:be:90:13:cd:92:17:c8:05:46:ad:98:
                    f0:a2:0c:64:12:04:67:66:04:11:07:51:1a:7f:61:
                    6a:ff:18:b4:0c:29:c4:b4:00:e2:40:dc:6e:ae:f3:
                    ac:d4:66:d2:96:ac:c0:c0:08:3d:84:18:7a:fc:35:
                    00:7f:07:4d:ac:27:bf:de:b8:4f:fa:c4:89:41:03:
                    53:f9:d7:d0:80:67:48:4d:fb:a9:1a:30:77:e2:8a:
                    e2:73:56:97:0e:53:f8:8a:00:b7:c0:75:71:c6:b7:
                    d1:0f:dd:af:e3:9f:f8:9c:e5:36:06:e0:a8:cd:ac:
                    c5:b3:20:be:15:76:e5:f7:a5:50:a1:ca:91:b2:90:
                    f8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:06:95:97:25:1C:AD:1A:1B:D7:24:06:7E:BC:DB:C9:DE:12:5D:8F
            X509v3 Authority Key Identifier:
                keyid:72:33:35:B0:50:75:54:AE:6C:6C:C2:94:75:07:64:CA:FD:0B:D6:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cjM1sFB1VK5sbMKUdQdkyv0L1og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cwaVlyUcrRob1yQGfrzbyd4SXY8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208790

    Signature Algorithm: sha256WithRSAEncryption
         4f:a1:ef:5b:f8:34:db:05:9c:ed:fd:dc:ea:46:e2:0a:44:d9:
         d8:88:c6:12:7f:c1:b2:02:57:86:aa:8e:e7:21:00:0f:6e:50:
         fe:65:ad:56:f0:8d:79:5b:5d:d4:40:5d:90:12:9b:67:20:3c:
         da:c8:7e:4b:fe:c1:88:67:0d:49:23:73:26:14:cb:ec:37:3d:
         07:89:84:ce:9a:c3:a5:ed:cc:d2:b0:0d:7b:ed:03:55:0f:23:
         06:ac:f5:98:b0:61:2f:ee:92:3b:d6:b4:8a:18:f9:f6:69:4d:
         e2:2e:a4:1d:09:3f:70:05:ac:b6:b1:7d:50:97:76:a1:20:a2:
         94:ac:b0:96:5e:ba:40:7b:78:3c:de:56:70:e5:72:7a:76:48:
         a3:ab:74:6b:0d:f3:de:77:78:85:d1:6a:59:ae:d4:75:00:12:
         8b:19:0f:60:89:16:76:01:ac:5b:53:eb:51:04:39:17:1c:5f:
         ae:f2:92:20:47:30:87:01:71:b4:05:ba:12:0d:16:69:4b:4e:
         1a:31:74:dc:67:11:79:bf:65:c6:8a:09:b8:7c:4d:6a:26:65:
         08:01:f2:77:4e:bd:31:63:83:6b:c1:24:29:b2:6a:ae:59:09:
         a1:2a:2d:6a:52:1d:34:17:21:83:63:2a:10:f6:d4:2c:60:7b:
         b8:9f:59:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:55:02 2026 by rpki-client