Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/3Ooa3U_oo2Glzs0D6LLZVAnU_Dw.asa
File:                     3Ooa3U_oo2Glzs0D6LLZVAnU_Dw.asa (raw, json)
Hash identifier:          8bwGtRktUinfVaTRA31mmdfaKiD/XYTphLDGJbdxcc4=
Subject key identifier:   DC:EA:1A:DD:4F:E8:A3:61:A5:CE:CD:03:E8:B2:D9:54:09:D4:FC:3C
Certificate issuer:       /CN=4f55710a3e8405c1afda6c63e9e77366efc61e7c
Certificate serial:       019F043343282FB0A0E5C54A1AD67E6764A8
Authority key identifier: 4F:55:71:0A:3E:84:05:C1:AF:DA:6C:63:E9:E7:73:66:EF:C6:1E:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T1VxCj6EBcGv2mxj6edzZu_GHnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/3Ooa3U_oo2Glzs0D6LLZVAnU_Dw.asa
Signing time:             Fri 26 Jun 2026 13:51:36 +0000
ASPA not before:          Fri 26 Jun 2026 13:51:36 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            213579
Providers:                AS: 34872
                          AS: 200462
                          AS: 204464
                          AS: 213512
                          AS: 213527
                          AS: 215120
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T1VxCj6EBcGv2mxj6edzZu_GHnw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:04:33:43:28:2f:b0:a0:e5:c5:4a:1a:d6:7e:67:64:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f55710a3e8405c1afda6c63e9e77366efc61e7c
        Validity
            Not Before: Jun 26 13:51:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=dcea1add4fe8a361a5cecd03e8b2d95409d4fc3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b1:82:11:f8:e2:2b:0c:37:84:72:0b:17:cb:
                    9f:06:a1:b0:4d:3c:e5:1a:22:54:b5:6c:4c:f5:55:
                    ca:0e:9b:d9:2a:bb:a7:78:24:33:2e:ea:e1:32:c8:
                    69:e2:0d:a1:5a:7f:3c:62:61:d5:bf:c8:4d:36:3c:
                    78:c5:49:9a:9e:0a:a4:ce:2d:19:bf:1e:8e:8e:43:
                    c6:7c:2c:8b:cb:de:79:c8:8c:19:c1:ae:5a:7b:d5:
                    f8:37:c6:0b:8d:f6:7e:5d:cc:53:ff:4a:db:94:30:
                    c8:6e:d5:f7:17:d9:81:a0:8c:30:0f:be:ab:be:36:
                    b9:2d:f8:6e:36:cb:95:93:20:7f:f6:9d:8a:29:49:
                    79:47:61:bf:af:40:7d:0e:ad:8e:ac:f8:df:19:be:
                    5c:32:9d:76:f3:5e:d9:da:f7:4c:30:c1:4f:ff:e0:
                    ce:fd:1a:af:3d:bb:9f:02:4f:38:e2:5a:6e:a2:8a:
                    e1:39:19:25:c3:80:68:72:f8:a3:e3:64:37:9c:4d:
                    e0:9d:b1:af:cb:91:fb:9f:18:f2:08:f2:e8:99:70:
                    d2:8c:6d:55:d6:a7:10:14:bb:07:d9:e5:0f:7c:ed:
                    5d:05:e1:81:8a:05:0f:d6:1c:32:4d:26:d4:7b:84:
                    79:15:e8:4f:e9:a6:52:22:d3:8a:9d:fc:e2:6c:86:
                    eb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:EA:1A:DD:4F:E8:A3:61:A5:CE:CD:03:E8:B2:D9:54:09:D4:FC:3C
            X509v3 Authority Key Identifier:
                keyid:4F:55:71:0A:3E:84:05:C1:AF:DA:6C:63:E9:E7:73:66:EF:C6:1E:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1VxCj6EBcGv2mxj6edzZu_GHnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/3Ooa3U_oo2Glzs0D6LLZVAnU_Dw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213579

    Signature Algorithm: sha256WithRSAEncryption
         81:e8:df:f9:11:f3:d1:52:eb:69:38:38:59:ae:3a:fc:f3:89:
         34:92:2b:71:62:a7:d4:e3:58:bc:1c:2c:42:8d:39:19:29:f7:
         f6:2e:88:11:4b:34:3f:a8:92:68:f0:83:fc:d5:1b:53:7e:8d:
         16:75:e3:bc:5f:34:dd:f0:7c:b6:ad:b1:30:77:9b:03:33:aa:
         70:b3:53:f8:e6:3a:c6:74:d7:7e:6b:3b:e4:ac:e1:4d:ac:12:
         ca:46:21:0c:4c:df:90:d7:b5:95:07:57:c6:c4:4d:7e:5b:7d:
         80:75:5f:42:49:aa:72:ef:c5:c8:d2:c8:ee:91:0f:95:18:64:
         08:62:c1:2b:e7:93:0b:2a:12:71:5d:75:8f:80:00:cb:a9:9c:
         a1:4d:ec:fc:38:2f:18:69:cd:45:ab:f4:0d:1f:de:56:bb:8d:
         82:64:e9:b9:17:ed:9b:4d:3b:ee:75:8f:2e:7e:e2:f8:6e:60:
         01:cc:fb:67:e0:5e:c6:b6:35:5b:e1:20:3e:3c:2a:05:9f:e5:
         ac:37:1e:96:63:c7:91:1b:1c:ef:75:eb:cc:61:af:72:13:85:
         bd:62:77:37:c3:3c:a3:92:e4:10:81:bc:7a:9b:c0:29:2f:97:
         bc:cc:4a:6f:8f:37:12:e2:22:90:97:aa:f7:ae:30:91:66:40:
         29:d6:19:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 09:34:29 2026 by rpki-client