Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/0WmwmFuoCWNqsLL6k_gxBPAC3h8.asa
File:                     0WmwmFuoCWNqsLL6k_gxBPAC3h8.asa (raw, json)
Hash identifier:          60+Or+X6S9hfGP6c+jd5ZM8DEfkfCWQ0yiF3OykR4jE=
Subject key identifier:   D1:69:B0:98:5B:A8:09:63:6A:B0:B2:FA:93:F8:31:04:F0:02:DE:1F
Certificate issuer:       /CN=8fa9d05e2a321aecba4ecc4abec0f78eacde55b0
Certificate serial:       019D110FEE1958D0D896FDE38BFC37EB3A64
Authority key identifier: 8F:A9:D0:5E:2A:32:1A:EC:BA:4E:CC:4A:BE:C0:F7:8E:AC:DE:55:B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j6nQXioyGuy6TsxKvsD3jqzeVbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/0WmwmFuoCWNqsLL6k_gxBPAC3h8.asa
Signing time:             Sat 21 Mar 2026 15:42:29 +0000
ASPA not before:          Sat 21 Mar 2026 15:42:29 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            212855
Providers:                AS: 8283
                          AS: 8298
                          AS: 41051
                          AS: 50869
                          AS: 200132
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j6nQXioyGuy6TsxKvsD3jqzeVbA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 23 Mar 2026 08:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:11:0f:ee:19:58:d0:d8:96:fd:e3:8b:fc:37:eb:3a:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fa9d05e2a321aecba4ecc4abec0f78eacde55b0
        Validity
            Not Before: Mar 21 15:42:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d169b0985ba809636ab0b2fa93f83104f002de1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:32:5f:51:3a:bb:d2:9a:70:f2:47:bd:e5:fa:
                    5e:6c:30:b1:d8:c7:8a:5d:35:b6:b6:fe:62:eb:bf:
                    de:a4:fc:8d:f5:76:ec:b9:4a:59:19:3e:62:a8:fb:
                    95:7a:0b:4f:51:83:b1:f3:e4:7a:3e:77:0b:0d:76:
                    57:2c:23:62:3f:3c:f5:74:4b:65:30:62:1e:0b:a6:
                    cb:04:d7:09:71:86:68:1e:9f:64:8a:0a:cb:b7:35:
                    32:d7:73:36:35:4e:0a:b0:e3:47:7b:b8:59:83:2f:
                    9a:a4:c9:5e:f0:4b:af:80:b0:ce:e9:db:9e:e3:4b:
                    1d:ff:d0:ac:58:48:82:1c:ab:82:13:e3:58:12:16:
                    d6:50:0a:d5:66:b0:16:66:06:c7:14:f0:0b:58:4b:
                    e3:c6:c0:59:ee:74:56:49:ee:2a:96:2a:74:c9:1e:
                    66:fc:fb:32:e3:66:12:0c:60:bd:6c:28:ab:6d:bb:
                    a1:fe:ad:22:84:9a:ee:fc:d5:bd:10:c4:37:1d:a7:
                    b8:10:9b:8a:a0:a7:58:60:c2:7f:4d:f5:4e:a0:00:
                    f4:cc:47:2a:61:7b:59:7b:6d:df:52:86:cc:08:59:
                    2b:9e:42:a0:49:9a:ae:da:c2:85:67:a3:d2:f2:71:
                    44:74:00:bc:0b:9f:20:db:23:66:12:13:89:d5:15:
                    c7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:69:B0:98:5B:A8:09:63:6A:B0:B2:FA:93:F8:31:04:F0:02:DE:1F
            X509v3 Authority Key Identifier:
                keyid:8F:A9:D0:5E:2A:32:1A:EC:BA:4E:CC:4A:BE:C0:F7:8E:AC:DE:55:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6nQXioyGuy6TsxKvsD3jqzeVbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/0WmwmFuoCWNqsLL6k_gxBPAC3h8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212855

    Signature Algorithm: sha256WithRSAEncryption
         38:7f:48:75:4a:d2:d3:ab:f4:db:42:50:03:88:5c:fa:35:76:
         dc:6d:6a:96:11:01:e2:1c:90:d8:35:c6:88:8d:02:7e:a8:f2:
         90:ea:20:b1:f1:d4:e5:36:e9:e3:8b:0f:aa:a7:63:26:eb:82:
         2f:d4:ce:bf:ce:de:ec:b9:5c:13:9a:ee:91:e3:bb:f8:95:25:
         d5:56:9c:ce:11:bc:6f:e5:bf:43:aa:6c:51:db:8e:45:25:1b:
         a5:9c:f4:67:8b:78:66:f9:60:ad:6b:0b:39:d7:b4:c1:af:b2:
         1c:92:76:0e:e2:ca:0d:d4:08:fb:5c:68:56:b7:ab:cc:e0:cf:
         31:dd:7b:c4:57:6d:be:a0:de:74:79:7f:64:3a:b6:bd:49:77:
         99:fc:2b:79:51:62:b7:c0:47:39:79:5a:33:b4:e0:ab:3a:47:
         ac:b8:cf:04:b5:3f:39:55:9e:1f:0e:48:46:e8:62:29:c9:8a:
         6e:bd:ad:49:36:e7:01:a5:a1:44:6b:63:8a:1e:4c:7a:85:cf:
         2c:5c:6f:f6:54:9d:42:18:ed:2d:7c:25:65:41:d8:9c:aa:0d:
         a7:fd:2d:4f:11:09:7b:b7:93:ff:15:82:d4:3d:d4:24:bc:83:
         14:08:d8:39:44:b3:8f:35:0c:c5:d9:5a:35:4b:69:93:5f:bf:
         c7:86:c7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 16:28:45 2026 by rpki-client