Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/qnYWJnu7gDjyMxkFI7kZdjJxDKg.asa
File:                     qnYWJnu7gDjyMxkFI7kZdjJxDKg.asa (raw, json)
Hash identifier:          zefrDIFHWwKYZMYE/LvGlSTFwHDJ72INmt0VL/GYS4E=
Subject key identifier:   AA:76:16:26:7B:BB:80:38:F2:33:19:05:23:B9:19:76:32:71:0C:A8
Certificate issuer:       /CN=cbd745ebfcec382df252c2f750db648f4f034abf
Certificate serial:       019CCA70F74A2539938528218B3A4A91DE24
Authority key identifier: CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/qnYWJnu7gDjyMxkFI7kZdjJxDKg.asa
Signing time:             Sat 07 Mar 2026 22:35:26 +0000
ASPA not before:          Sat 07 Mar 2026 22:35:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            3211
Providers:                AS: 1273
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ca:70:f7:4a:25:39:93:85:28:21:8b:3a:4a:91:de:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbd745ebfcec382df252c2f750db648f4f034abf
        Validity
            Not Before: Mar  7 22:35:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=aa7616267bbb8038f233190523b9197632710ca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:df:7f:ab:67:47:d3:8f:f4:bf:6d:db:5e:f0:
                    76:28:aa:08:22:d8:58:c1:0f:0a:58:7e:6d:26:81:
                    d9:97:ca:b3:7a:45:6e:7a:03:07:bd:83:4e:ea:c2:
                    15:e8:9c:10:e1:bb:21:f4:3c:b6:3c:02:53:32:e4:
                    d0:17:80:76:56:96:32:6b:a2:c4:a0:e1:0c:3d:47:
                    71:e0:68:3d:95:23:62:52:d4:a1:09:fb:97:8c:fa:
                    d7:51:de:8c:f4:1b:fd:c1:22:82:8c:2f:17:4a:87:
                    db:07:5d:9a:2f:1e:86:b2:34:31:79:bd:db:a9:ee:
                    ad:cb:39:4c:3e:20:4c:4f:fa:fb:99:eb:c5:4f:e9:
                    6a:b0:f3:05:81:ea:68:28:ed:b0:41:ec:07:c9:8f:
                    0c:2c:97:b6:e2:74:d7:fe:d1:e4:02:be:5f:8a:a2:
                    a6:31:b8:8a:a2:5d:d0:9e:e8:dc:dd:2d:3b:16:56:
                    ba:89:db:3a:22:86:9d:0d:17:a8:b8:8a:7e:1e:5e:
                    e9:92:58:c5:cd:f1:c9:d3:6d:c9:21:76:59:cd:cc:
                    92:92:40:31:2d:e7:2d:d6:04:4f:30:dd:d3:7e:fd:
                    6c:0a:fa:19:3c:ec:d1:bb:96:d0:e2:91:29:7b:96:
                    7c:5d:16:5f:86:36:6d:cc:e6:18:e0:11:be:dd:60:
                    8a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:76:16:26:7B:BB:80:38:F2:33:19:05:23:B9:19:76:32:71:0C:A8
            X509v3 Authority Key Identifier:
                keyid:CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/qnYWJnu7gDjyMxkFI7kZdjJxDKg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  3211

    Signature Algorithm: sha256WithRSAEncryption
         58:a6:c9:21:06:6a:49:97:fa:13:60:1c:47:89:94:d4:63:0d:
         6e:eb:f0:66:17:4a:4a:fe:30:29:b2:75:ef:66:13:b3:ac:2b:
         dc:5c:7e:3f:17:50:14:55:d0:5d:cc:6a:70:70:ad:69:2a:56:
         12:81:c0:61:87:86:bc:e4:17:33:81:16:02:20:91:f5:99:45:
         a2:7f:8f:2c:40:a8:c1:44:f2:49:7e:e7:94:45:be:ba:9f:9e:
         63:bd:7d:bd:2f:dd:55:48:ab:17:de:0a:af:c3:3e:f2:d4:8d:
         b2:09:b3:99:2c:22:22:13:62:62:52:ae:3d:b2:0c:2c:d1:1b:
         10:a0:be:01:44:af:3b:e6:d3:89:82:51:c5:64:68:63:88:21:
         5c:4f:c2:62:70:8c:1c:90:bf:1a:79:32:4a:53:ad:d5:8a:d8:
         06:9b:87:6f:28:78:27:d5:5a:e4:be:3c:b8:a5:bb:32:b0:05:
         69:c7:4a:79:b1:ba:87:86:ce:3d:85:e6:61:15:29:09:60:ce:
         6f:c2:5c:14:a0:37:bd:66:89:ed:df:f7:6f:be:71:d4:20:28:
         57:ca:eb:9d:9b:b6:ca:93:f8:7e:a9:a2:dc:a9:90:0a:89:be:
         2b:5f:eb:4d:02:cb:2c:3e:63:ee:79:25:16:3d:95:5d:c5:8f:
         dd:36:2a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 06:16:55 2026 by rpki-client