Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/iGJ44E91_fnhiJC0QtPIqCqxhz8.asa
File:                     iGJ44E91_fnhiJC0QtPIqCqxhz8.asa (raw, json)
Hash identifier:          LlYwU6qiNvignry/zacR14K4kG0NVC/S0sJ/6MtD8rQ=
Subject key identifier:   88:62:78:E0:4F:75:FD:F9:E1:88:90:B4:42:D3:C8:A8:2A:B1:87:3F
Certificate issuer:       /CN=ccac372f7a9b8171dcbfc1160caa22c8fdc68b7b
Certificate serial:       019E9B4809653C4DAC39AE2251F581A36DC1
Authority key identifier: CC:AC:37:2F:7A:9B:81:71:DC:BF:C1:16:0C:AA:22:C8:FD:C6:8B:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/iGJ44E91_fnhiJC0QtPIqCqxhz8.asa
Signing time:             Sat 06 Jun 2026 04:54:09 +0000
ASPA not before:          Sat 06 Jun 2026 04:54:09 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            208223
Providers:                AS: 6939
                          AS: 14447
                          AS: 17408
                          AS: 18041
                          AS: 20473
                          AS: 27523
                          AS: 44324
                          AS: 53808
                          AS: 59105
                          AS: 204539
                          AS: 204921
                          AS: 209533
                          AS: 212895
                          AS: 213605
                          AS: 215828
                          AS: 393577
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 19:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9b:48:09:65:3c:4d:ac:39:ae:22:51:f5:81:a3:6d:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccac372f7a9b8171dcbfc1160caa22c8fdc68b7b
        Validity
            Not Before: Jun  6 04:54:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=886278e04f75fdf9e18890b442d3c8a82ab1873f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f7:34:72:20:f4:ff:dc:90:12:9f:ea:7f:17:
                    a7:91:21:1e:1f:1d:16:07:f6:de:bf:57:57:16:b4:
                    4b:86:de:c5:90:12:45:2e:01:13:7a:f8:42:3b:2c:
                    95:1c:d4:48:86:96:03:af:17:f6:95:c0:0d:0e:1a:
                    e4:0c:f5:18:b4:66:79:83:b5:09:bb:e4:88:94:e8:
                    bf:95:5f:aa:9a:41:8d:a9:f5:aa:9b:dc:b7:ce:3f:
                    45:5e:5a:74:7a:b0:6c:97:17:e8:81:23:a3:2e:31:
                    19:00:d1:34:ae:5a:9c:0a:a1:ff:fa:a7:a6:42:1c:
                    d1:32:5e:04:8d:17:4c:16:dd:78:04:d3:b9:a0:a9:
                    a2:30:c7:cf:79:67:bb:e6:64:77:ce:dc:7a:6c:fd:
                    34:11:99:7c:6c:7c:50:32:6c:8d:58:9e:c5:a8:6a:
                    40:72:e2:1a:ec:59:ce:02:cd:ae:94:f1:a6:87:0d:
                    bb:95:e9:72:4d:3d:4e:90:ea:cd:be:07:f9:bc:22:
                    f2:38:c7:88:dd:4a:4e:3e:39:77:77:1b:70:20:c7:
                    24:4d:d7:f4:a8:67:da:77:5b:2a:e8:f1:be:3b:a5:
                    a0:d5:d8:6a:8b:2a:aa:c0:14:e6:39:4e:bb:b4:cb:
                    02:ce:cf:89:be:55:fb:7f:bb:62:51:20:75:7e:d2:
                    37:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:62:78:E0:4F:75:FD:F9:E1:88:90:B4:42:D3:C8:A8:2A:B1:87:3F
            X509v3 Authority Key Identifier:
                keyid:CC:AC:37:2F:7A:9B:81:71:DC:BF:C1:16:0C:AA:22:C8:FD:C6:8B:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/iGJ44E91_fnhiJC0QtPIqCqxhz8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208223

    Signature Algorithm: sha256WithRSAEncryption
         48:c8:4e:60:40:c6:68:06:1a:91:eb:40:57:58:13:75:41:39:
         4a:3c:15:22:44:9b:f6:4d:ae:cd:cd:2c:6a:0a:62:a6:0e:13:
         d3:ce:5b:fc:a4:d9:9a:1a:a8:ca:8d:a1:04:35:f9:f9:51:fd:
         66:ec:48:e1:04:57:11:46:ce:d6:99:8f:02:27:ea:e1:00:ef:
         35:02:02:10:d0:5c:f2:17:15:22:ec:21:c8:78:b4:31:4f:ed:
         32:fb:51:13:4c:f7:50:8f:9d:7b:2e:7e:17:45:af:24:55:ac:
         f1:87:eb:b8:13:e2:62:3b:48:0a:cd:bf:9a:be:13:07:f8:b6:
         53:54:8c:ba:f2:e5:b7:78:9b:84:4f:81:df:67:90:ae:d2:63:
         9b:68:d0:50:89:35:df:ee:c0:66:ca:af:a1:67:38:1c:ea:d2:
         b1:10:8c:5b:52:62:12:32:44:19:0e:52:06:6f:4e:49:ab:96:
         dc:96:d5:95:cf:26:32:0b:a3:1f:f6:6e:39:da:8c:0e:01:37:
         3f:51:1e:83:09:97:59:b2:8f:76:5c:d2:38:a5:c4:47:ac:05:
         d0:a8:95:bf:94:a2:d0:b1:13:40:bc:01:9a:31:7d:a9:2c:ff:
         57:8b:08:a2:a9:5d:09:19:90:d9:37:dd:da:3b:d3:ce:0b:dd:
         e4:38:67:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:05:53 2026 by rpki-client