Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/WHAMvVOClu2e4_1oVJNIUdJFRfI.asa
File:                     WHAMvVOClu2e4_1oVJNIUdJFRfI.asa (raw, json)
Hash identifier:          /GKBi3C1f7lecWi+UvNJYtTMLV5cIJZHh3Pf0e4Lw/g=
Subject key identifier:   58:70:0C:BD:53:82:96:ED:9E:E3:FD:68:54:93:48:51:D2:45:45:F2
Certificate issuer:       /CN=eede13b97a7c778ad8013faffa2b1bb648762cfc
Certificate serial:       019F3C07ADF4B6FC32BCBE1F1FEF783A4218
Authority key identifier: EE:DE:13:B9:7A:7C:77:8A:D8:01:3F:AF:FA:2B:1B:B6:48:76:2C:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7t4TuXp8d4rYAT-v-isbtkh2LPw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/WHAMvVOClu2e4_1oVJNIUdJFRfI.asa
Signing time:             Tue 07 Jul 2026 10:02:43 +0000
ASPA not before:          Tue 07 Jul 2026 10:02:43 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            208824
Providers:                AS: 6939
                          AS: 62255
                          AS: 205941
                          AS: 209533
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7t4TuXp8d4rYAT-v-isbtkh2LPw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:3c:07:ad:f4:b6:fc:32:bc:be:1f:1f:ef:78:3a:42:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eede13b97a7c778ad8013faffa2b1bb648762cfc
        Validity
            Not Before: Jul  7 10:02:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=58700cbd538296ed9ee3fd6854934851d24545f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3d:c6:84:2f:a8:ce:fe:82:6b:d6:65:f7:77:
                    ee:a3:03:13:ef:05:b2:58:55:f3:b9:f8:30:9b:23:
                    03:37:81:72:6a:b8:19:94:75:4a:43:40:d3:d8:bb:
                    5f:5a:c0:9b:90:de:5c:10:5a:6c:2f:9a:45:74:a4:
                    2b:38:6e:55:bd:8f:18:98:f0:e6:aa:3f:ee:f4:79:
                    19:97:a4:1d:63:00:9d:27:60:cb:d1:61:a9:a5:c0:
                    5b:97:98:34:17:21:18:2b:8c:27:77:7e:99:50:79:
                    ed:f3:7c:80:63:44:5d:e2:17:2b:83:42:d2:b1:9e:
                    0d:6e:52:a5:54:98:ab:70:d5:91:7f:aa:c1:c1:97:
                    16:13:17:60:14:62:80:be:f4:d2:86:e0:cc:05:ae:
                    9c:1a:b2:84:6e:76:5d:20:54:ff:73:5b:58:f7:ca:
                    3c:66:63:1f:62:2c:d8:cd:0b:e7:72:fe:73:c5:2d:
                    18:a2:6f:57:88:f0:28:8c:ed:34:db:8a:15:75:fe:
                    5b:c4:8d:a8:73:af:5a:f2:63:57:ad:85:7f:0f:c1:
                    2d:4b:bf:22:14:90:a1:2e:c9:3a:77:c9:35:13:82:
                    fe:34:f4:35:24:5b:bf:5c:0a:a0:73:f8:60:0e:ef:
                    c1:0b:a4:8f:6f:46:a6:4d:ba:ce:d4:89:5e:d7:63:
                    a6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:70:0C:BD:53:82:96:ED:9E:E3:FD:68:54:93:48:51:D2:45:45:F2
            X509v3 Authority Key Identifier:
                keyid:EE:DE:13:B9:7A:7C:77:8A:D8:01:3F:AF:FA:2B:1B:B6:48:76:2C:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7t4TuXp8d4rYAT-v-isbtkh2LPw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/WHAMvVOClu2e4_1oVJNIUdJFRfI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208824

    Signature Algorithm: sha256WithRSAEncryption
         06:2c:5b:57:1f:77:a4:56:bb:7c:4e:36:d2:c7:7c:21:a5:25:
         53:a9:fb:b4:d5:af:cc:69:f1:bf:a1:95:f8:26:3b:3d:c7:97:
         09:ee:63:14:ad:48:0a:f9:61:e9:02:27:c6:81:55:e2:58:32:
         d5:be:5c:1b:b4:dd:2a:37:ff:d6:10:aa:99:a2:be:aa:a0:d6:
         01:c8:28:46:58:31:a8:37:11:16:b6:f5:79:94:fd:24:28:a3:
         bf:4d:1f:98:b6:74:c9:e6:21:15:7c:52:ae:28:fd:6f:16:ae:
         2d:f9:a6:03:75:ff:a1:12:85:fc:11:42:af:9c:a1:09:69:06:
         6b:06:bc:b1:5b:18:62:e1:ef:e4:8d:7f:c3:4c:61:42:a1:75:
         10:62:79:8f:c1:69:b0:f0:20:06:30:9b:6f:09:db:ec:c6:9d:
         15:bb:34:b9:f9:31:66:87:5a:a6:57:b7:b2:ae:97:da:07:89:
         5a:45:c8:d3:b8:06:7e:e9:a8:f2:7f:25:e2:7d:7f:eb:39:c7:
         a7:7e:b8:2a:a2:64:2d:e4:8b:fb:d0:8d:c7:43:66:e8:d7:59:
         19:d1:37:56:06:95:0b:c3:06:fd:5f:22:de:f2:00:2c:64:42:
         3f:d8:3f:a2:67:d4:a0:fc:85:c8:43:0a:02:f7:8a:6b:b5:27:
         01:49:41:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:35 2026 by rpki-client