Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/OhX0xrRx6lNisjImnZs-PuwqOuY.asa
File:                     OhX0xrRx6lNisjImnZs-PuwqOuY.asa (raw, json)
Hash identifier:          KeOOzQUU9vN5x8Uk7Ez142V0elWivsBXIGa6YXXCHp8=
Subject key identifier:   3A:15:F4:C6:B4:71:EA:53:62:B2:32:26:9D:9B:3E:3E:EC:2A:3A:E6
Certificate issuer:       /CN=fba7918bbf5aa80f144937ad1965ea03f025c22e
Certificate serial:       019FF63C8DC8D49C483378A6B18FE55D4F5B
Authority key identifier: FB:A7:91:8B:BF:5A:A8:0F:14:49:37:AD:19:65:EA:03:F0:25:C2:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-6eRi79aqA8USTetGWXqA_Alwi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/OhX0xrRx6lNisjImnZs-PuwqOuY.asa
Signing time:             Wed 12 Aug 2026 13:49:51 +0000
ASPA not before:          Wed 12 Aug 2026 13:49:51 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            212691
Providers:                AS: 47272
                          AS: 58299
                          AS: 209533
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-6eRi79aqA8USTetGWXqA_Alwi4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 22:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f6:3c:8d:c8:d4:9c:48:33:78:a6:b1:8f:e5:5d:4f:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fba7918bbf5aa80f144937ad1965ea03f025c22e
        Validity
            Not Before: Aug 12 13:49:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3a15f4c6b471ea5362b232269d9b3e3eec2a3ae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:20:0f:75:13:a9:03:ee:88:87:1a:dd:16:85:
                    ff:71:42:e0:2a:eb:74:20:04:07:90:af:23:15:5b:
                    f6:05:75:2c:da:e7:78:85:d5:94:8e:ac:80:38:28:
                    64:2e:bb:55:b3:b4:bc:1a:f6:22:77:47:4c:c0:a7:
                    23:6c:d1:b5:9b:09:57:8c:07:d7:47:02:b4:34:98:
                    2f:9a:5e:df:1f:93:28:79:d3:88:a2:c8:65:f0:95:
                    3c:a3:f0:3a:73:80:da:6d:cd:eb:0d:af:20:26:ad:
                    9e:5a:d0:c7:8a:fe:5f:ba:f1:7b:bb:de:c7:bc:20:
                    98:12:46:19:4b:d2:55:84:15:80:6d:70:0e:63:42:
                    ad:cd:69:7d:43:91:bf:98:bf:76:2e:d4:7d:86:29:
                    c6:37:90:0d:cc:7f:ca:52:4c:a5:75:a2:a0:94:4e:
                    af:04:7d:bc:9f:3f:e5:94:b7:58:eb:f9:f0:c4:74:
                    94:27:6f:bb:b7:d5:68:3d:64:7f:44:d6:36:7a:67:
                    81:e8:70:d2:f8:c9:ff:8d:b0:53:40:6a:24:1a:77:
                    b2:b3:35:3e:7c:58:3e:fa:61:ea:64:b9:f4:d5:09:
                    93:35:67:b5:b3:69:a3:f3:51:dd:c0:fb:8e:48:7b:
                    ea:0c:fc:58:49:99:a6:03:7f:d7:ac:38:1f:8d:bd:
                    8a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:15:F4:C6:B4:71:EA:53:62:B2:32:26:9D:9B:3E:3E:EC:2A:3A:E6
            X509v3 Authority Key Identifier:
                keyid:FB:A7:91:8B:BF:5A:A8:0F:14:49:37:AD:19:65:EA:03:F0:25:C2:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6eRi79aqA8USTetGWXqA_Alwi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/OhX0xrRx6lNisjImnZs-PuwqOuY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212691

    Signature Algorithm: sha256WithRSAEncryption
         a6:11:74:2b:8c:02:61:02:2b:02:c2:ea:10:f3:90:d5:03:96:
         39:2d:63:cf:f1:99:05:54:c1:ec:13:67:99:14:35:9c:94:45:
         8b:73:ea:35:0f:c5:1e:3b:84:a4:a8:a1:97:28:cb:f4:e9:51:
         d7:66:84:d4:12:3f:9b:1f:8f:de:d8:0c:48:e0:b7:7d:0e:51:
         be:e4:2f:e4:ff:c0:08:14:b5:21:ab:6a:17:cf:6a:89:15:86:
         83:d2:1b:be:e6:37:6b:12:08:ef:3a:2a:96:29:9b:b6:53:f0:
         79:39:ed:e6:f8:d9:97:19:56:a5:a3:f7:a2:19:4f:4e:9b:20:
         ac:2b:56:59:ee:95:3b:7e:2a:12:6f:4b:5b:b2:f4:2b:c1:90:
         2d:7f:d7:53:15:1e:17:14:d6:0f:d6:a9:d2:97:bb:c9:e7:31:
         8a:2e:e2:ba:9c:33:00:ca:7e:7d:e3:e1:8c:fe:39:19:f9:74:
         dd:c0:31:93:3e:4a:9a:68:b4:1e:d8:86:6c:12:c3:eb:a9:6c:
         27:6c:60:2d:41:e9:0a:ec:74:46:02:63:95:4a:8a:22:c6:66:
         ac:0c:8c:a4:8f:8e:35:d4:d1:a2:ed:de:68:8c:ca:7f:f4:d6:
         e6:2c:00:1c:0f:c8:27:95:56:43:08:7e:89:bc:3d:95:a6:27:
         98:6d:68:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:51:19 2026 by rpki-client