Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/ba9404-78f3-4935-9e2e-95b1373c5399/1/9rXRCwgatUO9kftONibS3RKLT7o.asa
File:                     9rXRCwgatUO9kftONibS3RKLT7o.asa (raw, json)
Hash identifier:          cTJSOpixcce8y4cST/YpaD7CTOPUYVw3x0RQUp7VLKA=
Subject key identifier:   F6:B5:D1:0B:08:1A:B5:43:BD:91:FB:4E:36:26:D2:DD:12:8B:4F:BA
Certificate issuer:       /CN=3c59555ec232826c7dd6d9a926b53602837949f6
Certificate serial:       019FFBDAD34FAF5DE5FE33ADD9764BF4F028
Authority key identifier: 3C:59:55:5E:C2:32:82:6C:7D:D6:D9:A9:26:B5:36:02:83:79:49:F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PFlVXsIygmx91tmpJrU2AoN5SfY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/ba9404-78f3-4935-9e2e-95b1373c5399/1/9rXRCwgatUO9kftONibS3RKLT7o.asa
Signing time:             Thu 13 Aug 2026 16:00:49 +0000
ASPA not before:          Thu 13 Aug 2026 16:00:49 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            215795
Providers:                AS: 8772
                          AS: 20473
                          AS: 29632
                          AS: 41051
                          AS: 208753
                          AS: 209533
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/ba9404-78f3-4935-9e2e-95b1373c5399/1/PFlVXsIygmx91tmpJrU2AoN5SfY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/ba9404-78f3-4935-9e2e-95b1373c5399/1/PFlVXsIygmx91tmpJrU2AoN5SfY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PFlVXsIygmx91tmpJrU2AoN5SfY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 30 Aug 2026 09:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:fb:da:d3:4f:af:5d:e5:fe:33:ad:d9:76:4b:f4:f0:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c59555ec232826c7dd6d9a926b53602837949f6
        Validity
            Not Before: Aug 13 16:00:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f6b5d10b081ab543bd91fb4e3626d2dd128b4fba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3b:79:af:94:0f:c1:96:ee:a8:dd:45:70:8d:
                    c9:39:b7:57:7b:d4:78:00:57:e1:44:a9:96:14:0e:
                    af:2f:ac:e6:f9:8c:73:82:01:4c:b1:91:07:9c:50:
                    f8:2e:0f:79:8f:42:69:80:8b:fa:52:a2:ed:05:4c:
                    44:6f:75:d9:66:f9:e2:b7:f1:33:79:e2:7c:82:71:
                    e1:00:f7:dc:f7:4a:84:3c:a8:8f:61:ff:57:24:e3:
                    81:7a:7f:61:a4:47:cb:76:08:5f:b9:e7:85:27:ad:
                    ca:fb:49:c7:7d:72:b7:2a:e5:2f:3a:23:a2:3b:34:
                    34:62:63:f2:52:6d:91:55:2d:5d:20:9c:69:48:b0:
                    b2:b5:50:7b:42:a4:5e:3b:77:95:dc:ee:48:81:a6:
                    7f:93:f8:7f:63:63:64:62:c7:52:cd:cf:a9:d3:21:
                    fd:86:86:53:3d:2d:6e:e9:f6:06:0c:3e:41:06:ba:
                    ee:1f:f5:5e:aa:ff:7e:3f:2d:5f:7d:45:de:27:14:
                    36:b9:dc:ed:ff:0f:bd:da:d4:0c:c7:95:86:7c:d2:
                    7f:01:f3:33:e9:a5:71:79:d4:2c:ea:72:36:e4:f0:
                    0a:c2:0d:0a:63:78:a7:8c:fa:54:e1:f4:4e:83:a8:
                    87:40:31:03:9f:17:66:08:92:2a:b4:e0:6c:0f:fb:
                    20:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B5:D1:0B:08:1A:B5:43:BD:91:FB:4E:36:26:D2:DD:12:8B:4F:BA
            X509v3 Authority Key Identifier:
                keyid:3C:59:55:5E:C2:32:82:6C:7D:D6:D9:A9:26:B5:36:02:83:79:49:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFlVXsIygmx91tmpJrU2AoN5SfY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ba9404-78f3-4935-9e2e-95b1373c5399/1/9rXRCwgatUO9kftONibS3RKLT7o.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ba9404-78f3-4935-9e2e-95b1373c5399/1/PFlVXsIygmx91tmpJrU2AoN5SfY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215795

    Signature Algorithm: sha256WithRSAEncryption
         af:3e:b9:41:88:90:b9:f8:60:a0:97:bb:08:f4:2f:40:a3:8a:
         06:d8:76:41:d6:f2:87:ab:d6:ea:52:e1:6a:03:cf:13:7b:4e:
         4f:6c:7b:fb:e6:60:8a:2b:1a:b4:82:0a:27:a0:82:70:d1:37:
         ac:f9:d5:83:6b:b8:aa:bf:63:14:91:37:96:90:e1:c1:98:4e:
         a6:cb:7d:be:96:fe:43:4d:c6:83:bc:e4:ba:5d:92:f0:38:61:
         fb:df:79:87:ee:48:e0:43:05:f0:2a:46:cc:5d:ab:8b:c4:cb:
         94:06:2a:1a:52:f2:c3:9d:53:a2:3c:5b:33:d0:83:f3:3e:c5:
         04:22:54:2f:9f:a9:33:30:28:7f:cc:df:24:c7:62:ea:30:a3:
         c1:0a:a8:f9:a9:b5:b7:aa:a0:a8:c3:74:be:d1:3f:fb:f2:cf:
         53:f5:b4:b3:db:45:b0:15:79:02:12:42:ae:ed:3a:6c:b3:6d:
         52:dd:23:ce:5a:60:2a:68:e7:ce:e9:98:ae:62:db:92:32:51:
         6f:c0:a8:ff:78:14:0b:fd:d5:ca:f4:26:a7:25:0f:f1:b5:07:
         61:56:79:37:61:ef:ff:e3:43:f6:cd:54:dd:52:7c:15:ab:ac:
         d8:ee:8e:c3:2b:44:1e:12:51:5e:90:3f:0b:3e:58:28:20:28:
         7c:22:37:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 13:53:05 2026 by rpki-client