Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/4rHwkDFu4RDHhDHcuEqOQsu4pk0.asa
File:                     4rHwkDFu4RDHhDHcuEqOQsu4pk0.asa (raw, json)
Hash identifier:          Ypr3QNWLU2bOlasvtwuLjWnOf1RontOU/jxRbuCyPaI=
Subject key identifier:   E2:B1:F0:90:31:6E:E1:10:C7:84:31:DC:B8:4A:8E:42:CB:B8:A6:4D
Certificate issuer:       /CN=8038929cc8d8fc00d96976be4c8c1ed7daf455d7
Certificate serial:       019CDC7266F67D7400632654440990480018
Authority key identifier: 80:38:92:9C:C8:D8:FC:00:D9:69:76:BE:4C:8C:1E:D7:DA:F4:55:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gDiSnMjY_ADZaXa-TIwe19r0Vdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/4rHwkDFu4RDHhDHcuEqOQsu4pk0.asa
Signing time:             Wed 11 Mar 2026 10:30:10 +0000
ASPA not before:          Wed 11 Mar 2026 10:30:10 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            206604
Providers:                AS: 8772
                          AS: 20473
                          AS: 29632
                          AS: 34927
                          AS: 201269
                          AS: 201279
                          AS: 203534
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gDiSnMjY_ADZaXa-TIwe19r0Vdc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Mar 2026 22:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:dc:72:66:f6:7d:74:00:63:26:54:44:09:90:48:00:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8038929cc8d8fc00d96976be4c8c1ed7daf455d7
        Validity
            Not Before: Mar 11 10:30:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e2b1f090316ee110c78431dcb84a8e42cbb8a64d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2a:f3:bf:f8:98:a8:95:3a:e1:12:2c:a3:8e:
                    f2:db:93:5b:28:f6:9c:87:a9:cd:bb:36:a7:a7:73:
                    5d:09:04:cb:15:88:f4:aa:9d:c7:49:bc:01:4a:8c:
                    20:6a:92:2c:7b:4a:38:2a:9e:e1:35:b4:c2:cc:a3:
                    f2:bf:30:20:a6:9d:dd:1c:f7:3b:b9:41:86:63:05:
                    f6:8a:6a:1a:ad:56:7a:dd:16:d5:4a:a1:56:e3:3b:
                    2f:96:f4:ee:48:83:cc:80:64:ec:d7:5e:e0:15:f0:
                    3a:a4:ef:0f:34:95:19:e6:43:c2:20:44:d7:f3:97:
                    d5:6c:f5:31:9f:76:13:bb:39:c8:a2:a4:c4:65:40:
                    b2:ca:d2:e0:4b:c7:8c:85:f6:b8:a0:67:71:1b:f7:
                    f1:ac:8f:cb:dc:63:c9:b0:43:90:c1:ee:cd:ca:6b:
                    25:61:94:c9:3c:50:98:08:54:29:1e:6a:99:4a:ea:
                    ac:91:37:a0:1b:59:05:4b:f6:a7:09:54:80:62:48:
                    99:a0:1c:8d:17:06:1f:3a:fc:21:ce:e9:01:97:99:
                    0f:ef:7a:bb:3f:fb:50:3f:db:25:3f:88:c7:dd:fd:
                    a1:5d:08:8a:21:77:a4:3e:91:cc:71:c7:a0:51:3a:
                    b8:fb:27:63:44:45:88:f5:28:14:27:a6:d4:d1:7c:
                    3e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B1:F0:90:31:6E:E1:10:C7:84:31:DC:B8:4A:8E:42:CB:B8:A6:4D
            X509v3 Authority Key Identifier:
                keyid:80:38:92:9C:C8:D8:FC:00:D9:69:76:BE:4C:8C:1E:D7:DA:F4:55:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDiSnMjY_ADZaXa-TIwe19r0Vdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/4rHwkDFu4RDHhDHcuEqOQsu4pk0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206604

    Signature Algorithm: sha256WithRSAEncryption
         7b:55:29:7e:dd:cd:31:ca:b6:1a:8a:c6:89:b4:f5:f1:e2:68:
         5f:37:fe:3a:4a:7b:a7:0e:40:2f:0c:09:23:b7:5b:21:c5:41:
         a5:f1:c6:1d:05:16:6b:14:e8:a0:3e:53:7e:5f:f8:d6:75:33:
         ee:bb:26:15:56:3d:fa:68:0b:28:40:6b:4f:99:7d:9f:df:d1:
         5c:fb:bf:4b:d1:c8:01:2d:74:95:35:3c:e7:31:e9:de:0c:34:
         c8:a0:7e:47:78:bb:1c:9a:89:14:44:94:36:32:2a:e1:ed:6c:
         c8:c5:fb:f3:99:f6:73:6c:fc:ac:7c:cf:2d:00:21:6b:47:d7:
         1f:23:12:f9:78:8b:d4:96:fb:c6:ab:75:5f:4e:3f:1d:c2:ba:
         8d:7f:fe:78:94:05:e7:92:5b:9c:28:7f:c7:27:55:ea:0a:13:
         56:59:0f:d9:30:65:9e:be:cd:1a:34:9b:fb:a3:b9:f4:48:09:
         40:b4:ea:d8:ad:8a:bb:7d:fa:6a:15:b1:ba:54:c2:2b:94:99:
         39:cb:22:86:af:f2:8d:6c:1e:5b:c6:a3:20:c6:ce:9e:8d:6a:
         29:ee:9c:0b:6c:fa:7b:11:30:99:72:ad:ba:25:ad:54:88:22:
         ba:91:a5:ca:aa:af:dc:1a:5f:e4:8f:70:45:cf:80:08:ba:1f:
         94:78:cf:98
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZzccmb2fXQAYyZURAmQSAAYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwMzg5MjljYzhkOGZjMDBkOTY5NzZiZTRjOGMxZWQ3ZGFm
NDU1ZDcwHhcNMjYwMzExMTAzMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMmIxZjA5MDMxNmVlMTEwYzc4NDMxZGNiODRhOGU0MmNiYjhhNjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyrzv/iYqJU64RIso47y25NbKPac
h6nNuzanp3NdCQTLFYj0qp3HSbwBSowgapIse0o4Kp7hNbTCzKPyvzAgpp3dHPc7
uUGGYwX2imoarVZ63RbVSqFW4zsvlvTuSIPMgGTs117gFfA6pO8PNJUZ5kPCIETX
85fVbPUxn3YTuznIoqTEZUCyytLgS8eMhfa4oGdxG/fxrI/L3GPJsEOQwe7Nymsl
YZTJPFCYCFQpHmqZSuqskTegG1kFS/anCVSAYkiZoByNFwYfOvwhzukBl5kP73q7
P/tQP9slP4jH3f2hXQiKIXekPpHMccegUTq4+ydjREWI9SgUJ6bU0Xw+RwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFOKx8JAxbuEQx4Qx3LhKjkLLuKZNMB8GA1UdIwQY
MBaAFIA4kpzI2PwA2Wl2vkyMHtfa9FXXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0RpU25NallfQURaYVhhLVRJd2UxOXIwVmRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8zZGFhNmItNjM0OC00OGIyLThiOTYt
NTFhZmIwZDhkMTYzLzEvNHJId2tERnU0UkRIaERIY3VFcU9Rc3U0cGswLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8zZGFhNmItNjM0OC00OGIyLThiOTYtNTFhZmIwZDhkMTYz
LzEvZ0RpU25NallfQURaYVhhLVRJd2UxOXIwVmRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMnDDANBgkqhkiG
9w0BAQsFAAOCAQEAe1Upft3NMcq2GorGibT18eJoXzf+Okp7pw5ALwwJI7dbIcVB
pfHGHQUWaxTooD5Tfl/41nUz7rsmFVY9+mgLKEBrT5l9n9/RXPu/S9HIAS10lTU8
5zHp3gw0yKB+R3i7HJqJFESUNjIq4e1syMX785n2c2z8rHzPLQAha0fXHyMS+XiL
1Jb7xqt1X04/HcK6jX/+eJQF55JbnCh/xydV6goTVlkP2TBlnr7NGjSb+6O59EgJ
QLTq2K2Ku336ahWxulTCK5SZOcsihq/yjWweW8ajIMbOno1qKe6cC2z6exEwmXKt
uiWtVIgiupGlyqqv3Bpf5I9wRc+ACLoflHjPmA==
-----END CERTIFICATE-----
Generated at Mon Mar 16 06:49:59 2026 by rpki-client