Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/8RuluZQlRmxS5liK5WCiaw4-rPs.asa
File:                     8RuluZQlRmxS5liK5WCiaw4-rPs.asa (raw, json)
Hash identifier:          0elw691q/DOTcT4KkqOkd4B3/A9WMyuwKne0j6qHRw8=
Subject key identifier:   F1:1B:A5:B9:94:25:46:6C:52:E6:58:8A:E5:60:A2:6B:0E:3E:AC:FB
Certificate issuer:       /CN=8038929cc8d8fc00d96976be4c8c1ed7daf455d7
Certificate serial:       019F1DA29B815DA82FEA6BF7509E055417AF
Authority key identifier: 80:38:92:9C:C8:D8:FC:00:D9:69:76:BE:4C:8C:1E:D7:DA:F4:55:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gDiSnMjY_ADZaXa-TIwe19r0Vdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/8RuluZQlRmxS5liK5WCiaw4-rPs.asa
Signing time:             Wed 01 Jul 2026 12:23:43 +0000
ASPA not before:          Wed 01 Jul 2026 12:23:43 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            206604
Providers:                AS: 6939
                          AS: 8772
                          AS: 29632
                          AS: 34927
                          AS: 201279
                          AS: 205941
                          AS: 211509
                          AS: 212895
                          AS: 213449
                          AS: 215828
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gDiSnMjY_ADZaXa-TIwe19r0Vdc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1d:a2:9b:81:5d:a8:2f:ea:6b:f7:50:9e:05:54:17:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8038929cc8d8fc00d96976be4c8c1ed7daf455d7
        Validity
            Not Before: Jul  1 12:23:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f11ba5b99425466c52e6588ae560a26b0e3eacfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b2:c0:e1:71:73:ce:98:36:38:27:96:ce:41:
                    26:46:64:88:3a:d6:a2:3e:c4:ef:5d:9d:49:f6:a2:
                    33:c9:b4:58:1d:1b:9d:18:03:03:08:5e:8e:e3:27:
                    3b:2a:36:00:a2:23:0c:43:8c:ad:e8:2e:7a:ca:e6:
                    c2:12:6a:f3:66:0b:4b:90:56:0c:be:66:5b:8f:ec:
                    31:95:22:1b:04:d9:92:17:ab:78:9d:f0:9a:ac:1e:
                    4d:c7:ec:16:b5:a8:b9:0a:73:6d:1d:05:4a:c0:c7:
                    0b:e8:98:7a:72:18:fd:cf:ff:a9:db:d9:5a:af:1e:
                    ac:ee:5a:ff:f3:d5:73:6a:e1:e1:9e:7b:dd:13:6d:
                    ce:86:78:31:04:60:e5:fe:de:a3:cc:90:87:7d:65:
                    80:09:fa:39:a1:1f:1e:da:3b:a6:aa:22:b4:2b:5f:
                    a3:3d:fa:32:f7:5d:bd:a4:b3:33:8f:e5:b8:fe:22:
                    65:d2:38:c2:5e:f3:56:cc:cf:41:cf:95:d1:ca:bc:
                    6f:5c:fc:e9:cd:2d:8b:ea:57:a9:74:98:cf:19:b4:
                    78:99:0e:1b:5c:9f:1b:ae:b2:94:dd:90:6c:33:bd:
                    1e:8b:be:a2:62:f9:0b:e3:e4:ae:1a:57:84:20:3f:
                    62:09:d4:e7:d9:e7:59:b0:d5:b4:c5:80:06:30:7f:
                    0f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:1B:A5:B9:94:25:46:6C:52:E6:58:8A:E5:60:A2:6B:0E:3E:AC:FB
            X509v3 Authority Key Identifier:
                keyid:80:38:92:9C:C8:D8:FC:00:D9:69:76:BE:4C:8C:1E:D7:DA:F4:55:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDiSnMjY_ADZaXa-TIwe19r0Vdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/8RuluZQlRmxS5liK5WCiaw4-rPs.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206604

    Signature Algorithm: sha256WithRSAEncryption
         58:70:20:05:f6:59:a8:41:6b:05:0f:b4:bc:37:59:a9:e9:55:
         a6:79:81:72:6e:1e:8b:59:b6:ed:ff:34:93:59:62:2e:03:24:
         12:28:0f:00:a8:ce:2b:18:72:04:33:1e:00:59:e5:93:6e:f6:
         0d:a2:c0:f9:a9:a8:cb:c7:a6:3e:cf:0a:c7:05:63:7f:cc:d2:
         eb:85:71:80:9e:55:f8:ac:0a:07:87:ac:89:d9:e9:f6:3b:40:
         db:0a:f3:a7:fb:b7:6f:4c:62:be:58:ab:2e:31:f3:7c:b9:22:
         b0:cb:ec:2c:48:95:89:f9:fa:42:bb:5e:48:ae:06:bc:47:7d:
         5c:60:de:75:d2:cf:b7:09:86:88:0e:7b:95:56:02:da:e3:26:
         11:d8:8a:6c:13:94:63:5d:2e:f8:03:db:4f:b4:ae:61:f5:f6:
         1f:47:dc:9b:25:a0:5c:b1:50:1f:c0:07:66:52:5b:5b:56:e6:
         a6:a2:38:fd:c9:92:6e:9f:dd:c4:00:26:e5:5b:5c:7d:35:1f:
         5c:81:81:f2:df:48:6a:aa:d2:35:d6:bc:e1:cc:ff:95:4a:80:
         52:b8:3f:db:c8:a4:78:53:9c:11:b9:38:7c:09:df:e7:c4:6d:
         9c:de:43:72:e3:fa:c0:bf:3d:57:c3:35:2e:49:58:82:02:b8:
         d0:89:e0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:16:51 2026 by rpki-client