Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/s8_WHV038Q1g78fwDx7OOGYi0D4.asa
File:                     s8_WHV038Q1g78fwDx7OOGYi0D4.asa (raw, json)
Hash identifier:          vzf3srjx5iuTGWWUUoS5m4h76G1Jy31CD1k6b5+yiFw=
Subject key identifier:   B3:CF:D6:1D:5D:37:F1:0D:60:EF:C7:F0:0F:1E:CE:38:66:22:D0:3E
Certificate issuer:       /CN=8038929cc8d8fc00d96976be4c8c1ed7daf455d7
Certificate serial:       019ED6F521B84D6ACC12692A9067FE2074F1
Authority key identifier: 80:38:92:9C:C8:D8:FC:00:D9:69:76:BE:4C:8C:1E:D7:DA:F4:55:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gDiSnMjY_ADZaXa-TIwe19r0Vdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/s8_WHV038Q1g78fwDx7OOGYi0D4.asa
Signing time:             Wed 17 Jun 2026 19:00:49 +0000
ASPA not before:          Wed 17 Jun 2026 19:00:49 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            206604
Providers:                AS: 6939
                          AS: 8772
                          AS: 29632
                          AS: 34927
                          AS: 201279
                          AS: 201541
                          AS: 205941
                          AS: 211509
                          AS: 212895
                          AS: 213449
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gDiSnMjY_ADZaXa-TIwe19r0Vdc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Jun 2026 07:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d6:f5:21:b8:4d:6a:cc:12:69:2a:90:67:fe:20:74:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8038929cc8d8fc00d96976be4c8c1ed7daf455d7
        Validity
            Not Before: Jun 17 19:00:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b3cfd61d5d37f10d60efc7f00f1ece386622d03e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3d:02:40:4a:be:fe:ec:e2:14:d3:0e:c9:e8:
                    7d:a5:38:4a:08:fb:b6:03:97:13:64:6d:4b:35:9b:
                    13:59:e2:af:24:f9:0d:e6:54:79:54:6d:b5:27:3d:
                    03:67:d2:99:77:4f:8c:f7:d1:41:20:f5:fb:d0:29:
                    52:87:72:9b:cb:8d:1d:3b:42:3b:b3:6c:ef:38:31:
                    50:fb:48:f1:c0:77:3b:02:7e:c6:27:f4:c8:6a:4a:
                    6e:2e:47:e1:d2:4f:9d:f5:bf:2a:b2:40:6e:0a:2f:
                    58:1b:22:6b:2a:a5:e6:78:ae:6e:59:58:3b:3e:e5:
                    00:5b:65:7b:e3:9c:c8:dd:64:f2:cc:87:c9:88:90:
                    84:97:89:25:ef:51:23:74:c6:c3:4d:de:45:23:4f:
                    c5:17:79:2a:ff:de:89:2f:99:d8:21:db:d5:e5:36:
                    ae:06:aa:6c:17:00:b7:1f:1b:4e:ba:29:7d:69:d2:
                    8d:c6:f9:8e:07:1d:97:ab:e2:08:fc:51:df:56:06:
                    91:cb:50:3b:e6:c3:80:96:d9:45:68:97:34:84:9c:
                    01:38:6e:29:18:ce:30:3e:46:9a:39:94:13:68:a6:
                    b1:f7:f2:88:17:21:e8:e7:03:ed:aa:91:ae:d4:c2:
                    52:fb:25:1e:83:b6:bb:60:c2:a5:b6:d8:60:e9:9f:
                    8f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:CF:D6:1D:5D:37:F1:0D:60:EF:C7:F0:0F:1E:CE:38:66:22:D0:3E
            X509v3 Authority Key Identifier:
                keyid:80:38:92:9C:C8:D8:FC:00:D9:69:76:BE:4C:8C:1E:D7:DA:F4:55:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDiSnMjY_ADZaXa-TIwe19r0Vdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/s8_WHV038Q1g78fwDx7OOGYi0D4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206604

    Signature Algorithm: sha256WithRSAEncryption
         34:06:1d:97:89:db:33:72:70:a0:03:f8:5b:24:f5:7b:e7:e1:
         36:3c:88:6c:06:94:75:33:11:99:d3:8f:b1:af:21:f5:e4:17:
         c3:37:3d:d4:6d:88:83:c4:52:fa:9f:6a:ae:a7:fe:c9:68:bc:
         12:8b:a8:de:1a:d8:c1:cd:78:71:81:9f:cb:57:e2:9b:ea:9b:
         92:7c:d3:54:49:4d:4c:77:82:8f:5c:d1:d6:da:57:7d:c0:d4:
         2d:a2:16:5e:7a:2b:ea:6e:26:95:0e:a5:01:1b:22:18:e9:d9:
         be:bb:34:65:3e:a8:57:19:55:f2:c8:8a:29:e8:1c:c2:46:38:
         91:53:87:6e:cf:06:7a:65:dc:a4:f2:38:e9:09:43:1f:e7:1d:
         71:fa:05:dc:20:c1:c7:41:69:ec:81:88:1b:de:c9:e2:66:00:
         9c:55:28:9c:57:2a:03:cf:78:f4:75:07:d0:9a:e3:76:b9:71:
         ce:15:aa:71:47:71:7d:6b:6e:cb:6b:0f:89:dd:81:b7:5e:59:
         8c:06:e5:f8:99:ca:01:9d:49:86:3c:e1:76:df:88:c8:08:bf:
         3d:1b:85:63:6e:a5:0a:41:af:2a:93:96:1a:99:a4:b0:ce:fc:
         03:7c:77:c3:7f:35:55:0f:70:0c:cf:b8:25:5e:69:ab:fb:4e:
         90:1f:08:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 10:43:41 2026 by rpki-client