Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/hvzKUhHsPlHvv6n374TtAdyTsKk.asa
File:                     hvzKUhHsPlHvv6n374TtAdyTsKk.asa (raw, json)
Hash identifier:          PX65EFyHuyM5oZYYOQTz+oaCfjvMB6rCdhKJQvnTPjc=
Subject key identifier:   86:FC:CA:52:11:EC:3E:51:EF:BF:A9:F7:EF:84:ED:01:DC:93:B0:A9
Certificate issuer:       /CN=4a7f4f8ac8ca7343ed1b4ff12ce276318b69d10e
Certificate serial:       01A06C94198A8B890C378D96BEF0223945B6
Authority key identifier: 4A:7F:4F:8A:C8:CA:73:43:ED:1B:4F:F1:2C:E2:76:31:8B:69:D1:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/hvzKUhHsPlHvv6n374TtAdyTsKk.asa
Signing time:             Fri 04 Sep 2026 13:20:40 +0000
ASPA not before:          Fri 04 Sep 2026 13:20:40 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            211623
Providers:                AS: 6204
                          AS: 6939
                          AS: 20495
                          AS: 42093
                          AS: 50869
                          AS: 61049
                          AS: 203291
                          AS: 213753
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6c:94:19:8a:8b:89:0c:37:8d:96:be:f0:22:39:45:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a7f4f8ac8ca7343ed1b4ff12ce276318b69d10e
        Validity
            Not Before: Sep  4 13:20:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=86fcca5211ec3e51efbfa9f7ef84ed01dc93b0a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:50:87:d8:ee:01:78:2d:84:d6:2b:7a:5d:a7:
                    52:46:c8:38:5a:73:c1:a8:dc:67:04:e1:6a:ca:87:
                    3c:83:01:e7:32:d3:b9:4c:8a:1b:bf:52:55:d7:98:
                    63:ae:23:66:cc:57:a5:32:1c:8b:80:b2:18:f3:d2:
                    13:fa:3b:23:36:80:af:3e:21:b0:27:ac:b5:da:38:
                    76:18:6e:b6:bc:a6:c1:99:b0:bc:77:3c:c7:cc:6a:
                    aa:26:80:b7:0f:d1:8d:ae:6a:35:75:aa:97:79:c9:
                    73:3b:e4:55:56:55:31:94:e2:a3:1e:fc:8c:c7:55:
                    e3:91:09:b9:6c:06:45:d2:83:59:6c:69:e5:a7:99:
                    cd:9b:bb:37:38:59:75:45:76:03:c0:7e:49:48:81:
                    2e:87:81:f1:40:bc:9b:ed:3a:1a:d8:29:93:44:4d:
                    c0:c7:a2:8e:5a:7d:6f:24:8d:e2:1a:53:cc:32:35:
                    8f:cc:73:5c:88:e7:91:b5:9f:4c:cc:4a:01:19:84:
                    18:24:a3:bb:bd:03:6e:fb:a9:f2:99:d5:82:0f:07:
                    62:cf:1d:73:9b:c8:47:3d:da:59:91:1a:2b:de:cd:
                    39:5a:d7:97:7c:79:91:b5:e5:ed:7a:73:25:a8:13:
                    d4:b8:eb:b9:df:18:56:40:c5:24:0d:06:30:c4:3c:
                    5d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:FC:CA:52:11:EC:3E:51:EF:BF:A9:F7:EF:84:ED:01:DC:93:B0:A9
            X509v3 Authority Key Identifier:
                keyid:4A:7F:4F:8A:C8:CA:73:43:ED:1B:4F:F1:2C:E2:76:31:8B:69:D1:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/hvzKUhHsPlHvv6n374TtAdyTsKk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211623

    Signature Algorithm: sha256WithRSAEncryption
         8e:36:b7:9d:4c:24:5b:89:b0:4d:71:68:27:47:17:35:6f:0d:
         5e:f7:c7:a4:1c:8d:ad:0a:dd:40:b2:28:2c:6f:64:25:90:3a:
         02:db:1c:ba:67:ed:fb:68:28:b8:3a:5e:22:29:4f:ff:b5:8d:
         4d:a7:ef:2e:47:5b:a2:ae:25:d6:b8:24:54:3b:c0:bb:4a:cd:
         3e:75:0b:21:75:41:13:e6:db:50:c7:1c:8c:31:88:78:05:d4:
         bb:df:b9:bc:4b:58:b5:ba:76:c3:e0:de:9f:f9:a0:d1:0c:39:
         09:04:40:d0:c5:4f:e4:9d:d1:47:e5:42:17:5a:4c:3e:d0:84:
         bf:20:a7:7f:ba:d6:44:ed:81:cb:41:63:38:e3:b5:c4:29:0b:
         65:09:e8:ad:c8:c5:5e:36:59:b5:3e:4c:70:e7:b0:f9:74:34:
         a9:eb:2e:a3:a7:9b:1b:46:f6:40:5e:9c:16:c2:6b:24:6b:ca:
         76:4f:0b:e0:f9:a0:e8:13:05:ce:00:ed:f5:52:e5:d9:02:13:
         d8:87:22:d9:6e:8a:0f:c1:19:e3:78:fc:be:29:ee:f4:f0:4a:
         ab:0c:6a:81:7a:3b:5d:e7:0f:53:5d:14:c4:ce:12:7e:25:7b:
         13:4e:a9:6d:d5:ca:a3:37:26:75:bf:d5:9c:7c:ea:92:5d:7a:
         70:d1:60:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:15:09 2026 by rpki-client