Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/NFcJoTbeoau-evP2UkrkFDUi_S0.asa
File:                     NFcJoTbeoau-evP2UkrkFDUi_S0.asa (raw, json)
Hash identifier:          c61fPUsVZ7p9Uk03SLvoaO2SkW7N9xFG1W2ccABcLig=
Subject key identifier:   34:57:09:A1:36:DE:A1:AB:BE:7A:F3:F6:52:4A:E4:14:35:22:FD:2D
Certificate issuer:       /CN=cbc8c0646eb6cbf2698bb0a760503bcdb91f1a5c
Certificate serial:       019FC2AC8B4DBA36CFB668F5C1B1552C597C
Authority key identifier: CB:C8:C0:64:6E:B6:CB:F2:69:8B:B0:A7:60:50:3B:CD:B9:1F:1A:5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y8jAZG62y_Jpi7CnYFA7zbkfGlw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/NFcJoTbeoau-evP2UkrkFDUi_S0.asa
Signing time:             Sun 02 Aug 2026 13:31:55 +0000
ASPA not before:          Sun 02 Aug 2026 13:31:55 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            216438
Providers:                AS: 199524
                          AS: 208226
                          AS: 209533
                          AS: 212895
                          AS: 215114
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y8jAZG62y_Jpi7CnYFA7zbkfGlw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:c2:ac:8b:4d:ba:36:cf:b6:68:f5:c1:b1:55:2c:59:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbc8c0646eb6cbf2698bb0a760503bcdb91f1a5c
        Validity
            Not Before: Aug  2 13:31:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=345709a136dea1abbe7af3f6524ae4143522fd2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cd:c7:cd:6b:b8:57:33:c6:0f:7d:41:d9:e8:
                    a3:d9:07:40:75:68:66:bc:27:98:01:5d:81:2a:c5:
                    99:fe:6f:f8:d5:70:93:b5:44:5f:f9:17:41:69:5c:
                    af:41:0e:ed:be:5b:3a:58:40:4c:09:71:60:15:74:
                    8b:20:6d:23:51:54:58:50:10:e4:0e:ba:7d:6a:f9:
                    09:c7:e5:9e:d6:ea:bb:d8:e1:31:46:b2:ed:60:e7:
                    68:af:59:13:5a:72:9f:2b:08:e9:06:59:26:69:af:
                    f4:0a:6d:c8:0f:9d:77:e2:ae:88:f6:2a:5c:a2:f5:
                    77:de:44:4e:0d:53:99:0d:59:fc:c4:1b:83:2c:da:
                    5c:87:1d:13:e4:3d:ef:b0:a3:3f:cc:7d:d3:11:bd:
                    16:cd:d3:64:2e:ec:9e:f9:9d:ce:93:7d:b2:7f:32:
                    53:08:e9:83:83:78:e9:6f:7c:2f:2d:c5:d8:e7:2a:
                    d6:64:39:41:f7:39:00:d3:57:30:2b:31:b7:8e:27:
                    5a:b1:6f:83:0c:b7:db:01:ce:f4:8c:0f:91:5f:b6:
                    4e:be:33:d0:2b:93:44:8a:7d:dd:24:19:f1:b4:02:
                    23:36:d7:6d:1a:b7:7d:8d:ad:bf:7a:30:7b:ba:db:
                    c1:5d:60:42:5c:68:8a:02:a9:6a:5a:49:4c:e0:77:
                    7b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:57:09:A1:36:DE:A1:AB:BE:7A:F3:F6:52:4A:E4:14:35:22:FD:2D
            X509v3 Authority Key Identifier:
                keyid:CB:C8:C0:64:6E:B6:CB:F2:69:8B:B0:A7:60:50:3B:CD:B9:1F:1A:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y8jAZG62y_Jpi7CnYFA7zbkfGlw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/NFcJoTbeoau-evP2UkrkFDUi_S0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216438

    Signature Algorithm: sha256WithRSAEncryption
         0c:0f:c6:16:63:38:0e:b3:36:23:15:71:d6:aa:41:6e:52:0a:
         99:07:ca:2e:6c:ad:96:1e:d8:0b:3e:55:57:46:c8:65:cb:a2:
         7f:4c:d0:c1:1f:78:01:5c:73:37:30:76:b3:e3:38:27:bb:67:
         df:c5:e0:21:a3:99:8a:85:96:36:3f:31:63:8e:cf:ec:2a:84:
         f9:79:ed:b4:72:8c:57:45:91:af:17:21:58:d5:c1:e6:0a:55:
         df:dc:b8:d5:8a:db:15:8e:13:86:6b:08:64:14:f5:f1:0d:b7:
         c8:ad:84:93:4a:4b:59:cf:3c:f3:b2:5d:a5:62:7f:48:fc:6d:
         3d:f2:5b:d4:f9:17:cd:af:80:1d:39:0c:49:b3:42:41:97:cf:
         a6:1a:d3:44:53:da:85:3d:3e:c0:12:ec:87:20:41:10:35:3c:
         4e:f5:91:f0:19:23:66:6f:d0:17:41:9e:d9:f3:4d:32:0c:25:
         20:07:ad:78:79:a0:87:7a:c2:e4:49:1d:28:3f:34:8c:ab:a1:
         ee:7e:3d:53:93:c4:74:47:fd:10:ae:f0:4b:60:88:dd:1e:74:
         21:49:75:ff:f7:06:50:0e:44:86:b1:f5:fa:b8:ac:d1:da:75:
         08:f2:c5:df:0a:a0:38:a4:e3:a5:e3:68:2a:5e:df:23:18:45:
         d6:9b:fe:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:50:08 2026 by rpki-client