Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/ef0a1e-f881-41f7-85a5-f0c0350d6320/1/iWAmUFbX8DOC6sGuMnwnCK1fnyM.asa
File:                     iWAmUFbX8DOC6sGuMnwnCK1fnyM.asa (raw, json)
Hash identifier:          UgNnrp4T2gV/9ZM+lt6scNgekuq4L4SWsoVKSp2uNKQ=
Subject key identifier:   89:60:26:50:56:D7:F0:33:82:EA:C1:AE:32:7C:27:08:AD:5F:9F:23
Certificate issuer:       /CN=858c3e921068a20ec62b03a2d9a1971a559905da
Certificate serial:       01A08078444B4EA345B4ED41F60812585402
Authority key identifier: 85:8C:3E:92:10:68:A2:0E:C6:2B:03:A2:D9:A1:97:1A:55:99:05:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hYw-khBoog7GKwOi2aGXGlWZBdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/ef0a1e-f881-41f7-85a5-f0c0350d6320/1/iWAmUFbX8DOC6sGuMnwnCK1fnyM.asa
Signing time:             Tue 08 Sep 2026 10:02:40 +0000
ASPA not before:          Tue 08 Sep 2026 10:02:40 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            216155
Providers:                AS: 50124
                          AS: 62000
                          AS: 199524
                          AS: 215114
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/ef0a1e-f881-41f7-85a5-f0c0350d6320/1/hYw-khBoog7GKwOi2aGXGlWZBdo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/ef0a1e-f881-41f7-85a5-f0c0350d6320/1/hYw-khBoog7GKwOi2aGXGlWZBdo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hYw-khBoog7GKwOi2aGXGlWZBdo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 09:18:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:80:78:44:4b:4e:a3:45:b4:ed:41:f6:08:12:58:54:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=858c3e921068a20ec62b03a2d9a1971a559905da
        Validity
            Not Before: Sep  8 10:02:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8960265056d7f03382eac1ae327c2708ad5f9f23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b3:ae:95:e7:f8:b4:63:43:2a:10:7e:63:d2:
                    1c:21:fd:0f:0e:6c:70:b0:c1:be:a0:de:27:4f:4b:
                    3e:d4:ce:6a:cd:87:01:eb:9b:2d:d8:c8:55:f0:4c:
                    97:8a:4e:67:61:33:e7:e4:36:bf:0a:e8:f1:4c:3d:
                    b9:b9:50:07:29:59:6d:c1:43:e8:d7:94:c9:6d:f4:
                    99:88:28:fb:fa:c1:70:43:69:09:be:18:5a:f8:24:
                    47:59:d5:2d:d6:45:4c:0d:46:30:61:53:a0:00:ff:
                    f0:ee:11:c4:75:cb:da:0f:00:55:b8:db:3e:ca:7d:
                    19:c4:86:1c:7b:6d:bc:e6:44:8a:db:64:38:9d:34:
                    25:a6:7c:d5:22:bb:19:d3:6f:ae:5e:69:ff:9d:55:
                    13:3f:e4:35:21:ea:b5:cd:8d:0f:10:8f:5b:c1:ea:
                    c3:be:ae:e7:10:ea:d7:86:8b:7a:72:d7:73:c3:39:
                    9a:07:46:38:03:cf:b4:f2:64:68:d9:0e:46:22:36:
                    d4:5f:68:5b:c3:ce:8d:17:11:d5:b3:25:b9:9a:95:
                    0b:91:cb:3e:50:23:51:cf:c2:b1:16:28:c4:a4:4a:
                    d6:ce:69:fe:5e:c5:c3:8b:65:e8:42:7b:23:9b:37:
                    d6:4f:af:76:4d:33:02:a2:5c:86:69:eb:e4:4f:df:
                    8f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:60:26:50:56:D7:F0:33:82:EA:C1:AE:32:7C:27:08:AD:5F:9F:23
            X509v3 Authority Key Identifier:
                keyid:85:8C:3E:92:10:68:A2:0E:C6:2B:03:A2:D9:A1:97:1A:55:99:05:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hYw-khBoog7GKwOi2aGXGlWZBdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ef0a1e-f881-41f7-85a5-f0c0350d6320/1/iWAmUFbX8DOC6sGuMnwnCK1fnyM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ef0a1e-f881-41f7-85a5-f0c0350d6320/1/hYw-khBoog7GKwOi2aGXGlWZBdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216155

    Signature Algorithm: sha256WithRSAEncryption
         83:59:9a:c7:b4:79:2d:91:2c:99:6b:eb:00:d2:1b:ed:2d:34:
         35:8b:62:36:7d:89:58:e7:15:3b:6e:5a:c2:20:7f:76:9e:0e:
         7c:d3:e3:fc:b7:6b:cf:ef:f8:0e:42:8f:d1:6f:cc:03:8f:22:
         cc:37:fd:30:c6:86:9e:68:67:f7:ee:bb:5f:59:77:3c:f1:42:
         96:40:c3:4f:aa:8f:64:77:95:2f:1e:1a:4b:91:5f:37:b3:1e:
         4b:87:2d:c6:fe:34:7d:83:2c:58:c5:b0:51:46:fe:94:a0:8c:
         f8:72:2d:30:45:d3:11:3c:77:b5:d5:88:97:d2:1e:e2:9b:9a:
         1f:78:a2:52:13:f6:f3:4b:ae:09:8a:21:90:22:6f:af:95:9a:
         5c:55:22:96:da:dd:49:3a:f1:94:87:ee:72:13:24:00:c3:7b:
         ff:5c:85:e3:49:b4:62:45:a2:81:19:2c:08:39:1a:05:a6:96:
         17:17:ed:04:da:a0:56:e5:c0:93:91:f6:27:08:b4:44:c3:a0:
         37:3c:23:0a:07:8d:57:c0:7c:e8:1f:de:98:e7:45:80:a3:7d:
         9c:92:65:36:5d:fe:68:ff:51:b7:02:34:3a:dd:f8:3a:86:ae:
         f8:73:6b:30:4a:d4:ae:1d:d3:09:a7:9b:6d:1b:1f:36:5c:c2:
         64:4c:08:17
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAaCAeERLTqNFtO1B9ggSWFQCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1OGMzZTkyMTA2OGEyMGVjNjJiMDNhMmQ5YTE5NzFhNTU5
OTA1ZGEwHhcNMjYwOTA4MTAwMjQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTYwMjY1MDU2ZDdmMDMzODJlYWMxYWUzMjdjMjcwOGFkNWY5ZjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLOulef4tGNDKhB+Y9IcIf0PDmxw
sMG+oN4nT0s+1M5qzYcB65st2MhV8EyXik5nYTPn5Da/CujxTD25uVAHKVltwUPo
15TJbfSZiCj7+sFwQ2kJvhha+CRHWdUt1kVMDUYwYVOgAP/w7hHEdcvaDwBVuNs+
yn0ZxIYce2285kSK22Q4nTQlpnzVIrsZ02+uXmn/nVUTP+Q1Ieq1zY0PEI9bwerD
vq7nEOrXhot6ctdzwzmaB0Y4A8+08mRo2Q5GIjbUX2hbw86NFxHVsyW5mpULkcs+
UCNRz8KxFijEpErWzmn+XsXDi2XoQnsjmzfWT692TTMColyGaevkT9+PbQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFIlgJlBW1/AzgurBrjJ8JwitX58jMB8GA1UdIwQY
MBaAFIWMPpIQaKIOxisDotmhlxpVmQXaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFl3LWtoQm9vZzdHS3dPaTJhR1hHbFdaQmRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9lZjBhMWUtZjg4MS00MWY3LTg1YTUt
ZjBjMDM1MGQ2MzIwLzEvaVdBbVVGYlg4RE9DNnNHdU1ud25DSzFmbnlNLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9lZjBhMWUtZjg4MS00MWY3LTg1YTUtZjBjMDM1MGQ2MzIw
LzEvaFl3LWtoQm9vZzdHS3dPaTJhR1hHbFdaQmRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNMWzANBgkqhkiG
9w0BAQsFAAOCAQEAg1max7R5LZEsmWvrANIb7S00NYtiNn2JWOcVO25awiB/dp4O
fNPj/Ldrz+/4DkKP0W/MA48izDf9MMaGnmhn9+67X1l3PPFClkDDT6qPZHeVLx4a
S5FfN7MeS4ctxv40fYMsWMWwUUb+lKCM+HItMEXTETx3tdWIl9Ie4puaH3iiUhP2
80uuCYohkCJvr5WaXFUiltrdSTrxlIfuchMkAMN7/1yF40m0YkWigRksCDkaBaaW
FxftBNqgVuXAk5H2Jwi0RMOgNzwjCgeNV8B86B/emOdFgKN9nJJlNl3+aP9RtwI0
Ot34Ooau+HNrMErUrh3TCaebbRsfNlzCZEwIFw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 15:00:10 2026 by rpki-client