Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/AG-Qou67efcOzt4fxQmqDQln1Hk.asa
File:                     AG-Qou67efcOzt4fxQmqDQln1Hk.asa (raw, json)
Hash identifier:          9zDiR1oPKgS70CwQIVFWQtf2kS0dn9/p1LP7K2KCByQ=
Subject key identifier:   00:6F:90:A2:EE:BB:79:F7:0E:CE:DE:1F:C5:09:AA:0D:09:67:D4:79
Certificate issuer:       /CN=b56daa6f850414a13f650df094506628a46dc12f
Certificate serial:       019F19012CD107A84B252E361A7C04A4B5BB
Authority key identifier: B5:6D:AA:6F:85:04:14:A1:3F:65:0D:F0:94:50:66:28:A4:6D:C1:2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/AG-Qou67efcOzt4fxQmqDQln1Hk.asa
Signing time:             Tue 30 Jun 2026 14:48:55 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:55 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            215536
Providers:                AS: 211358
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 15 Jul 2026 02:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:2c:d1:07:a8:4b:25:2e:36:1a:7c:04:a4:b5:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56daa6f850414a13f650df094506628a46dc12f
        Validity
            Not Before: Jun 30 14:48:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=006f90a2eebb79f70ecede1fc509aa0d0967d479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5a:72:6a:72:db:2c:d5:b1:26:16:88:14:71:
                    ff:d5:b4:3e:94:7f:79:fe:0b:22:dd:69:40:ad:25:
                    92:2a:0e:da:40:d1:80:a6:f5:cb:bd:ec:22:44:44:
                    e7:58:5d:a7:a9:d5:83:f2:98:4b:51:32:bc:2c:88:
                    7a:81:54:11:42:bb:de:37:46:a5:53:11:de:13:86:
                    a3:79:e5:5b:08:1e:b7:9a:e7:48:c1:f4:d8:b0:ba:
                    7d:f3:03:bd:d2:2a:e4:b4:b9:6e:01:5b:86:aa:a0:
                    cf:ca:88:6e:b7:48:f8:c0:b1:01:9f:e1:3f:e9:da:
                    4c:d3:6a:22:9c:b9:5b:50:be:f3:da:a7:06:f1:20:
                    7f:94:08:2c:af:dc:85:1c:5c:af:b3:79:91:a0:ac:
                    3a:7a:08:33:9c:5b:e5:90:44:08:88:00:52:87:75:
                    81:fb:82:75:f8:92:86:2b:41:0c:b7:82:58:54:a7:
                    8b:cc:3e:fe:fe:9c:5c:9e:45:f0:21:a6:d6:94:04:
                    ab:c7:1b:c5:53:a2:e4:e7:6d:ec:c9:df:3a:60:d6:
                    a7:ee:df:60:e2:7e:e2:93:0b:84:23:61:d3:12:b6:
                    6c:53:a6:af:82:d1:85:3f:c3:32:31:4e:ae:e9:b2:
                    63:05:67:96:37:40:dd:45:bf:43:1f:b0:74:7e:7b:
                    7f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:6F:90:A2:EE:BB:79:F7:0E:CE:DE:1F:C5:09:AA:0D:09:67:D4:79
            X509v3 Authority Key Identifier:
                keyid:B5:6D:AA:6F:85:04:14:A1:3F:65:0D:F0:94:50:66:28:A4:6D:C1:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/AG-Qou67efcOzt4fxQmqDQln1Hk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215536

    Signature Algorithm: sha256WithRSAEncryption
         8c:02:ef:9d:37:c8:23:1e:a0:72:96:ed:6e:17:2d:47:e4:5b:
         e1:6e:be:38:83:e1:91:ac:60:fb:a9:71:78:24:6e:db:db:ae:
         43:0c:86:44:02:0c:5f:73:2b:1d:04:62:a8:72:74:85:0d:86:
         c2:d4:37:2c:25:5c:e9:e6:b2:5d:6f:f5:01:ef:97:2f:29:0b:
         93:18:35:1b:84:15:88:16:5a:d1:ca:78:40:cd:cd:c1:ac:10:
         61:2b:78:de:9d:54:28:ad:f1:39:22:45:ee:97:86:7b:44:69:
         cc:fd:00:d9:30:eb:cf:ca:62:3d:c0:1b:5e:ec:e4:15:e2:ad:
         8f:92:20:af:44:eb:10:20:b3:72:81:70:6c:b1:05:a5:16:e8:
         fa:45:dc:65:3b:74:32:a6:46:98:f8:69:a0:58:d1:9c:07:87:
         48:c9:6b:1d:20:ac:df:b6:2c:81:6e:da:b1:42:36:a4:2e:79:
         fe:98:93:98:0b:46:6d:86:27:ed:39:33:ad:ef:e5:54:46:7d:
         5c:87:26:1a:2d:7a:e5:82:23:ec:7a:ec:b4:70:21:7c:f1:6b:
         96:fd:7c:93:30:44:d0:0d:a1:73:da:ce:d3:78:d5:f7:66:f6:
         3b:b8:32:f2:aa:8d:1f:b0:07:26:69:e1:50:8c:04:d4:c2:47:
         7a:09:66:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 11:49:53 2026 by rpki-client