Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/Sn0QHgY954LpBt8DtGcKjxR44Dg.asa
File:                     Sn0QHgY954LpBt8DtGcKjxR44Dg.asa (raw, json)
Hash identifier:          2M2BaxTHZl1fixS1P0qCYkfhEwbPQ8Y6PSqpN2/G+4w=
Subject key identifier:   4A:7D:10:1E:06:3D:E7:82:E9:06:DF:03:B4:67:0A:8F:14:78:E0:38
Certificate issuer:       /CN=b56daa6f850414a13f650df094506628a46dc12f
Certificate serial:       019FDC172121D81EF6443BB71BF846BD4F77
Authority key identifier: B5:6D:AA:6F:85:04:14:A1:3F:65:0D:F0:94:50:66:28:A4:6D:C1:2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/Sn0QHgY954LpBt8DtGcKjxR44Dg.asa
Signing time:             Fri 07 Aug 2026 11:58:51 +0000
ASPA not before:          Fri 07 Aug 2026 11:58:51 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            211358
Providers:                AS: 6204
                          AS: 6517
                          AS: 6939
                          AS: 8772
                          AS: 11967
                          AS: 16276
                          AS: 24482
                          AS: 29632
                          AS: 33387
                          AS: 34927
                          AS: 41051
                          AS: 52025
                          AS: 152565
                          AS: 200132
                          AS: 207841
                          AS: 209533
                          AS: 209735
                          AS: 211288
                          AS: 212895
                          AS: 215638
                          AS: 215828
                          AS: 216324
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:dc:17:21:21:d8:1e:f6:44:3b:b7:1b:f8:46:bd:4f:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56daa6f850414a13f650df094506628a46dc12f
        Validity
            Not Before: Aug  7 11:58:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4a7d101e063de782e906df03b4670a8f1478e038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4d:18:f9:46:db:fb:54:69:f3:e6:cd:8a:d8:
                    84:a7:eb:6f:8c:89:de:98:ac:07:ce:d5:f6:36:dd:
                    21:6e:5c:fe:48:9d:c3:99:d2:fc:25:21:6e:eb:9d:
                    a3:a1:a4:f2:19:c2:ad:c5:2b:b7:f1:4b:66:56:22:
                    20:42:20:f0:3b:c5:86:0e:a6:7e:b2:cb:c7:13:c1:
                    b7:f8:1c:97:fe:6e:1d:f7:cb:63:34:09:c5:80:e8:
                    c8:90:c6:3e:5c:fa:66:ad:87:af:38:75:50:43:3f:
                    c8:38:c3:f5:2e:5f:00:ad:0d:a2:7f:2f:50:15:eb:
                    b6:d7:13:ec:de:ec:8c:92:85:03:a4:d9:38:5d:93:
                    89:4a:eb:64:80:26:40:b4:2d:8e:a4:51:c4:d3:69:
                    59:a3:e2:70:f7:5a:09:26:16:10:5b:eb:0a:a3:d2:
                    3f:c7:e4:57:5d:a4:29:b0:93:29:6c:b2:75:9f:84:
                    cc:13:7c:42:bd:7b:6c:1a:aa:7c:c7:6f:be:5d:85:
                    3e:dc:f4:1a:88:d3:58:98:34:0e:a6:2f:c3:85:27:
                    79:aa:a0:fe:ba:8c:e6:d1:84:3f:4d:bb:97:3d:6e:
                    a8:c2:b1:40:e5:29:62:fe:94:52:15:5e:b7:cb:10:
                    b1:8b:3e:d1:f9:16:82:2f:d8:9f:c7:60:05:60:03:
                    74:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:7D:10:1E:06:3D:E7:82:E9:06:DF:03:B4:67:0A:8F:14:78:E0:38
            X509v3 Authority Key Identifier:
                keyid:B5:6D:AA:6F:85:04:14:A1:3F:65:0D:F0:94:50:66:28:A4:6D:C1:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/Sn0QHgY954LpBt8DtGcKjxR44Dg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211358

    Signature Algorithm: sha256WithRSAEncryption
         c1:32:4f:a6:75:6b:a0:64:a3:ef:e8:15:a3:56:d9:a2:13:37:
         6c:34:f2:76:07:6e:83:a3:32:13:ca:8b:7f:85:a3:25:ee:51:
         04:69:f7:90:6f:3a:10:41:4f:16:42:bc:85:38:44:b4:8f:6e:
         0f:f5:5a:95:03:7b:75:6b:fe:83:0e:58:58:fb:e7:a5:f6:f2:
         de:cb:2f:1b:c2:39:7b:a8:aa:32:2e:26:a1:36:4a:9d:13:61:
         79:cc:15:ca:b4:5b:19:8e:45:da:11:d6:d8:69:84:ca:66:d3:
         10:80:0a:6b:1d:fc:0e:0f:75:f1:4c:c2:0f:fb:b0:15:32:37:
         52:45:4d:fe:15:5a:31:3e:be:a8:1a:40:34:cb:37:2b:4a:25:
         02:a0:80:1f:c1:6d:06:3a:a1:73:49:1f:f2:25:8a:47:6c:f8:
         e8:6d:09:a5:f3:8e:95:72:b6:aa:c2:81:37:7e:ae:fb:db:d9:
         e9:60:ba:60:ed:d3:43:c7:9c:1f:54:59:3b:e5:ae:bd:72:da:
         4e:ac:b6:34:da:be:b8:61:e5:bd:c0:b9:73:71:90:bd:70:93:
         16:88:db:59:a0:39:b2:37:77:56:10:d8:79:4f:c1:31:07:26:
         71:69:4a:6e:2b:6d:a2:93:4c:67:d4:59:aa:67:02:9c:cf:73:
         d0:19:46:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:51:27 2026 by rpki-client