Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/dd8569-ac32-4e02-9375-40d823c9c0c4/1/mJ5RCAjBaYyADaNeklOPoY_zZrc.asa
File:                     mJ5RCAjBaYyADaNeklOPoY_zZrc.asa (raw, json)
Hash identifier:          jcbnQ3QTEujNY2UmLxDviKLr49cB9i4XezfDbSMWaWs=
Subject key identifier:   98:9E:51:08:08:C1:69:8C:80:0D:A3:5E:92:53:8F:A1:8F:F3:66:B7
Certificate issuer:       /CN=c735a6815f600ea249b1da0a6f431efae81d66b0
Certificate serial:       019FD39522EF8946F0046E630FB226DB86D3
Authority key identifier: C7:35:A6:81:5F:60:0E:A2:49:B1:DA:0A:6F:43:1E:FA:E8:1D:66:B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xzWmgV9gDqJJsdoKb0Me-ugdZrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/dd8569-ac32-4e02-9375-40d823c9c0c4/1/mJ5RCAjBaYyADaNeklOPoY_zZrc.asa
Signing time:             Wed 05 Aug 2026 20:19:54 +0000
ASPA not before:          Wed 05 Aug 2026 20:19:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            216339
Providers:                AS: 29632
                          AS: 41051
                          AS: 209533
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/dd8569-ac32-4e02-9375-40d823c9c0c4/1/xzWmgV9gDqJJsdoKb0Me-ugdZrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/dd8569-ac32-4e02-9375-40d823c9c0c4/1/xzWmgV9gDqJJsdoKb0Me-ugdZrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xzWmgV9gDqJJsdoKb0Me-ugdZrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 23:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:d3:95:22:ef:89:46:f0:04:6e:63:0f:b2:26:db:86:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c735a6815f600ea249b1da0a6f431efae81d66b0
        Validity
            Not Before: Aug  5 20:19:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=989e510808c1698c800da35e92538fa18ff366b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d4:be:97:fa:5f:6b:f2:9a:3a:ed:36:0a:3c:
                    3d:7c:96:ba:c7:2e:33:ce:86:7e:cf:ca:fd:77:80:
                    d2:fc:de:bf:73:69:2b:5c:c7:cd:3e:d1:1e:40:7a:
                    cb:b2:66:4d:dc:10:bd:c4:bd:93:82:73:40:57:dd:
                    39:4a:2c:f8:ca:47:52:9b:a6:9c:99:9c:62:92:8f:
                    9b:11:4e:7f:3f:b6:6b:d4:ca:c5:75:09:9d:b8:e7:
                    47:97:af:4d:08:ed:e7:32:31:2e:8a:c5:43:0e:c9:
                    76:55:08:c5:d9:b3:b3:de:a9:2f:d5:6c:11:2b:4f:
                    a9:7c:ce:f1:c0:ab:37:5a:6d:3c:c2:ac:86:e5:a1:
                    a8:da:f1:bb:d5:27:d0:04:30:31:69:fb:bd:35:3e:
                    da:c4:0e:ac:ee:f5:a8:91:31:c0:37:63:fe:52:48:
                    8d:45:91:19:e1:80:0d:32:1f:19:a3:db:05:64:7d:
                    bc:47:c4:6d:b7:94:e7:3b:fb:aa:7d:e6:ec:62:bd:
                    2d:33:a6:f7:a5:25:66:ce:8b:a0:12:56:8c:1e:46:
                    4c:a7:7a:39:b6:7d:d7:64:2a:66:f0:e2:ef:1e:8a:
                    d5:a8:b9:e6:81:9b:56:19:17:2a:f3:77:ca:78:ee:
                    7e:82:fc:dd:6e:13:cb:f0:29:d4:47:e7:cb:fc:c1:
                    95:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:9E:51:08:08:C1:69:8C:80:0D:A3:5E:92:53:8F:A1:8F:F3:66:B7
            X509v3 Authority Key Identifier:
                keyid:C7:35:A6:81:5F:60:0E:A2:49:B1:DA:0A:6F:43:1E:FA:E8:1D:66:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xzWmgV9gDqJJsdoKb0Me-ugdZrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dd8569-ac32-4e02-9375-40d823c9c0c4/1/mJ5RCAjBaYyADaNeklOPoY_zZrc.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dd8569-ac32-4e02-9375-40d823c9c0c4/1/xzWmgV9gDqJJsdoKb0Me-ugdZrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216339

    Signature Algorithm: sha256WithRSAEncryption
         6e:0a:ef:37:f4:3d:0d:48:e0:d2:37:99:3c:1b:3b:9b:39:fe:
         da:70:bb:00:b7:31:64:fb:a1:3f:45:0b:00:8c:b4:71:53:12:
         85:cf:84:db:ac:00:f9:ad:05:83:75:3a:65:ca:b0:3b:b3:e4:
         d7:f6:df:b4:ba:15:73:ef:4e:11:82:ec:5b:80:ae:9c:ea:cc:
         a0:d0:66:00:eb:83:3e:2e:e4:2f:1b:4b:d9:4f:66:2c:6a:9b:
         cc:72:c0:ba:17:3c:f7:a5:f5:f7:fe:a4:98:30:39:98:5a:26:
         30:e3:fb:8a:77:cf:35:29:3b:da:09:7b:ed:ca:c9:ea:78:94:
         38:06:ab:1d:2c:9e:86:fa:25:c4:4a:64:a1:2e:78:bb:9d:00:
         6d:e2:b4:4c:96:1f:a5:09:95:15:6c:e0:fa:2a:3f:d1:d9:d2:
         00:e8:96:9d:b5:70:13:53:b8:74:ea:c2:e0:8f:68:9b:94:9c:
         b0:26:84:14:93:f1:f0:10:61:02:df:d2:02:81:5b:bd:32:87:
         0e:03:7b:bd:f9:da:52:fc:e8:2a:50:70:e1:7f:5a:19:90:58:
         df:53:37:29:6c:db:2b:40:01:4c:f4:b9:02:6d:3b:cc:9f:ad:
         3e:75:19:20:fc:4a:1b:c3:a2:91:40:02:34:09:8a:a9:d1:95:
         ed:75:50:a8
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ/TlSLviUbwBG5jD7Im24bTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3MzVhNjgxNWY2MDBlYTI0OWIxZGEwYTZmNDMxZWZhZTgx
ZDY2YjAwHhcNMjYwODA1MjAxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODllNTEwODA4YzE2OThjODAwZGEzNWU5MjUzOGZhMThmZjM2NmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtS+l/pfa/KaOu02Cjw9fJa6xy4z
zoZ+z8r9d4DS/N6/c2krXMfNPtEeQHrLsmZN3BC9xL2TgnNAV905Siz4ykdSm6ac
mZxiko+bEU5/P7Zr1MrFdQmduOdHl69NCO3nMjEuisVDDsl2VQjF2bOz3qkv1WwR
K0+pfM7xwKs3Wm08wqyG5aGo2vG71SfQBDAxafu9NT7axA6s7vWokTHAN2P+UkiN
RZEZ4YANMh8Zo9sFZH28R8Rtt5TnO/uqfebsYr0tM6b3pSVmzougElaMHkZMp3o5
tn3XZCpm8OLvHorVqLnmgZtWGRcq83fKeO5+gvzdbhPL8CnUR+fL/MGV9QIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFJieUQgIwWmMgA2jXpJTj6GP82a3MB8GA1UdIwQY
MBaAFMc1poFfYA6iSbHaCm9DHvroHWawMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHpXbWdWOWdEcUpKc2RvS2IwTWUtdWdkWnJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9kZDg1NjktYWMzMi00ZTAyLTkzNzUt
NDBkODIzYzljMGM0LzEvbUo1UkNBakJhWXlBRGFOZWtsT1BvWV96WnJjLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9kZDg1NjktYWMzMi00ZTAyLTkzNzUtNDBkODIzYzljMGM0
LzEveHpXbWdWOWdEcUpKc2RvS2IwTWUtdWdkWnJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNNEzANBgkqhkiG
9w0BAQsFAAOCAQEAbgrvN/Q9DUjg0jeZPBs7mzn+2nC7ALcxZPuhP0ULAIy0cVMS
hc+E26wA+a0Fg3U6ZcqwO7Pk1/bftLoVc+9OEYLsW4CunOrMoNBmAOuDPi7kLxtL
2U9mLGqbzHLAuhc896X19/6kmDA5mFomMOP7infPNSk72gl77crJ6niUOAarHSye
hvolxEpkoS54u50AbeK0TJYfpQmVFWzg+io/0dnSAOiWnbVwE1O4dOrC4I9om5Sc
sCaEFJPx8BBhAt/SAoFbvTKHDgN7vfnaUvzoKlBw4X9aGZBY31M3KWzbK0ABTPS5
Am07zJ+tPnUZIPxKG8OikUACNAmKqdGV7XVQqA==
-----END CERTIFICATE-----
Generated at Thu Aug 13 06:50:22 2026 by rpki-client