Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/nj4RvWY6SQhdf9jK78P5VxbpPkM.asa
File:                     nj4RvWY6SQhdf9jK78P5VxbpPkM.asa (raw, json)
Hash identifier:          CRDccxiWmZsXmHnjQCn04XqTSaGDJiN+KxOYKzwFwD0=
Subject key identifier:   9E:3E:11:BD:66:3A:49:08:5D:7F:D8:CA:EF:C3:F9:57:16:E9:3E:43
Certificate issuer:       /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Certificate serial:       019DC35341DAFE3A4BFAEE1FCC81D452962C
Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/nj4RvWY6SQhdf9jK78P5VxbpPkM.asa
Signing time:             Sat 25 Apr 2026 06:28:26 +0000
ASPA not before:          Sat 25 Apr 2026 06:28:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            216096
Providers:                AS: 174
                          AS: 1299
                          AS: 3257
                          AS: 5494
                          AS: 6830
                          AS: 6939
                          AS: 7720
                          AS: 8330
                          AS: 8550
                          AS: 8714
                          AS: 21700
                          AS: 21738
                          AS: 31561
                          AS: 34307
                          AS: 34872
                          AS: 34927
                          AS: 40542
                          AS: 44382
                          AS: 44901
                          AS: 47498
                          AS: 50952
                          AS: 51722
                          AS: 52025
                          AS: 57369
                          AS: 58057
                          AS: 59678
                          AS: 61138
                          AS: 62768
                          AS: 150784
                          AS: 202409
                          AS: 206221
                          AS: 207176
                          AS: 209643
                          AS: 212895
                          AS: 214354
                          AS: 215638
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 03:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:c3:53:41:da:fe:3a:4b:fa:ee:1f:cc:81:d4:52:96:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
        Validity
            Not Before: Apr 25 06:28:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9e3e11bd663a49085d7fd8caefc3f95716e93e43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9b:c2:71:3a:aa:fb:9e:ee:17:a0:7e:c0:e0:
                    b2:1a:db:d8:4b:a3:db:68:5b:66:0b:22:65:64:de:
                    fe:c9:5d:83:9e:e6:a5:cf:da:a9:1e:57:b3:8d:1d:
                    06:a3:35:89:57:dc:6d:6d:73:22:d3:94:9d:5e:13:
                    e9:3b:67:e3:54:34:9e:4a:5c:e8:4b:88:c2:22:9a:
                    9f:07:b1:af:5e:da:64:38:6d:61:12:11:34:93:18:
                    38:2f:7b:f4:90:d9:a2:a2:38:c3:96:a7:39:03:db:
                    28:e8:70:d4:82:e7:de:d2:08:3e:d1:be:99:97:2d:
                    07:d0:6f:94:94:0a:78:e9:3c:fc:47:6e:13:05:82:
                    06:ac:67:3d:96:c7:b1:42:50:b3:db:10:13:be:4a:
                    52:64:26:4b:9e:2e:dd:d4:cd:98:53:c0:ff:05:b5:
                    ea:34:c3:95:ca:9f:36:c2:6b:f5:8a:cf:ec:9f:d0:
                    e1:17:00:9e:c5:14:ff:04:2f:38:58:d3:f8:b9:57:
                    94:aa:3d:13:43:4f:93:ac:c2:f4:1d:07:64:41:8c:
                    eb:06:0d:2f:11:d3:23:18:ed:a6:ec:8e:f5:6c:12:
                    4e:47:56:22:e2:39:cf:99:2e:16:3b:ef:c8:d9:70:
                    e6:6e:8c:78:90:e0:39:76:67:a6:1b:0e:f0:0c:22:
                    87:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:3E:11:BD:66:3A:49:08:5D:7F:D8:CA:EF:C3:F9:57:16:E9:3E:43
            X509v3 Authority Key Identifier:
                keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/nj4RvWY6SQhdf9jK78P5VxbpPkM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216096

    Signature Algorithm: sha256WithRSAEncryption
         35:0e:94:aa:08:1c:ae:17:72:4d:0b:b8:db:4a:87:94:6b:69:
         c7:1b:dd:49:78:76:29:06:6a:bb:78:15:46:89:41:84:20:9c:
         3a:5c:85:ef:ea:aa:98:34:b3:ea:8a:fd:bd:02:d1:2f:ae:04:
         d9:42:99:1a:e4:0a:57:96:05:d9:91:da:7d:3f:97:65:80:49:
         be:e1:20:da:d8:b4:6b:09:02:92:f5:bf:b8:ec:6d:e2:24:c0:
         84:f0:7c:82:ab:8f:a6:80:aa:fc:75:5d:5e:af:d2:59:1a:93:
         14:3c:48:13:4e:b4:cc:e6:4d:e8:31:fd:2e:15:5d:11:6d:00:
         54:71:e6:33:52:3c:55:e9:6b:1b:31:61:93:76:c2:b6:7b:01:
         e2:3c:64:0e:3e:de:29:0c:77:f9:41:5d:52:fe:f5:24:99:d8:
         ee:e1:5b:2a:1a:d8:c0:a4:80:2e:a6:5c:f6:f6:aa:df:3f:a6:
         0b:5f:24:c2:35:8e:ab:17:e3:51:12:fb:6f:64:2a:0f:be:a5:
         7d:59:42:ea:68:de:15:ba:ca:38:5d:3f:08:a4:94:97:e2:0b:
         a4:f5:50:a4:b8:05:e9:ef:8b:12:1a:e4:9b:2d:95:d7:fd:80:
         df:0d:3b:72:29:ef:f9:14:eb:40:2c:63:be:27:04:d7:6a:b9:
         bc:29:63:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 11:57:14 2026 by rpki-client