Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/956748-e858-473c-81c5-09f250e1b9ea/1/X7p4GpmVF8fRosHtWstP9WAbsfk.asa
File:                     X7p4GpmVF8fRosHtWstP9WAbsfk.asa (raw, json)
Hash identifier:          ifmWI2l5FXM2+xdgsA/GHYf01f0SXAv8H1iT8gXkOOo=
Subject key identifier:   5F:BA:78:1A:99:95:17:C7:D1:A2:C1:ED:5A:CB:4F:F5:60:1B:B1:F9
Certificate issuer:       /CN=360c26f9f5bd5176fb9ad0b65a948d0e8dd90ee4
Certificate serial:       019CC0EBD518C8B1EE9C344ADFE6E74E76A1
Authority key identifier: 36:0C:26:F9:F5:BD:51:76:FB:9A:D0:B6:5A:94:8D:0E:8D:D9:0E:E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/956748-e858-473c-81c5-09f250e1b9ea/1/X7p4GpmVF8fRosHtWstP9WAbsfk.asa
Signing time:             Fri 06 Mar 2026 02:13:26 +0000
ASPA not before:          Fri 06 Mar 2026 02:13:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214806
Providers:                AS: 33387
                          AS: 34927
                          AS: 35661
                          AS: 53667
                          AS: 393577
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/956748-e858-473c-81c5-09f250e1b9ea/1/Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/956748-e858-473c-81c5-09f250e1b9ea/1/Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c0:eb:d5:18:c8:b1:ee:9c:34:4a:df:e6:e7:4e:76:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=360c26f9f5bd5176fb9ad0b65a948d0e8dd90ee4
        Validity
            Not Before: Mar  6 02:13:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5fba781a999517c7d1a2c1ed5acb4ff5601bb1f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:34:4a:07:1e:26:63:f2:d9:54:3e:d8:af:b1:
                    fe:4b:a2:6b:a6:1b:72:1f:78:56:79:2d:7f:28:02:
                    33:91:83:a1:8d:31:75:fb:36:5c:c5:e8:2a:fa:cd:
                    0a:db:e0:aa:b9:5d:e1:91:33:e8:ee:13:06:a0:95:
                    58:e6:97:c5:2a:67:33:f7:ef:ba:8e:2c:3a:e5:b0:
                    27:9b:33:48:ff:df:eb:53:47:36:78:4d:3e:71:f7:
                    76:25:ca:da:35:91:7a:2f:83:95:98:49:8f:36:dc:
                    27:3a:3d:97:5b:b4:65:89:90:62:7c:62:64:9c:99:
                    d1:e8:f1:ce:37:10:3e:24:bc:8a:7d:51:f9:3d:10:
                    11:2c:67:68:6a:c6:ab:28:06:6a:b4:1e:c8:c5:d9:
                    ac:ba:61:37:41:79:0c:68:40:0c:59:c9:38:25:b4:
                    4b:47:23:56:72:1b:12:60:f5:3c:f4:69:e1:e4:ce:
                    a5:5e:1c:36:f4:c2:dd:03:d7:cc:7a:c1:00:51:c2:
                    f9:32:e2:41:1f:12:ef:3d:2a:ee:5e:32:1b:bc:7f:
                    65:ad:07:fd:21:ef:37:3c:d7:40:62:17:ee:b8:35:
                    20:2d:d8:62:73:4f:a9:48:66:6b:b1:8b:2d:ac:dd:
                    64:58:44:75:c9:33:a0:9b:18:54:e8:f4:c3:32:9e:
                    6f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:BA:78:1A:99:95:17:C7:D1:A2:C1:ED:5A:CB:4F:F5:60:1B:B1:F9
            X509v3 Authority Key Identifier:
                keyid:36:0C:26:F9:F5:BD:51:76:FB:9A:D0:B6:5A:94:8D:0E:8D:D9:0E:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/956748-e858-473c-81c5-09f250e1b9ea/1/X7p4GpmVF8fRosHtWstP9WAbsfk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/956748-e858-473c-81c5-09f250e1b9ea/1/Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214806

    Signature Algorithm: sha256WithRSAEncryption
         19:d0:71:7a:e1:6b:77:72:d6:76:74:73:47:2a:65:80:cb:a5:
         a7:97:5c:0a:e8:47:2b:9d:2b:96:d0:df:13:5a:b3:06:98:fb:
         85:ad:99:c3:da:98:db:da:53:e5:82:8b:6d:93:cf:2d:2b:8b:
         d2:3c:a5:4b:5d:cd:9e:4f:98:7b:45:e4:03:a9:73:f9:44:cc:
         ff:b3:6e:11:0f:bf:6f:22:18:ef:26:d8:dd:d2:96:b5:20:ad:
         11:85:56:13:0e:32:e0:1d:05:95:0e:fd:e1:48:d9:e0:ad:46:
         ff:fd:e6:75:a1:8d:15:d3:7e:c7:15:2d:4f:0c:0c:6e:4a:b9:
         9c:1d:c1:a2:9e:d3:29:b2:d4:46:ff:48:ce:b7:4c:1f:11:c0:
         18:8e:a9:3a:5c:56:1a:52:35:1c:99:28:26:91:64:1e:c2:69:
         8f:c3:29:f0:0e:62:b1:19:3c:1d:0c:ba:1d:3b:97:69:06:e6:
         8e:a5:56:c6:f0:b8:5b:f4:f7:24:d9:15:7d:c9:22:2e:9f:3b:
         0d:3e:9f:90:b8:7d:3f:14:27:e4:fc:09:90:fd:27:17:0e:b3:
         63:f9:51:5c:e6:19:01:dd:c0:a9:d9:3c:a1:50:25:9d:56:1b:
         3f:e6:fc:ae:82:af:06:6c:e8:06:2b:94:56:79:8e:1d:53:7b:
         36:5e:f4:74
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZzA69UYyLHunDRK3+bnTnahMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MGMyNmY5ZjViZDUxNzZmYjlhZDBiNjVhOTQ4ZDBlOGRk
OTBlZTQwHhcNMjYwMzA2MDIxMzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZmJhNzgxYTk5OTUxN2M3ZDFhMmMxZWQ1YWNiNGZmNTYwMWJiMWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjRKBx4mY/LZVD7Yr7H+S6Jrphty
H3hWeS1/KAIzkYOhjTF1+zZcxegq+s0K2+CquV3hkTPo7hMGoJVY5pfFKmcz9++6
jiw65bAnmzNI/9/rU0c2eE0+cfd2JcraNZF6L4OVmEmPNtwnOj2XW7RliZBifGJk
nJnR6PHONxA+JLyKfVH5PRARLGdoasarKAZqtB7IxdmsumE3QXkMaEAMWck4JbRL
RyNWchsSYPU89Gnh5M6lXhw29MLdA9fMesEAUcL5MuJBHxLvPSruXjIbvH9lrQf9
Ie83PNdAYhfuuDUgLdhic0+pSGZrsYstrN1kWER1yTOgmxhU6PTDMp5v4QIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFF+6eBqZlRfH0aLB7VrLT/VgG7H5MB8GA1UdIwQY
MBaAFDYMJvn1vVF2+5rQtlqUjQ6N2Q7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmd3bS1mVzlVWGI3bXRDMldwU05EbzNaRHVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NTY3NDgtZTg1OC00NzNjLTgxYzUt
MDlmMjUwZTFiOWVhLzEvWDdwNEdwbVZGOGZSb3NIdFdzdFA5V0Fic2ZrLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy85NTY3NDgtZTg1OC00NzNjLTgxYzUtMDlmMjUwZTFiOWVh
LzEvTmd3bS1mVzlVWGI3bXRDMldwU05EbzNaRHVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNHFjANBgkqhkiG
9w0BAQsFAAOCAQEAGdBxeuFrd3LWdnRzRyplgMulp5dcCuhHK50rltDfE1qzBpj7
ha2Zw9qY29pT5YKLbZPPLSuL0jylS13Nnk+Ye0XkA6lz+UTM/7NuEQ+/byIY7ybY
3dKWtSCtEYVWEw4y4B0FlQ794UjZ4K1G//3mdaGNFdN+xxUtTwwMbkq5nB3Bop7T
KbLURv9IzrdMHxHAGI6pOlxWGlI1HJkoJpFkHsJpj8Mp8A5isRk8HQy6HTuXaQbm
jqVWxvC4W/T3JNkVfckiLp87DT6fkLh9PxQn5PwJkP0nFw6zY/lRXOYZAd3Aqdk8
oVAlnVYbP+b8roKvBmzoBiuUVnmOHVN7Nl70dA==
-----END CERTIFICATE-----
Generated at Fri Mar 13 08:34:52 2026 by rpki-client