Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/956748-e858-473c-81c5-09f250e1b9ea/1/dQ4WjMy4TxNDyfRXN9e9OZ7Q0ow.asa
File:                     dQ4WjMy4TxNDyfRXN9e9OZ7Q0ow.asa (raw, json)
Hash identifier:          6UfZTssvTMuJE1n9BqkIqHu/TDRWDmzg39I0dyncJs4=
Subject key identifier:   75:0E:16:8C:CC:B8:4F:13:43:C9:F4:57:37:D7:BD:39:9E:D0:D2:8C
Certificate issuer:       /CN=360c26f9f5bd5176fb9ad0b65a948d0e8dd90ee4
Certificate serial:       019EC1DF84492C12C2890D54BB545B973CC8
Authority key identifier: 36:0C:26:F9:F5:BD:51:76:FB:9A:D0:B6:5A:94:8D:0E:8D:D9:0E:E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/956748-e858-473c-81c5-09f250e1b9ea/1/dQ4WjMy4TxNDyfRXN9e9OZ7Q0ow.asa
Signing time:             Sat 13 Jun 2026 16:45:11 +0000
ASPA not before:          Sat 13 Jun 2026 16:45:11 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214806
Providers:                AS: 6939
                          AS: 33387
                          AS: 34927
                          AS: 53667
                          AS: 213449
                          AS: 215296
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/956748-e858-473c-81c5-09f250e1b9ea/1/Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/956748-e858-473c-81c5-09f250e1b9ea/1/Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 01:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:df:84:49:2c:12:c2:89:0d:54:bb:54:5b:97:3c:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=360c26f9f5bd5176fb9ad0b65a948d0e8dd90ee4
        Validity
            Not Before: Jun 13 16:45:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=750e168cccb84f1343c9f45737d7bd399ed0d28c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bf:c7:5c:77:07:04:b2:d8:bc:5e:fd:c9:e9:
                    00:55:f2:80:e2:08:1c:38:a2:b7:64:ca:51:04:26:
                    41:41:da:cf:8e:83:3f:10:c1:85:dd:54:02:e6:10:
                    93:6a:4e:a7:42:02:38:90:e5:bc:6e:71:d9:99:9e:
                    62:82:29:b9:ac:a8:b5:c6:54:86:9a:4f:c3:53:5b:
                    7b:67:a7:a1:a7:78:95:48:29:90:32:4a:6e:dc:71:
                    39:89:a1:9e:b8:ed:a6:44:ea:f2:4c:8b:b3:ac:bb:
                    b5:43:bc:57:5f:a4:7e:34:6d:8f:d5:00:71:85:1e:
                    a2:1f:79:22:2b:9c:48:77:0f:51:10:ef:ee:7b:b0:
                    49:16:b9:c0:81:88:14:73:81:d8:4d:d8:74:bc:28:
                    36:e0:bc:4f:5a:35:31:1c:8e:74:a6:4a:33:f3:6e:
                    06:74:80:28:fc:03:ed:74:cf:fa:1a:79:ac:95:c9:
                    b9:ad:8e:7a:cd:1b:43:b2:99:35:4b:df:22:03:ac:
                    09:22:da:87:f4:56:35:31:2a:81:cb:f7:da:74:48:
                    6b:1b:eb:96:81:c7:34:b8:0f:6a:12:fc:2c:39:24:
                    08:2e:51:32:3e:16:17:0b:84:bc:b9:03:59:46:85:
                    69:a3:46:74:34:b5:67:ff:8e:37:87:33:73:57:e3:
                    59:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:0E:16:8C:CC:B8:4F:13:43:C9:F4:57:37:D7:BD:39:9E:D0:D2:8C
            X509v3 Authority Key Identifier:
                keyid:36:0C:26:F9:F5:BD:51:76:FB:9A:D0:B6:5A:94:8D:0E:8D:D9:0E:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/956748-e858-473c-81c5-09f250e1b9ea/1/dQ4WjMy4TxNDyfRXN9e9OZ7Q0ow.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/956748-e858-473c-81c5-09f250e1b9ea/1/Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214806

    Signature Algorithm: sha256WithRSAEncryption
         ac:dd:12:76:9d:11:87:7c:44:99:e3:72:09:1f:8a:ff:3d:7e:
         ed:87:f2:43:32:a1:ed:c0:b9:2f:f2:a5:fb:44:c6:12:b3:f8:
         f5:d0:e7:f8:c2:75:a7:90:ee:28:c3:ce:e3:31:d2:ba:55:b0:
         48:7d:8d:4d:35:a9:75:e9:57:96:82:74:14:b3:a9:bd:a8:06:
         a8:e7:e2:09:77:0b:7b:16:0d:45:80:e4:65:01:82:a1:06:4f:
         30:fe:74:c9:04:c5:20:7b:32:68:9a:fd:dd:81:dc:79:07:96:
         f9:16:e0:b1:ef:14:4e:3f:a7:06:e6:cf:9b:28:f3:cf:5d:4d:
         2c:b6:aa:f4:70:36:ea:38:04:79:c8:c6:f1:b3:63:de:c9:a4:
         b0:3a:b5:24:a1:b1:f3:20:fb:74:80:78:51:a9:f1:4d:79:fc:
         39:1a:41:81:6a:9b:58:07:33:98:22:74:96:bd:02:bf:d9:f1:
         52:cc:cb:f3:6a:64:21:4f:5f:38:da:18:22:7c:79:cb:a2:1f:
         10:11:56:5c:86:50:bb:d3:00:3f:93:9e:21:8a:ca:18:fe:8f:
         85:7c:48:80:b9:11:6c:0b:48:89:7c:8d:be:e4:c7:cc:41:b0:
         27:c8:10:e5:99:83:1d:33:37:47:2f:d4:3e:8a:89:5b:87:4d:
         62:bc:b9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 09:33:55 2026 by rpki-client