Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/RDMuJFUVpRTfjUV_uKreWSEDbJQ.asa
File:                     RDMuJFUVpRTfjUV_uKreWSEDbJQ.asa (raw, json)
Hash identifier:          npb1ZPrAdc0F36Du7VzbNSITtgjkjYoCxnKV2J1JMgg=
Subject key identifier:   44:33:2E:24:55:15:A5:14:DF:8D:45:7F:B8:AA:DE:59:21:03:6C:94
Certificate issuer:       /CN=db30dd246f42b7b366804ce8d8084ad393d21c63
Certificate serial:       019FF11AC4C71ABDDDB1A6961526F860A12E
Authority key identifier: DB:30:DD:24:6F:42:B7:B3:66:80:4C:E8:D8:08:4A:D3:93:D2:1C:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2zDdJG9Ct7NmgEzo2AhK05PSHGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/RDMuJFUVpRTfjUV_uKreWSEDbJQ.asa
Signing time:             Tue 11 Aug 2026 13:54:51 +0000
ASPA not before:          Tue 11 Aug 2026 13:54:51 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            213586
Providers:                AS: 8772
                          AS: 11967
                          AS: 29632
                          AS: 41051
                          AS: 198651
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2zDdJG9Ct7NmgEzo2AhK05PSHGM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f1:1a:c4:c7:1a:bd:dd:b1:a6:96:15:26:f8:60:a1:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db30dd246f42b7b366804ce8d8084ad393d21c63
        Validity
            Not Before: Aug 11 13:54:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=44332e245515a514df8d457fb8aade5921036c94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:85:5a:d6:cf:07:a2:73:e8:0c:d0:f1:66:6f:
                    b3:79:07:23:43:ca:2f:ef:73:cb:52:58:1d:aa:d4:
                    ef:67:13:a7:44:d8:23:72:9b:85:86:6e:7e:93:87:
                    93:e3:f3:80:fb:a4:58:75:8b:85:1d:c7:41:67:16:
                    4a:73:d0:57:bd:00:6d:61:dc:6b:b1:61:30:e4:59:
                    04:1d:e0:b6:7c:df:14:60:1c:70:3d:4f:5e:98:8d:
                    0e:e1:c2:41:e0:af:c4:85:e6:83:90:af:45:8c:52:
                    eb:82:c0:1c:2f:0e:29:77:b5:ac:e4:31:40:16:7d:
                    aa:6d:66:da:f2:e5:39:d5:18:cc:1a:62:2e:b5:f0:
                    55:a4:1d:8b:98:86:f5:6d:08:0f:91:00:53:ac:60:
                    88:c5:99:49:e5:33:18:15:52:f8:86:28:58:7a:9e:
                    4c:c0:89:c5:a4:26:13:eb:b6:ce:46:81:c4:8b:7d:
                    51:05:22:54:fc:81:8f:f1:2b:b1:20:7a:04:74:f1:
                    ec:9f:1e:84:84:c6:18:57:b4:4d:4c:42:51:f4:d4:
                    dc:e0:22:37:02:22:b2:27:b0:93:93:7b:f6:33:d3:
                    88:0a:6e:ad:c7:10:bd:65:3f:d2:03:07:62:29:e5:
                    da:e7:8b:b0:c2:f5:76:95:4f:26:e6:24:cf:05:aa:
                    2a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:33:2E:24:55:15:A5:14:DF:8D:45:7F:B8:AA:DE:59:21:03:6C:94
            X509v3 Authority Key Identifier:
                keyid:DB:30:DD:24:6F:42:B7:B3:66:80:4C:E8:D8:08:4A:D3:93:D2:1C:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2zDdJG9Ct7NmgEzo2AhK05PSHGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/RDMuJFUVpRTfjUV_uKreWSEDbJQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213586

    Signature Algorithm: sha256WithRSAEncryption
         85:f2:3c:cd:95:d1:95:e9:b1:63:1a:c8:0e:1d:6b:6e:93:59:
         4e:59:9f:e4:74:94:54:be:0c:16:84:91:22:bf:9c:cf:8d:b6:
         85:65:e2:d7:d9:ff:7e:41:c5:d5:af:e4:92:79:8d:d8:10:bd:
         6e:f8:f3:86:ca:6a:8c:09:e3:d2:3b:70:5f:a6:2f:78:84:ad:
         b5:ed:ee:db:37:1b:db:51:52:36:80:8e:cc:1c:b9:95:3d:be:
         a0:71:58:03:85:3a:0f:aa:02:ac:3b:3b:7b:6b:cf:fe:87:33:
         01:4e:27:79:17:5c:91:4c:49:32:f7:fd:74:e7:f9:c4:94:81:
         c8:48:e6:48:64:19:4c:40:fb:38:d3:ef:dc:90:20:04:38:8d:
         f4:92:2a:25:0f:75:4a:4b:14:39:e9:cd:dc:09:1d:1c:3b:4f:
         05:e3:4a:93:fc:8b:8f:c5:2e:f5:16:31:3c:3b:ea:f5:7e:8d:
         bd:53:86:e1:3a:ae:14:5d:33:ca:c5:aa:6f:3f:7a:06:a5:da:
         ff:36:96:54:5e:2f:56:bc:76:10:34:59:14:ee:07:a3:b2:25:
         e7:d9:29:c8:d2:68:b1:ca:a2:87:5b:05:21:a4:5a:82:e5:e9:
         b1:d4:8d:31:9c:e0:08:8c:12:ee:81:87:29:39:8f:04:01:5f:
         53:3d:08:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:49:47 2026 by rpki-client