Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/8r-SXvmyY8xSeamcpDwi2q3FtQU.asa
File:                     8r-SXvmyY8xSeamcpDwi2q3FtQU.asa (raw, json)
Hash identifier:          vb6RtAuj6AJepb8Z5VeJ1W39+t+GyunhQkNqyLWbWNg=
Subject key identifier:   F2:BF:92:5E:F9:B2:63:CC:52:79:A9:9C:A4:3C:22:DA:AD:C5:B5:05
Certificate issuer:       /CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
Certificate serial:       01A08A8D7505EB8703D97FFA06BB133055D5
Authority key identifier: 7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/8r-SXvmyY8xSeamcpDwi2q3FtQU.asa
Signing time:             Thu 10 Sep 2026 09:02:01 +0000
ASPA not before:          Thu 10 Sep 2026 09:02:01 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            13212
Providers:                AS: 2116
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:8d:75:05:eb:87:03:d9:7f:fa:06:bb:13:30:55:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
        Validity
            Not Before: Sep 10 09:02:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f2bf925ef9b263cc5279a99ca43c22daadc5b505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c1:95:5c:1a:cd:9f:70:98:ec:8a:59:e4:90:
                    c2:bc:7f:16:14:81:1c:54:b6:62:64:0f:60:6b:a3:
                    d7:26:2a:e0:81:5f:f4:a7:2b:d2:1d:d6:f2:71:95:
                    38:af:3e:fa:bb:3c:e4:ff:b4:83:42:f7:18:1c:12:
                    da:31:2f:88:84:d7:51:96:c2:b1:e0:2a:c0:0b:af:
                    ef:b8:26:7c:a6:7f:75:af:17:17:26:63:67:a4:d6:
                    6a:83:30:bb:fb:98:a2:b6:f2:3e:88:a8:43:ff:07:
                    a6:b7:af:91:8a:37:b7:38:f7:5e:e8:e9:c0:fd:96:
                    ab:0e:2d:c1:4a:86:81:c1:56:6b:9f:39:41:da:01:
                    0d:b4:79:78:80:55:a4:8b:9f:7f:17:36:23:a8:f9:
                    38:71:97:2a:1f:3d:1d:6d:77:b3:c8:3b:b9:56:df:
                    be:a3:50:48:78:c4:75:75:8b:06:09:05:02:9e:7a:
                    07:34:0d:2c:cc:19:dd:f1:ed:d8:20:a2:ec:7f:e5:
                    58:4c:4c:a8:99:fe:69:77:1b:96:86:b6:ab:d7:f5:
                    52:23:ac:a5:70:1f:05:52:09:44:56:24:20:46:2f:
                    a4:bf:c4:6d:c5:c8:d6:9b:b2:f9:5e:7a:5e:cf:a3:
                    42:56:58:87:6d:9b:cb:ed:10:4a:22:ab:60:97:01:
                    8e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:BF:92:5E:F9:B2:63:CC:52:79:A9:9C:A4:3C:22:DA:AD:C5:B5:05
            X509v3 Authority Key Identifier:
                keyid:7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/8r-SXvmyY8xSeamcpDwi2q3FtQU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13212

    Signature Algorithm: sha256WithRSAEncryption
         79:33:22:e1:10:e6:fa:91:b3:e6:64:82:7e:b9:b5:d0:54:ba:
         a0:33:a6:db:1f:89:38:b6:73:05:0f:01:71:db:15:25:79:b2:
         09:c6:7e:03:c4:e5:75:34:61:aa:0e:00:10:54:e2:97:15:77:
         5e:35:8f:26:4e:f9:a0:e8:9e:64:32:e7:7a:3a:36:a5:6f:41:
         19:2c:94:f2:2a:83:1d:20:90:4d:77:ea:f2:8e:3c:19:ed:30:
         84:8d:ea:cf:de:fe:57:68:98:95:63:91:1b:e2:65:20:7e:7c:
         99:18:c5:be:cc:c5:58:69:a4:47:4f:47:d8:30:45:d8:ea:e1:
         c8:e6:3d:e2:f0:ad:14:5f:1f:64:cc:4d:a1:6c:30:d8:cc:9a:
         1c:b9:1c:02:53:95:de:5a:a3:b1:89:69:1c:7d:19:ef:77:3f:
         48:aa:8c:a4:e5:eb:a6:89:a7:35:e5:83:38:75:96:62:f5:65:
         a2:6c:13:ee:1e:14:46:a1:69:3d:67:37:f3:1a:ba:4c:b8:01:
         8b:83:59:76:4e:97:7e:ca:fa:45:12:90:7b:a6:bf:6b:ff:49:
         59:6d:ca:20:3e:f6:ff:ac:c0:9b:d8:99:23:cc:bc:1d:86:d1:
         4b:b3:16:d8:14:7b:39:86:25:13:9e:36:bd:c2:1e:45:ef:be:
         0a:ac:95:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:45:55 2026 by rpki-client