Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/5983ae-f43f-4cf7-9352-60857f688cf7/1/m_JOw_BMf-g5adkXcQ6dxPM0VUs.asa
File:                     m_JOw_BMf-g5adkXcQ6dxPM0VUs.asa (raw, json)
Hash identifier:          CNlwVMNpgukBKhCpFpqc+T+gnYp6AeSXdG0LEiF4vbQ=
Subject key identifier:   9B:F2:4E:C3:F0:4C:7F:E8:39:69:D9:17:71:0E:9D:C4:F3:34:55:4B
Certificate issuer:       /CN=6da71dc079c9d8c2d2029ad640e7a3bf97f4dced
Certificate serial:       019CC4143E00C2ECC5E3499FDE294793C78B
Authority key identifier: 6D:A7:1D:C0:79:C9:D8:C2:D2:02:9A:D6:40:E7:A3:BF:97:F4:DC:ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bacdwHnJ2MLSAprWQOejv5f03O0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/5983ae-f43f-4cf7-9352-60857f688cf7/1/m_JOw_BMf-g5adkXcQ6dxPM0VUs.asa
Signing time:             Fri 06 Mar 2026 16:56:26 +0000
ASPA not before:          Fri 06 Mar 2026 16:56:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            215110
Providers:                AS: 11967
                          AS: 34927
                          AS: 202358
                          AS: 205941
                          AS: 209533
                          AS: 212895
                          AS: 214915
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/5983ae-f43f-4cf7-9352-60857f688cf7/1/bacdwHnJ2MLSAprWQOejv5f03O0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/5983ae-f43f-4cf7-9352-60857f688cf7/1/bacdwHnJ2MLSAprWQOejv5f03O0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bacdwHnJ2MLSAprWQOejv5f03O0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Mar 2026 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c4:14:3e:00:c2:ec:c5:e3:49:9f:de:29:47:93:c7:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6da71dc079c9d8c2d2029ad640e7a3bf97f4dced
        Validity
            Not Before: Mar  6 16:56:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9bf24ec3f04c7fe83969d917710e9dc4f334554b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6e:57:7b:ca:17:f0:84:7a:98:00:05:bb:60:
                    69:a0:d4:1a:6c:dc:ff:0a:6f:1a:ca:21:3d:0c:cd:
                    2a:97:75:78:2c:18:4e:b8:6c:09:e8:ce:6a:26:03:
                    9c:87:93:09:59:1c:b1:e7:40:de:49:51:49:cc:b5:
                    ed:c2:4a:bc:37:3f:21:45:ec:5a:f4:01:af:c4:2d:
                    0e:df:99:83:41:4a:2a:2e:40:78:90:00:41:2e:c7:
                    ef:76:5b:f0:83:c5:04:79:de:65:7e:f0:a5:be:d6:
                    48:72:55:00:5b:1e:82:83:f3:a9:ff:4a:84:ca:e5:
                    df:c7:5d:6c:23:e0:ee:35:20:f7:bc:6a:c2:f4:c2:
                    38:2e:7e:65:5e:01:69:fd:da:f2:0d:95:0c:a5:1c:
                    42:41:17:74:34:3b:86:f2:9f:3b:73:e6:a8:f7:78:
                    e4:90:93:32:cf:49:a1:c2:44:02:fc:cf:dd:54:64:
                    b0:f2:fd:45:a8:1a:30:e2:6b:a4:2f:0c:05:4e:c6:
                    3d:fb:31:7e:ec:75:b3:22:52:03:85:d5:f2:7d:bc:
                    2b:e6:28:bf:0f:00:dd:53:21:d8:da:3c:c7:8b:cb:
                    03:21:4a:3a:9a:62:b6:e4:bd:17:d8:a8:ce:19:7a:
                    13:71:e9:32:8b:60:f7:a3:3a:03:69:5e:0d:c5:14:
                    e6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F2:4E:C3:F0:4C:7F:E8:39:69:D9:17:71:0E:9D:C4:F3:34:55:4B
            X509v3 Authority Key Identifier:
                keyid:6D:A7:1D:C0:79:C9:D8:C2:D2:02:9A:D6:40:E7:A3:BF:97:F4:DC:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bacdwHnJ2MLSAprWQOejv5f03O0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5983ae-f43f-4cf7-9352-60857f688cf7/1/m_JOw_BMf-g5adkXcQ6dxPM0VUs.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5983ae-f43f-4cf7-9352-60857f688cf7/1/bacdwHnJ2MLSAprWQOejv5f03O0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215110

    Signature Algorithm: sha256WithRSAEncryption
         52:4e:69:fb:11:f4:90:f4:9d:50:4f:18:27:a7:f1:1c:82:9f:
         0e:c5:af:56:65:74:6b:80:13:d9:26:6e:d4:12:bf:4b:0c:41:
         06:ae:77:1f:f4:50:a7:65:60:e3:bc:fa:12:06:ac:f2:01:f8:
         ad:15:24:ec:3e:3c:a3:20:93:12:dc:01:8c:7c:2e:19:f6:42:
         17:69:cf:a6:53:70:7f:fb:7e:6e:c9:5b:dd:a0:49:e0:12:ae:
         1a:a6:4a:6f:2d:a0:6d:a9:b2:47:1e:12:7e:73:9d:a0:bb:be:
         83:8f:8f:1c:ec:86:8b:a4:ba:f5:94:b0:67:2a:1e:b7:c1:b0:
         7b:ec:55:5f:8e:a5:74:0a:0d:c3:a9:d8:e3:5a:0c:75:1c:e8:
         37:f1:78:33:ac:40:2e:07:90:60:58:8d:98:6f:c7:01:53:2f:
         8c:00:de:bd:36:d2:15:7b:15:b3:fd:f5:36:2f:ea:0a:0b:2b:
         25:70:5d:0c:eb:9a:05:f0:2a:57:44:91:d0:56:9f:a4:a4:dc:
         d9:a5:20:03:51:d3:8c:c5:27:f2:02:2b:33:60:2c:2f:63:9d:
         cb:08:2f:2d:3e:46:c7:64:07:db:1e:1c:d1:8a:10:66:3f:b4:
         71:ac:fb:d0:71:2a:3e:30:8d:e6:f9:67:c3:5d:cd:e0:fe:cc:
         12:52:12:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:52:46 2026 by rpki-client