Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/3ClflYOCERr_Ro48IStxxlR6OkE.asa
File:                     3ClflYOCERr_Ro48IStxxlR6OkE.asa (raw, json)
Hash identifier:          yUYnf8vfvP0dW5+JLs6OxQVLMfM3//FHX+mPYuLeYgU=
Subject key identifier:   DC:29:5F:95:83:82:11:1A:FF:46:8E:3C:21:2B:71:C6:54:7A:3A:41
Certificate issuer:       /CN=07664130764480ef2dd8178116b5dd0c59d2e994
Certificate serial:       019EC549D85F8977E20CC54D2F0C4AAF7316
Authority key identifier: 07:66:41:30:76:44:80:EF:2D:D8:17:81:16:B5:DD:0C:59:D2:E9:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/3ClflYOCERr_Ro48IStxxlR6OkE.asa
Signing time:             Sun 14 Jun 2026 08:40:11 +0000
ASPA not before:          Sun 14 Jun 2026 08:40:11 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214476
Providers:                AS: 13030
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Jun 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c5:49:d8:5f:89:77:e2:0c:c5:4d:2f:0c:4a:af:73:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07664130764480ef2dd8178116b5dd0c59d2e994
        Validity
            Not Before: Jun 14 08:40:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=dc295f958382111aff468e3c212b71c6547a3a41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e8:1f:49:5c:1b:6d:6f:77:9f:c2:3c:af:65:
                    b6:46:17:b5:e2:89:fc:c8:4f:c4:50:bb:a6:3d:9c:
                    a3:50:7d:1d:d7:19:ac:14:e4:68:47:16:ba:ff:25:
                    b8:47:fc:da:0f:8a:82:3c:56:ee:84:b4:1f:62:7b:
                    e3:88:6f:cd:ce:4a:5f:43:3d:ce:88:d9:1e:30:35:
                    d0:04:f9:8f:66:b5:1d:41:38:d7:99:ea:b4:c4:b6:
                    c0:12:dd:34:bd:74:a7:ee:d1:64:9b:02:18:a3:b6:
                    8c:18:d4:0b:ff:b0:b7:3c:f4:8f:df:30:4c:ac:b7:
                    a6:28:51:71:3b:92:88:37:9a:b9:19:11:b6:46:13:
                    93:dd:93:70:48:76:c2:9e:80:4d:5d:53:cf:dd:97:
                    51:27:4b:a4:34:d1:e4:18:fb:34:c5:c1:43:a7:0f:
                    65:6f:cc:52:80:4c:d6:3b:3a:25:97:3b:d2:d7:73:
                    57:fd:23:93:5d:7c:31:c7:dd:60:43:82:9a:70:c6:
                    2f:fe:fd:81:e1:67:98:cc:e4:ec:c8:20:22:e4:f5:
                    0d:59:fe:21:79:a3:66:6e:7c:dc:01:32:2c:a4:9d:
                    76:22:e4:e7:2a:f5:d5:a1:85:c0:c3:a3:71:98:dd:
                    f2:88:07:bf:30:6c:15:23:fe:e7:31:79:87:8b:2e:
                    d2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:29:5F:95:83:82:11:1A:FF:46:8E:3C:21:2B:71:C6:54:7A:3A:41
            X509v3 Authority Key Identifier:
                keyid:07:66:41:30:76:44:80:EF:2D:D8:17:81:16:B5:DD:0C:59:D2:E9:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/3ClflYOCERr_Ro48IStxxlR6OkE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214476

    Signature Algorithm: sha256WithRSAEncryption
         91:9b:d2:6b:a9:45:95:82:74:65:70:40:d1:42:67:f4:16:02:
         cc:b6:ed:17:85:b3:33:01:4d:2f:5b:46:22:ea:eb:e0:da:fb:
         2d:bd:37:4e:6c:9d:25:f3:59:be:8d:95:e3:da:2a:82:01:ce:
         b6:78:11:15:72:63:a7:35:bf:1a:0c:4b:7c:4b:03:f8:10:a2:
         a5:c3:b7:76:17:98:fe:7f:88:46:a3:71:06:2f:84:a3:16:52:
         5f:55:cb:ae:5c:84:83:6f:ae:5a:03:1e:80:a8:9f:8b:aa:70:
         4d:7e:55:8f:70:c9:9c:22:bb:24:f3:f5:fe:6e:1a:05:ea:47:
         97:86:6b:eb:a8:c6:30:7e:4f:49:35:9f:dc:45:17:2e:e0:ab:
         3e:35:68:03:06:e9:73:4a:27:94:f1:55:9c:ec:13:ed:1a:c0:
         cc:11:43:3c:9c:b7:73:1d:72:71:67:23:7f:fa:d5:28:fa:1e:
         db:cd:b7:40:5f:cc:54:81:8f:85:41:db:b4:4c:fc:61:d3:93:
         45:5c:e1:29:87:5d:2e:8d:cd:1d:13:0a:a0:eb:9f:53:e8:07:
         4b:0f:d8:29:e8:59:7c:29:b9:57:d2:15:35:30:2f:91:b0:60:
         ef:35:e4:66:2d:e3:1b:d8:6e:56:b9:f1:09:7e:52:99:3a:79:
         b6:bc:6d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 09:33:49 2026 by rpki-client