Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/32Hy8z56io1EAMHSQy31lR5BNU8.asa
File:                     32Hy8z56io1EAMHSQy31lR5BNU8.asa (raw, json)
Hash identifier:          uCjE8niVCbUockt0spHx/AFhMSClNxfQDlRLXzBF/Tw=
Subject key identifier:   DF:61:F2:F3:3E:7A:8A:8D:44:00:C1:D2:43:2D:F5:95:1E:41:35:4F
Certificate issuer:       /CN=199b3f908ce6e1764617731b624539421d13c94d
Certificate serial:       01A1638CB0D26B29C1F4842EE17E5B4B9F8B
Authority key identifier: 19:9B:3F:90:8C:E6:E1:76:46:17:73:1B:62:45:39:42:1D:13:C9:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/32Hy8z56io1EAMHSQy31lR5BNU8.asa
Signing time:             Thu 22 Oct 2026 12:18:47 +0000
ASPA not before:          Thu 22 Oct 2026 12:18:47 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            209990
Providers:                AS: 6939
                          AS: 8283
                          AS: 34927
                          AS: 211588
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 08:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:63:8c:b0:d2:6b:29:c1:f4:84:2e:e1:7e:5b:4b:9f:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=199b3f908ce6e1764617731b624539421d13c94d
        Validity
            Not Before: Oct 22 12:18:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=df61f2f33e7a8a8d4400c1d2432df5951e41354f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:72:1b:1c:6d:6f:16:0a:33:9e:c3:c2:1c:ac:
                    65:f5:ff:c5:bd:00:ee:81:ad:58:a6:0d:0b:ba:e0:
                    53:b4:9d:bf:34:3f:16:ff:68:eb:e2:f7:ef:ad:d6:
                    14:9b:1c:fc:e1:11:59:a3:73:0a:05:7d:73:b6:07:
                    7f:41:14:50:51:f3:64:7b:79:7e:91:e3:48:58:b0:
                    06:07:21:dd:25:ed:4b:ac:b9:0b:c8:fb:10:46:9f:
                    be:51:e0:44:cf:63:e7:c0:85:f4:4c:8c:3f:7f:fc:
                    45:80:9c:29:ef:68:cd:9e:4a:d2:e6:9c:93:c4:82:
                    df:87:59:98:ff:10:a2:61:c0:e0:50:60:80:01:ec:
                    ca:58:d0:e7:fa:cf:63:72:cd:7f:4b:17:1c:58:cc:
                    e9:75:82:95:a5:f8:84:27:26:09:c4:fa:3b:db:52:
                    9b:50:5e:f0:ef:f1:02:85:32:70:e5:78:6e:f4:af:
                    16:6d:63:56:90:13:b3:bc:bb:98:d2:26:f0:41:01:
                    4e:8a:be:ab:9b:c2:bc:b7:dc:ae:2a:96:7f:1a:82:
                    90:00:51:3b:ff:4d:4f:cf:f8:e7:ae:28:17:8f:0b:
                    40:2b:79:5c:4f:42:a5:bb:a9:5b:a9:d6:df:e1:da:
                    bd:f5:41:b1:7e:9a:27:f3:3d:74:29:0f:ba:eb:4b:
                    b9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:61:F2:F3:3E:7A:8A:8D:44:00:C1:D2:43:2D:F5:95:1E:41:35:4F
            X509v3 Authority Key Identifier:
                keyid:19:9B:3F:90:8C:E6:E1:76:46:17:73:1B:62:45:39:42:1D:13:C9:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/32Hy8z56io1EAMHSQy31lR5BNU8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209990

    Signature Algorithm: sha256WithRSAEncryption
         29:5f:47:5d:8b:e2:2f:8a:80:72:92:8c:a4:6d:f8:23:53:ab:
         ec:76:4e:9d:20:98:1f:ff:01:b7:e4:58:94:4d:31:49:f1:b7:
         e1:c2:cc:53:30:e2:a2:16:8f:c6:ee:72:2c:5c:16:85:fa:13:
         e9:94:b0:71:7d:77:d3:90:e9:1c:a8:91:84:e5:b3:e0:d3:8d:
         32:cf:96:69:22:45:81:5b:b9:a0:40:c3:4f:9b:5b:13:af:8e:
         e6:40:aa:b9:32:29:c7:c0:07:f4:70:5c:8d:a6:63:86:43:c4:
         6f:fa:e8:3b:6b:2d:4b:30:01:b7:ee:bd:8e:69:0e:66:83:31:
         c3:f0:36:b1:64:2a:36:b0:c5:bc:ae:ae:69:ab:84:f2:42:c3:
         ea:00:e4:ea:54:82:39:0c:76:c7:c9:bb:18:e1:4c:a6:4c:fe:
         93:d4:ef:03:a9:7c:7d:c8:cf:4c:6c:35:c9:5b:bc:89:90:bf:
         eb:93:58:4e:21:29:6a:99:4b:3f:9e:71:f0:fa:cf:0a:fc:74:
         8e:f5:85:e5:6c:a4:5c:91:47:8b:6e:ae:5e:5b:b5:9c:28:3b:
         9f:7e:ad:e1:25:62:b1:38:c8:fd:73:f0:33:c1:1b:0c:fc:e6:
         b4:2a:12:a0:0b:60:75:0f:88:1f:00:f8:e7:f0:f2:b9:fd:68:
         6e:98:6d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 17:56:52 2026 by rpki-client