Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/7lwx1zJrY0F3LdoEn_iJXa3pM84.asa
File:                     7lwx1zJrY0F3LdoEn_iJXa3pM84.asa (raw, json)
Hash identifier:          Q0oQMweHsmrfdfYTRFNKYhoRxahIkowVFvNwfkroZB4=
Subject key identifier:   EE:5C:31:D7:32:6B:63:41:77:2D:DA:04:9F:F8:89:5D:AD:E9:33:CE
Certificate issuer:       /CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
Certificate serial:       019E3B4BFF58E350AB7D8DAF737F8B776DB9
Authority key identifier: 94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/7lwx1zJrY0F3LdoEn_iJXa3pM84.asa
Signing time:             Mon 18 May 2026 13:34:56 +0000
ASPA not before:          Mon 18 May 2026 13:34:56 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            210320
Providers:                AS: 6939
                          AS: 8283
                          AS: 41051
                          AS: 200132
                          AS: 212895
                          AS: 213449
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 31 May 2026 01:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:3b:4b:ff:58:e3:50:ab:7d:8d:af:73:7f:8b:77:6d:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
        Validity
            Not Before: May 18 13:34:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ee5c31d7326b6341772dda049ff8895dade933ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:be:9e:cd:a1:54:88:ef:47:a4:be:aa:68:5e:
                    4a:ff:cc:bc:be:cc:62:58:1c:94:fa:04:6e:4c:f1:
                    28:ab:27:36:0c:b6:6b:2d:6b:4b:75:75:8e:26:dd:
                    4e:a0:05:cc:13:b7:05:bc:26:c3:24:8f:1e:40:de:
                    7d:5e:7d:96:4b:76:ca:22:b0:1e:3f:2c:67:d5:82:
                    87:34:2c:6f:00:5d:4c:a3:85:2a:d4:ab:4d:cc:13:
                    c9:4f:b0:15:a1:e4:82:59:87:b5:35:99:4f:c9:15:
                    63:7e:51:df:9b:8a:33:57:a4:1f:b9:ad:59:d4:fc:
                    d1:31:97:75:35:67:5f:0c:f3:71:b8:6b:7d:37:ba:
                    47:8d:51:c1:31:a7:23:fc:74:a4:c4:8e:71:f4:1e:
                    df:3e:65:2a:fa:aa:a5:27:cf:28:dd:5b:60:b6:54:
                    4d:e9:0c:82:74:8a:a7:8f:b9:85:0b:f2:59:98:11:
                    05:90:4c:a0:02:1c:39:3e:45:30:f0:6a:74:e7:8f:
                    36:92:a0:07:68:af:8c:2e:69:42:e6:a8:d9:5f:fa:
                    80:64:8d:92:10:b5:33:8b:80:4c:25:f0:ee:ce:87:
                    5c:2f:a7:f7:ad:87:a2:cd:7f:6c:29:ad:cc:60:39:
                    4b:07:6a:80:f8:c7:87:d5:f3:7b:89:97:06:71:97:
                    a8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:5C:31:D7:32:6B:63:41:77:2D:DA:04:9F:F8:89:5D:AD:E9:33:CE
            X509v3 Authority Key Identifier:
                keyid:94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/7lwx1zJrY0F3LdoEn_iJXa3pM84.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210320

    Signature Algorithm: sha256WithRSAEncryption
         3f:90:c9:e2:8b:9a:03:c1:88:88:35:5a:a5:6d:b9:86:66:a7:
         ca:47:ab:7a:a3:ed:74:af:44:70:36:f8:c4:40:6c:b2:1e:c9:
         da:79:10:d0:45:1c:76:31:2a:02:ae:3f:4c:91:9f:8e:94:d6:
         5c:32:f2:96:05:99:2e:23:29:81:ac:f4:1a:52:6a:1c:a9:59:
         0e:44:04:2a:ae:84:f7:50:d6:94:be:79:77:3f:f0:18:3b:44:
         78:45:88:76:67:ad:1d:39:8a:c6:94:d0:f2:d9:ca:37:76:be:
         3e:e8:0a:03:d4:d1:c6:92:f7:7d:19:42:f1:df:d0:ad:b6:6c:
         c1:f3:39:89:04:81:c6:d1:9d:45:b4:96:bb:96:42:1e:ad:6a:
         74:83:7e:e3:a8:12:c0:69:4b:fd:78:c1:0b:40:4a:72:be:cd:
         49:89:36:8c:db:2f:7d:92:51:79:72:e7:37:0a:79:ec:68:3a:
         8f:eb:87:df:1a:fe:e3:63:06:7c:ef:79:ed:13:5f:90:e3:22:
         3d:fd:e1:dd:8f:c9:e2:9d:2d:fb:e1:fa:eb:f4:43:4b:74:ea:
         78:e2:7d:43:3a:2a:75:fa:5f:d8:c9:a2:24:f3:c0:24:09:e9:
         02:d4:a0:64:c3:26:e2:8a:a9:5e:9a:ec:35:6e:5e:cb:03:f8:
         4d:cb:92:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 09:15:06 2026 by rpki-client