Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/Lw7L_6TL3xXAOYbu4BXtgufTgsE.asa
File:                     Lw7L_6TL3xXAOYbu4BXtgufTgsE.asa (raw, json)
Hash identifier:          PLDlG1iHC8FjmM9ZbPbgJZ/cE8eZpKuBZFtO/3E37fU=
Subject key identifier:   2F:0E:CB:FF:A4:CB:DF:15:C0:39:86:EE:E0:15:ED:82:E7:D3:82:C1
Certificate issuer:       /CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
Certificate serial:       019CD75448A34CB38BD7CC873846F1CCF3A4
Authority key identifier: 94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/Lw7L_6TL3xXAOYbu4BXtgufTgsE.asa
Signing time:             Tue 10 Mar 2026 10:39:10 +0000
ASPA not before:          Tue 10 Mar 2026 10:39:10 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            210320
Providers:                AS: 8283
                          AS: 41051
                          AS: 200132
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Mar 2026 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:d7:54:48:a3:4c:b3:8b:d7:cc:87:38:46:f1:cc:f3:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
        Validity
            Not Before: Mar 10 10:39:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2f0ecbffa4cbdf15c03986eee015ed82e7d382c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9e:86:3c:3d:69:aa:c6:41:73:0f:c1:42:a6:
                    2c:af:8a:64:ad:e8:29:b5:d7:4f:4a:03:33:ab:92:
                    ab:54:86:45:66:e1:b7:e2:75:b3:23:a2:74:a3:74:
                    af:f6:24:9f:ea:2f:5f:36:ec:1a:fd:de:84:88:e6:
                    a5:8f:31:73:3a:60:5b:9c:8a:58:01:d8:c4:1e:ae:
                    94:42:cc:e0:b7:8a:22:86:6f:59:2b:76:e2:dc:df:
                    01:f9:2a:b4:7e:1d:e3:0b:fc:8d:9e:d1:0a:c8:99:
                    f2:b3:78:d9:8f:9f:96:09:3d:54:9f:24:cf:fa:59:
                    43:e8:ab:0b:d8:b8:fe:29:f3:b6:aa:7b:90:9d:3a:
                    ae:9e:09:8f:45:61:1a:4c:af:ef:f5:97:f3:b2:4d:
                    c3:25:08:d6:ec:dc:d4:b2:76:a7:68:3c:b6:93:aa:
                    ed:32:02:0d:08:d7:04:94:f9:74:78:a1:50:bd:f5:
                    e5:0c:f3:14:81:82:3c:f6:9c:f1:60:e5:6c:ed:20:
                    46:e7:be:6a:b4:5b:35:95:ba:1f:e0:fb:46:ad:6e:
                    96:e2:ee:0a:7e:0c:85:99:a8:53:60:7c:37:cd:fc:
                    b6:a8:03:e1:a1:57:81:85:07:d1:7d:04:10:11:22:
                    9c:5f:03:9a:c5:24:d1:70:d1:01:2d:c3:a8:09:72:
                    18:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:0E:CB:FF:A4:CB:DF:15:C0:39:86:EE:E0:15:ED:82:E7:D3:82:C1
            X509v3 Authority Key Identifier:
                keyid:94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/Lw7L_6TL3xXAOYbu4BXtgufTgsE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210320

    Signature Algorithm: sha256WithRSAEncryption
         69:de:70:78:1f:07:8b:e5:03:30:1d:35:89:41:ca:13:3a:97:
         47:1e:d8:8b:b0:0d:ba:66:2a:65:bf:0c:c8:05:1e:b1:38:cb:
         16:59:8f:ae:33:d9:d9:83:71:01:18:d2:15:09:e6:64:26:53:
         ae:23:0a:40:c6:fd:fe:c1:08:db:96:ef:ac:27:00:7e:e7:75:
         ca:e1:c8:1a:31:be:d7:ec:02:83:eb:15:cd:40:e5:ed:76:ac:
         87:3e:17:24:75:63:29:bd:50:f4:22:cb:80:52:9a:4f:1c:fa:
         e5:46:ed:fd:0a:67:a9:b0:14:6d:92:be:2a:75:ad:0a:37:86:
         c1:e6:85:e8:42:60:fd:15:3a:7d:f8:ec:0b:f0:f1:2e:02:d3:
         7d:b3:d4:41:a5:f9:5f:04:3f:d9:de:5a:77:59:1a:0c:4b:84:
         e8:3e:c1:bf:bb:fe:34:bc:6c:7f:0e:57:f5:3a:f4:80:c2:85:
         e7:19:0d:c2:e3:8e:a5:02:5c:f2:3a:4c:c2:9e:a6:d0:a7:8e:
         5d:76:e7:65:7c:0c:43:df:48:a4:0a:66:4e:e8:bd:26:ea:48:
         41:28:b3:d9:a0:4f:22:4e:a1:a6:73:c3:2e:35:20:b4:76:99:
         79:43:ab:d1:dc:17:34:0d:6c:7d:4b:30:fb:3a:07:23:e6:46:
         fa:ae:d9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:50:29 2026 by rpki-client