Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/1cb4f1-1835-4f00-9351-3e965b5a476b/1/3aUWIB1B24nN5d9PVN3fuAnR8LE.asa
File:                     3aUWIB1B24nN5d9PVN3fuAnR8LE.asa (raw, json)
Hash identifier:          s221MpFm3+d+uY1QK2IrQpuHMd97/y6UrUFOsPwAAjE=
Subject key identifier:   DD:A5:16:20:1D:41:DB:89:CD:E5:DF:4F:54:DD:DF:B8:09:D1:F0:B1
Certificate issuer:       /CN=6433ff5e2e4eb59a5cd92f02a26a0e92bd068608
Certificate serial:       019C5D388C1F66C9757DF58C5C0AE723555C
Authority key identifier: 64:33:FF:5E:2E:4E:B5:9A:5C:D9:2F:02:A2:6A:0E:92:BD:06:86:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZDP_Xi5OtZpc2S8ComoOkr0Ghgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/1cb4f1-1835-4f00-9351-3e965b5a476b/1/3aUWIB1B24nN5d9PVN3fuAnR8LE.asa
Signing time:             Sat 14 Feb 2026 17:35:12 +0000
ASPA not before:          Sat 14 Feb 2026 17:35:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            201392
Providers:                AS: 32002
                          AS: 207841
                          AS: 209533
                          AS: 209735
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/1cb4f1-1835-4f00-9351-3e965b5a476b/1/ZDP_Xi5OtZpc2S8ComoOkr0Ghgg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/1cb4f1-1835-4f00-9351-3e965b5a476b/1/ZDP_Xi5OtZpc2S8ComoOkr0Ghgg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZDP_Xi5OtZpc2S8ComoOkr0Ghgg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 24 Feb 2026 08:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:5d:38:8c:1f:66:c9:75:7d:f5:8c:5c:0a:e7:23:55:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6433ff5e2e4eb59a5cd92f02a26a0e92bd068608
        Validity
            Not Before: Feb 14 17:35:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=dda516201d41db89cde5df4f54dddfb809d1f0b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:23:45:0d:5a:95:31:8c:85:f6:1f:38:e9:6f:
                    87:0e:7f:f9:5c:24:1a:48:00:42:28:cc:06:2e:38:
                    4a:2f:e0:10:ee:c4:23:8d:23:ec:8a:c1:af:c0:43:
                    75:0f:f7:75:7b:e5:db:86:65:02:43:1e:00:26:5d:
                    ad:1f:17:51:49:ab:76:a2:44:8d:9a:c6:e1:97:6d:
                    f5:09:62:62:90:40:07:05:d6:c8:7f:89:af:a5:0b:
                    3f:0a:87:65:4e:82:3c:5a:f2:a2:ae:8f:a4:e1:03:
                    32:77:1e:22:b3:2d:63:cb:37:52:5b:8a:e9:db:34:
                    5c:e5:4d:74:99:91:e6:4a:26:4d:84:f8:84:d4:31:
                    7f:2c:53:67:fd:28:0b:a0:26:c7:2c:7f:b1:92:bf:
                    e7:0e:7e:c4:7c:e6:31:f4:51:33:21:80:68:39:26:
                    fa:fd:2a:76:fa:87:71:a6:85:a4:08:0a:ab:ac:af:
                    f1:e8:b6:24:05:84:19:9a:65:e4:62:dc:3a:a7:af:
                    96:96:73:e8:ba:a7:0a:17:66:51:01:f7:28:1a:8f:
                    3d:53:5e:64:ab:84:17:12:07:e7:39:ba:77:7c:d7:
                    2e:a7:e3:d0:8a:18:9e:54:03:e0:e8:85:dc:a6:0e:
                    fe:a6:b9:54:c6:92:53:71:7f:43:2b:6a:8e:fc:00:
                    b5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A5:16:20:1D:41:DB:89:CD:E5:DF:4F:54:DD:DF:B8:09:D1:F0:B1
            X509v3 Authority Key Identifier:
                keyid:64:33:FF:5E:2E:4E:B5:9A:5C:D9:2F:02:A2:6A:0E:92:BD:06:86:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDP_Xi5OtZpc2S8ComoOkr0Ghgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/1cb4f1-1835-4f00-9351-3e965b5a476b/1/3aUWIB1B24nN5d9PVN3fuAnR8LE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/1cb4f1-1835-4f00-9351-3e965b5a476b/1/ZDP_Xi5OtZpc2S8ComoOkr0Ghgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201392

    Signature Algorithm: sha256WithRSAEncryption
         92:64:90:77:95:f1:3a:18:c7:eb:70:7c:bb:0e:3f:ed:c0:b7:
         66:93:c5:c4:93:71:b4:d8:67:25:7e:e9:73:80:c9:dd:03:37:
         0c:1a:98:89:57:d8:03:fa:02:04:2d:59:7d:4c:14:a8:e9:f6:
         c8:ab:0c:d1:3a:4f:d6:d3:b0:3c:5a:55:c7:4a:2c:cd:cd:ac:
         96:6c:6a:5c:e5:c3:a8:f0:a1:af:fe:12:00:93:c5:71:67:5a:
         3f:29:56:dd:0d:90:7f:c4:a0:81:42:12:64:bb:2e:cd:1c:26:
         27:c7:6d:df:41:45:6f:04:a4:2b:9d:48:8f:58:52:c2:12:da:
         05:d3:e6:97:81:cf:5f:4e:80:83:80:03:cd:40:90:b9:09:27:
         56:19:9e:bd:6c:6a:72:ff:96:35:5a:f1:7d:41:71:ab:1f:7f:
         d8:1b:ac:6b:c8:99:64:58:59:0e:f6:f2:5a:bc:2a:84:06:79:
         a3:1d:f5:a4:3e:b8:9c:f4:07:e6:b9:38:79:e1:fe:a5:66:b5:
         96:59:dc:84:31:6d:d5:9f:d5:4a:14:67:f4:24:b5:df:2a:59:
         52:28:c1:3e:a7:0a:b0:1f:78:bb:22:55:b9:22:3e:20:00:51:
         47:0d:17:cb:f6:dd:a8:a1:27:71:87:31:75:c1:79:b0:81:2b:
         67:ea:1f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 14:34:09 2026 by rpki-client