Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/XJI_rftJWwbRR9-X1wJXegxuT8s.asa
File:                     XJI_rftJWwbRR9-X1wJXegxuT8s.asa (raw, json)
Hash identifier:          drTYciC4a5y3Yv+pPFX7/KgEFSAzzZ/k2n9eYfbHNvc=
Subject key identifier:   5C:92:3F:AD:FB:49:5B:06:D1:47:DF:97:D7:02:57:7A:0C:6E:4F:CB
Certificate issuer:       /CN=256065b6166aef96fcff3a2ea56fdffd390f3166
Certificate serial:       019F19012E995F7F9525F3C8CBF517A79C6A
Authority key identifier: 25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/XJI_rftJWwbRR9-X1wJXegxuT8s.asa
Signing time:             Tue 30 Jun 2026 14:48:55 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:55 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            213451
Providers:                AS: 215638
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:2e:99:5f:7f:95:25:f3:c8:cb:f5:17:a7:9c:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=256065b6166aef96fcff3a2ea56fdffd390f3166
        Validity
            Not Before: Jun 30 14:48:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5c923fadfb495b06d147df97d702577a0c6e4fcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:98:63:d9:c5:2b:df:a5:ac:c5:99:c9:3e:19:
                    d3:cc:21:50:ea:df:48:b4:21:dc:87:1e:ad:09:0a:
                    00:c6:85:e5:82:52:64:25:93:c4:ba:30:93:ce:96:
                    ec:56:99:4f:ba:fc:6f:ba:e8:4c:7d:27:56:4d:e0:
                    30:ff:04:1e:eb:f7:ac:66:6b:d3:40:4d:63:71:b3:
                    cd:b6:3c:27:4c:36:82:50:31:fb:b3:b7:ff:1a:f7:
                    0e:4f:92:af:3e:d9:db:3d:58:45:f5:ee:fb:ce:59:
                    1f:4f:78:f4:ac:57:fa:54:6c:a4:6d:f3:9e:3e:bd:
                    e8:5b:5c:1a:7b:33:20:0f:1d:e0:32:ee:d4:b3:31:
                    83:9c:a3:10:35:08:3e:7a:84:95:19:7a:3d:f7:8d:
                    4a:d1:a8:93:0e:be:a9:42:ae:05:ba:47:12:14:31:
                    41:78:d4:f4:1b:85:47:a4:10:14:fd:74:df:b4:1b:
                    ff:ad:50:6b:ea:61:4d:5d:f8:79:a0:38:17:ce:2f:
                    88:ab:e7:3f:da:9b:b1:c5:ed:f2:33:61:cb:85:ee:
                    06:ff:b4:aa:ae:1f:b3:e3:75:5b:64:5c:ba:10:93:
                    7c:b0:82:38:9c:fb:3e:ee:e7:bc:ba:85:61:0e:25:
                    3a:fd:df:40:b9:66:43:42:8a:0b:c0:c3:f8:68:94:
                    4b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:92:3F:AD:FB:49:5B:06:D1:47:DF:97:D7:02:57:7A:0C:6E:4F:CB
            X509v3 Authority Key Identifier:
                keyid:25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/XJI_rftJWwbRR9-X1wJXegxuT8s.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213451

    Signature Algorithm: sha256WithRSAEncryption
         94:61:11:18:5d:6f:3b:ae:96:d4:e8:f9:c8:d6:29:c7:6d:18:
         ca:b2:b3:01:00:d7:ec:86:f2:f6:01:f9:05:9e:b7:32:d1:09:
         bc:aa:ce:63:5e:ed:d9:46:0f:07:be:76:26:4d:74:18:8a:8f:
         e7:b6:c5:44:f3:c8:29:7b:cd:a7:72:55:20:52:8a:ac:39:de:
         f4:76:03:28:a8:c8:39:8e:f4:55:7d:ae:8a:37:91:66:35:23:
         2c:7a:18:c5:e3:a4:8a:9a:3d:88:0b:15:c6:b4:87:a4:7a:bd:
         53:aa:94:c6:2a:a7:e9:8a:db:6a:cc:18:74:33:94:51:77:95:
         67:b4:35:d4:ec:03:e9:59:0c:04:79:b0:29:b9:a1:94:ac:e2:
         85:3b:8d:df:6a:01:98:14:60:b4:3a:9c:9f:67:40:96:1a:dc:
         82:40:1a:f9:02:59:10:1b:b4:76:c1:c1:fb:4f:73:c3:04:ed:
         0f:78:ca:ab:91:0e:61:3a:60:ae:1c:88:96:66:27:0d:46:a3:
         14:d3:a6:bb:57:d4:2a:1a:ac:d4:56:62:11:ae:58:fa:90:46:
         8e:dd:f0:6a:15:b4:9a:10:2b:f0:b9:0d:a3:e2:23:4e:a6:e2:
         dc:78:5d:a7:52:0f:0e:4c:46:72:f8:66:31:63:cc:cc:2d:dd:
         47:5a:96:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:09:29 2026 by rpki-client