Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6a3c7-38d5-4540-b925-92bad5641598/1/vY2tTuvU2bXmD8ZEra6Cc_X15hw.asa
File:                     vY2tTuvU2bXmD8ZEra6Cc_X15hw.asa (raw, json)
Hash identifier:          fzDYYNkCwUZhlvkjfrFr/hgbEcIoXdhFh+55Z0wgexM=
Subject key identifier:   BD:8D:AD:4E:EB:D4:D9:B5:E6:0F:C6:44:AD:AE:82:73:F5:F5:E6:1C
Certificate issuer:       /CN=4dd833dfcf771865dfb48559e1f1c6f9358e5ebb
Certificate serial:       019DC13AC257DCA97A550BB0A204C633F2CC
Authority key identifier: 4D:D8:33:DF:CF:77:18:65:DF:B4:85:59:E1:F1:C6:F9:35:8E:5E:BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tdgz3893GGXftIVZ4fHG-TWOXrs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6a3c7-38d5-4540-b925-92bad5641598/1/vY2tTuvU2bXmD8ZEra6Cc_X15hw.asa
Signing time:             Fri 24 Apr 2026 20:42:26 +0000
ASPA not before:          Fri 24 Apr 2026 20:42:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            198741
Providers:                AS: 200027
                          AS: 212396
                          AS: 214480
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e6a3c7-38d5-4540-b925-92bad5641598/1/Tdgz3893GGXftIVZ4fHG-TWOXrs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e6a3c7-38d5-4540-b925-92bad5641598/1/Tdgz3893GGXftIVZ4fHG-TWOXrs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tdgz3893GGXftIVZ4fHG-TWOXrs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 02:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:c1:3a:c2:57:dc:a9:7a:55:0b:b0:a2:04:c6:33:f2:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dd833dfcf771865dfb48559e1f1c6f9358e5ebb
        Validity
            Not Before: Apr 24 20:42:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bd8dad4eebd4d9b5e60fc644adae8273f5f5e61c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0e:06:54:2a:c2:34:70:62:fa:16:f2:40:dc:
                    47:4a:34:f1:2b:1d:f6:8d:53:04:2e:9a:73:3e:f2:
                    0a:b2:7e:6c:8a:80:9f:2a:3c:e5:38:51:58:7c:5b:
                    29:23:71:c1:fc:1e:59:9d:10:02:12:1c:ab:db:7e:
                    2e:e3:8a:1f:2e:d0:0e:7d:8d:67:3f:b1:01:c4:ff:
                    81:17:a0:14:2f:32:41:3e:47:0d:92:15:7a:76:ef:
                    d1:1a:ed:23:e1:01:c2:59:53:47:e8:f2:93:2f:cb:
                    b8:df:16:90:0a:a6:f2:2f:63:06:a8:04:b2:d1:57:
                    b6:2a:ba:5d:18:6c:26:98:4b:97:4c:f9:47:85:42:
                    18:aa:1e:a3:44:a5:55:c2:29:a3:cd:a3:18:0a:6f:
                    9f:c1:d0:3c:c3:de:2e:82:75:2b:aa:a0:38:75:e3:
                    ba:4e:62:56:0e:bf:ea:0e:fa:f2:e0:37:08:bb:c8:
                    39:df:ae:9b:be:4c:ac:7f:6c:2f:01:cd:87:23:38:
                    6a:25:02:24:2f:55:48:16:31:15:9e:a8:ea:22:e4:
                    b0:9f:05:dc:ef:62:1c:2e:05:43:d7:53:57:83:d0:
                    12:58:bd:a5:e8:45:4c:8f:37:6f:2d:af:9f:4e:09:
                    33:12:f4:a2:0a:53:cb:f5:c0:f8:a2:60:64:c5:15:
                    ea:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:8D:AD:4E:EB:D4:D9:B5:E6:0F:C6:44:AD:AE:82:73:F5:F5:E6:1C
            X509v3 Authority Key Identifier:
                keyid:4D:D8:33:DF:CF:77:18:65:DF:B4:85:59:E1:F1:C6:F9:35:8E:5E:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tdgz3893GGXftIVZ4fHG-TWOXrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6a3c7-38d5-4540-b925-92bad5641598/1/vY2tTuvU2bXmD8ZEra6Cc_X15hw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6a3c7-38d5-4540-b925-92bad5641598/1/Tdgz3893GGXftIVZ4fHG-TWOXrs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198741

    Signature Algorithm: sha256WithRSAEncryption
         24:64:7f:12:d3:2b:a9:f2:f9:a4:b9:b4:be:47:a1:05:8b:00:
         0b:43:4e:09:2a:ca:84:44:bb:9c:88:41:41:52:2f:f7:09:41:
         44:e3:ca:14:ec:1e:be:c7:6d:74:a0:5a:7d:b6:17:fc:43:cd:
         43:13:fc:47:47:fa:ac:29:dc:53:b6:1a:f0:06:98:54:9b:21:
         cf:28:fb:00:55:eb:d5:e4:6d:dc:89:65:e0:87:30:62:16:28:
         86:5b:e9:32:6e:74:ce:67:12:c9:76:82:d6:d9:a5:9f:70:35:
         3c:73:9a:7a:7a:4c:24:9f:fb:8e:78:67:78:57:14:9b:41:d9:
         30:10:a2:7d:f8:e1:85:bc:cf:3c:08:32:2b:8e:06:3e:77:17:
         06:53:a5:56:56:42:f5:23:c6:69:f2:38:15:16:ea:c3:b2:43:
         41:fa:08:ec:d3:53:5c:d2:b1:0a:03:7c:c8:50:35:e5:4f:2e:
         72:e7:09:fb:bf:02:99:e0:0f:c1:b3:14:14:62:a9:2a:17:87:
         53:34:4e:02:c9:da:cc:a5:aa:a6:d6:31:b8:36:8e:3c:a4:97:
         44:fc:61:e1:00:55:f0:33:97:82:17:cf:af:97:33:8a:23:10:
         bd:1e:3b:08:a7:6c:8f:01:d7:6e:af:69:ee:39:3c:ec:0f:94:
         57:51:51:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 11:57:39 2026 by rpki-client