Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/Jc2vRE_HX7eFzf72LPyYWmiO4iU.asa
File:                     Jc2vRE_HX7eFzf72LPyYWmiO4iU.asa (raw, json)
Hash identifier:          oAhorlsfuV9RkmKRh10nup3swm+6J7HID4r3l33ussY=
Subject key identifier:   25:CD:AF:44:4F:C7:5F:B7:85:CD:FE:F6:2C:FC:98:5A:68:8E:E2:25
Certificate issuer:       /CN=30d8a64903cfa217379749f18b7fdcea1dab6db4
Certificate serial:       019E22D60B6A4E9BCABF47B58769CEC17374
Authority key identifier: 30:D8:A6:49:03:CF:A2:17:37:97:49:F1:8B:7F:DC:EA:1D:AB:6D:B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/Jc2vRE_HX7eFzf72LPyYWmiO4iU.asa
Signing time:             Wed 13 May 2026 19:35:13 +0000
ASPA not before:          Wed 13 May 2026 19:35:13 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            202032
Providers:                AS: 174
                          AS: 1299
                          AS: 2914
                          AS: 3356
                          AS: 5398
                          AS: 6730
                          AS: 6939
                          AS: 8220
                          AS: 9002
                          AS: 13335
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 22:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:22:d6:0b:6a:4e:9b:ca:bf:47:b5:87:69:ce:c1:73:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30d8a64903cfa217379749f18b7fdcea1dab6db4
        Validity
            Not Before: May 13 19:35:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=25cdaf444fc75fb785cdfef62cfc985a688ee225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:04:e1:a0:f6:c9:e4:b2:a8:f5:e6:67:21:45:
                    4a:84:5f:98:7d:96:4d:51:f5:3b:f2:aa:07:de:1f:
                    2f:d6:18:90:4f:5e:23:34:90:ad:07:b5:07:47:89:
                    5f:c2:73:9d:3f:4d:3a:84:f5:a4:0e:a5:4e:28:5a:
                    c0:ba:63:44:6e:74:14:ab:58:4b:36:0a:a3:b6:30:
                    1f:11:55:0d:40:89:cf:5f:a8:9f:fc:f2:fe:78:81:
                    6e:a8:98:3b:8a:aa:1b:22:b7:70:de:49:24:33:b1:
                    71:d1:40:58:cf:b2:ad:a3:4f:04:d9:02:5d:7f:56:
                    00:f2:36:e3:b9:ba:af:ba:d1:55:34:fb:f4:a2:95:
                    cd:44:c1:0f:29:38:83:dc:fb:70:43:0e:5d:1b:4a:
                    cb:2a:68:5c:34:0c:71:f3:8a:41:4c:5b:b8:25:8b:
                    48:ca:b3:90:96:72:8a:81:83:e5:28:fc:7d:71:27:
                    7c:bf:18:e8:ae:5c:79:64:ec:2f:ca:5f:6c:4b:31:
                    ad:67:dc:c3:af:7d:60:b7:2d:56:91:37:ac:0f:39:
                    99:2a:94:4f:78:74:51:2d:4e:5b:fe:b6:ee:8e:5c:
                    39:b7:94:54:48:77:b1:74:b0:c5:66:db:0a:34:23:
                    b6:e6:68:73:7f:d6:fa:26:cb:d0:eb:1e:3d:3b:e0:
                    7f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:CD:AF:44:4F:C7:5F:B7:85:CD:FE:F6:2C:FC:98:5A:68:8E:E2:25
            X509v3 Authority Key Identifier:
                keyid:30:D8:A6:49:03:CF:A2:17:37:97:49:F1:8B:7F:DC:EA:1D:AB:6D:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/Jc2vRE_HX7eFzf72LPyYWmiO4iU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202032

    Signature Algorithm: sha256WithRSAEncryption
         62:a8:e2:c3:9d:ab:43:4c:2e:93:72:ab:27:8a:f9:1f:30:80:
         a4:1f:19:96:e6:0b:ea:06:84:22:6c:0d:bd:a2:91:e8:a7:c0:
         fd:4b:9f:cc:1f:75:d9:b4:e6:57:43:ab:02:e7:43:0c:e8:07:
         52:5a:ed:91:70:17:76:0c:56:5d:23:ca:d9:28:12:b3:89:e1:
         39:e7:e7:a4:15:57:02:61:62:e9:21:a4:94:d4:03:e2:8a:d2:
         0a:45:44:9d:2b:59:6c:c8:9a:bf:ec:e9:18:b3:f9:94:91:ec:
         22:d4:91:24:db:a6:9f:bb:4f:d8:5e:88:89:b5:7b:4b:36:e3:
         fa:8f:34:44:1f:6a:e0:20:47:7d:b2:3d:35:24:07:3a:88:24:
         34:bb:47:8b:d5:4f:93:a7:01:04:18:6c:eb:a2:35:23:42:2f:
         78:f7:14:5f:39:0f:86:95:64:8b:7a:13:e8:bd:f6:35:96:70:
         78:ab:5a:1d:b7:e3:fc:d5:e1:d2:65:08:81:24:94:e4:6f:98:
         d6:95:8f:e9:77:d4:79:e2:5d:e3:cc:93:c0:86:e5:d9:c7:17:
         ba:53:57:95:8d:97:33:df:9b:41:29:41:fe:6b:40:b6:f5:ec:
         3b:0b:9f:51:b4:c6:fd:a5:41:36:ea:de:44:67:99:44:e9:00:
         e3:91:cc:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 05:35:52 2026 by rpki-client