Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/UHHaFvrfMRRKl6SdkTimFutAhHg.asa
File:                     UHHaFvrfMRRKl6SdkTimFutAhHg.asa (raw, json)
Hash identifier:          Gja3YVvc1JUAVXo+oW3zdTWz0nnwxnzNtIFJKRhxfmc=
Subject key identifier:   50:71:DA:16:FA:DF:31:14:4A:97:A4:9D:91:38:A6:16:EB:40:84:78
Certificate issuer:       /CN=181e4d608152fc244afffba2dc72b851b19b2527
Certificate serial:       019D301F19266B061A1F613037BF5122A884
Authority key identifier: 18:1E:4D:60:81:52:FC:24:4A:FF:FB:A2:DC:72:B8:51:B1:9B:25:27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/UHHaFvrfMRRKl6SdkTimFutAhHg.asa
Signing time:             Fri 27 Mar 2026 16:27:17 +0000
ASPA not before:          Fri 27 Mar 2026 16:27:17 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            209867
Providers:                AS: 31257
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:30:1f:19:26:6b:06:1a:1f:61:30:37:bf:51:22:a8:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=181e4d608152fc244afffba2dc72b851b19b2527
        Validity
            Not Before: Mar 27 16:27:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5071da16fadf31144a97a49d9138a616eb408478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:98:5a:33:25:21:15:03:d1:ec:f3:4c:b8:bb:
                    2d:3e:ec:d5:3a:2a:11:21:80:ae:17:29:d2:bc:d3:
                    69:bf:3b:89:6c:0c:74:d7:19:98:85:a0:bb:6d:ad:
                    95:61:0c:90:2d:35:34:59:0b:b9:57:08:e6:d0:80:
                    e2:a8:d5:5b:1c:38:de:ca:91:82:e1:80:85:59:e4:
                    a4:1a:2e:b9:ae:d9:2c:52:4d:e3:d8:57:c3:6f:a4:
                    70:b2:2a:3c:8f:ca:d0:1b:bc:27:44:5f:2b:d6:21:
                    e2:c9:bb:72:69:00:35:7e:cd:c7:43:6d:3f:7e:dd:
                    78:36:83:a0:e4:36:b3:ec:10:52:90:c1:04:9f:2a:
                    6b:25:45:69:d8:f0:e5:25:8c:35:00:90:90:9b:f1:
                    4e:63:9a:45:17:dc:1e:25:70:bb:62:db:e9:62:8b:
                    0c:27:7e:92:6c:93:4a:b9:31:3a:e4:1e:a4:e2:24:
                    3f:dc:9e:a2:da:90:25:0a:f5:43:bc:0f:79:62:ee:
                    25:a3:7d:f5:de:3d:70:ae:73:e8:d7:56:02:8e:44:
                    54:34:50:cf:1c:da:4d:6a:c5:3a:d7:80:e8:b9:b2:
                    d6:1a:db:38:40:5b:ba:29:48:55:17:7d:8f:03:41:
                    96:65:a4:65:98:5b:1f:cf:18:c1:14:b1:7f:2d:b6:
                    7a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:71:DA:16:FA:DF:31:14:4A:97:A4:9D:91:38:A6:16:EB:40:84:78
            X509v3 Authority Key Identifier:
                keyid:18:1E:4D:60:81:52:FC:24:4A:FF:FB:A2:DC:72:B8:51:B1:9B:25:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/UHHaFvrfMRRKl6SdkTimFutAhHg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209867

    Signature Algorithm: sha256WithRSAEncryption
         8b:0e:89:43:c5:59:cc:e0:28:bc:0f:05:25:f2:b5:b5:11:31:
         ac:e3:93:86:96:c9:10:1b:65:7b:28:42:be:10:c5:44:f3:61:
         5e:2a:9a:89:bc:fc:ab:26:92:b1:a3:5f:8c:f7:01:17:87:fd:
         de:b3:f9:33:56:19:ad:df:a4:83:28:9e:12:51:23:fe:8d:57:
         e8:e2:b4:69:03:f2:5b:0b:35:d7:c6:b6:ed:e3:63:ab:60:90:
         f2:5f:c3:1b:7a:d7:ae:d0:c1:6d:8c:fa:12:10:76:0e:1a:fa:
         68:c2:83:f8:4d:c8:e5:5d:91:0f:66:49:2e:3f:6a:f3:0c:58:
         05:8d:0a:1d:b9:5d:a8:69:17:8d:ee:0b:34:c6:59:bf:48:cd:
         2a:3d:5d:74:f1:76:b7:80:de:8e:5e:83:bc:d1:23:da:dd:7d:
         12:04:0c:ac:eb:b8:fb:8e:3c:20:dd:17:f1:dc:4c:97:81:98:
         03:2d:2d:3a:4c:37:ef:63:9d:14:21:71:3f:9e:a9:ed:32:68:
         1e:fc:b2:05:94:42:73:fa:66:d1:bf:36:61:6b:5d:f0:8a:e0:
         59:4b:55:af:2f:c5:dc:51:0b:b2:42:7f:2e:bf:ac:59:cf:b7:
         09:67:1d:7e:01:d5:0b:35:6d:1a:8c:09:cd:78:8a:51:bb:95:
         28:2a:e6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:11:07 2026 by rpki-client