Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/5Jc6tMJwHs6_kDZssNgNCa5DcfQ.asa
File:                     5Jc6tMJwHs6_kDZssNgNCa5DcfQ.asa (raw, json)
Hash identifier:          hK1xGE+N20KJfOPReB2sfspix23SnKunSEzOm7SLfDw=
Subject key identifier:   E4:97:3A:B4:C2:70:1E:CE:BF:90:36:6C:B0:D8:0D:09:AE:43:71:F4
Certificate issuer:       /CN=e2da23d3b930d4c1f3ac73065d71a607c35d2900
Certificate serial:       019FAD3D284D95DE73E178B3B57ED8A9B81E
Authority key identifier: E2:DA:23:D3:B9:30:D4:C1:F3:AC:73:06:5D:71:A6:07:C3:5D:29:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/5Jc6tMJwHs6_kDZssNgNCa5DcfQ.asa
Signing time:             Wed 29 Jul 2026 09:38:14 +0000
ASPA not before:          Wed 29 Jul 2026 09:38:14 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            21077
Providers:                AS: 12703
                          AS: 39545
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 00:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:3d:28:4d:95:de:73:e1:78:b3:b5:7e:d8:a9:b8:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2da23d3b930d4c1f3ac73065d71a607c35d2900
        Validity
            Not Before: Jul 29 09:38:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e4973ab4c2701ecebf90366cb0d80d09ae4371f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:96:23:05:c3:a5:61:75:5c:7e:f0:66:02:2c:
                    73:c4:e5:51:98:46:12:de:f1:8c:2d:45:3d:80:8e:
                    81:12:de:1d:2d:95:85:2e:d7:35:51:bf:0f:37:96:
                    31:7c:b2:a7:08:60:85:cc:73:d9:68:a9:fc:a8:ea:
                    48:a2:9c:68:59:8a:cb:c8:7d:3f:ee:60:d2:b4:4a:
                    58:db:43:e2:f9:62:c8:ca:18:96:36:29:93:7a:be:
                    a0:88:e5:19:13:0c:92:5f:0c:c5:6c:e5:ff:ea:de:
                    b3:1c:92:41:0b:3e:97:59:5e:05:ae:d8:99:4f:b6:
                    59:80:16:ab:59:06:27:13:a7:d4:82:d8:fe:98:79:
                    63:a4:b5:f4:21:7c:9c:6e:39:ae:06:dd:18:21:b2:
                    6d:9f:12:aa:6d:28:29:48:aa:93:0b:24:fe:52:36:
                    dd:8a:a1:86:46:85:c1:40:eb:5c:60:1c:98:d6:a8:
                    a1:47:46:a3:e6:15:ba:71:0d:5b:06:7b:ff:e9:50:
                    fa:75:34:f6:3f:54:79:c6:80:54:06:c1:91:0c:a7:
                    fb:59:7e:00:11:87:87:b6:f3:bc:e8:d5:81:08:51:
                    31:9a:d2:e9:75:e8:8e:e2:2a:53:5f:04:1b:a0:2e:
                    88:c6:0e:c9:48:07:d8:83:f7:e6:97:80:05:84:de:
                    74:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:97:3A:B4:C2:70:1E:CE:BF:90:36:6C:B0:D8:0D:09:AE:43:71:F4
            X509v3 Authority Key Identifier:
                keyid:E2:DA:23:D3:B9:30:D4:C1:F3:AC:73:06:5D:71:A6:07:C3:5D:29:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/5Jc6tMJwHs6_kDZssNgNCa5DcfQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21077

    Signature Algorithm: sha256WithRSAEncryption
         41:78:ea:4a:be:b5:32:68:e2:24:17:40:4f:bc:3c:01:df:4b:
         2a:4e:0f:e2:c8:8a:69:f1:ed:a6:d8:14:8a:47:44:b6:ef:01:
         37:a7:04:23:3c:61:b5:a8:76:c4:d5:ad:0e:6a:46:02:c1:1e:
         07:f5:8e:1b:83:99:a5:8e:a8:5f:ac:06:83:3a:d8:09:80:14:
         7e:7a:8c:9d:e7:63:ff:6b:66:ea:3d:39:10:ec:f0:d5:bb:90:
         20:c0:cc:c1:c0:d2:55:16:02:84:c3:85:c0:32:fa:66:38:6c:
         7c:25:c3:15:2b:14:13:6a:ed:17:19:94:c2:e4:ce:c9:98:b0:
         b7:fc:cc:8c:b1:2b:6c:1c:ce:23:7c:01:cc:00:1b:86:ab:e7:
         9f:5c:c8:d3:47:e9:09:b8:3e:ae:77:24:70:ed:d2:65:09:46:
         e0:40:65:cc:3d:03:f9:37:1a:6e:b7:4d:ef:f9:a6:ab:47:ac:
         d6:2e:a0:e2:1b:76:23:3d:5c:6f:34:54:5d:81:4a:00:eb:1a:
         19:5a:50:80:5d:4e:1d:80:73:52:df:f0:5e:93:4f:dc:8f:93:
         ff:a4:ca:00:99:cd:37:62:b4:bc:95:ef:6e:c4:d6:29:01:d3:
         26:f1:cb:4d:c1:24:35:f8:69:be:49:bc:da:d2:12:de:87:73:
         37:c6:d6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:50:33 2026 by rpki-client