Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/aThxnwCGINMSN5w7Lq386c4Rr0Q.asa
File:                     aThxnwCGINMSN5w7Lq386c4Rr0Q.asa (raw, json)
Hash identifier:          nDmBVTg9NgvFnfHF4bT15FSCd3UeJ1yvkPU8dWHoMcM=
Subject key identifier:   69:38:71:9F:00:86:20:D3:12:37:9C:3B:2E:AD:FC:E9:CE:11:AF:44
Certificate issuer:       /CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Certificate serial:       01A0148A5F3488C812DE5C8FAB0108DC8BAF
Authority key identifier: DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/aThxnwCGINMSN5w7Lq386c4Rr0Q.asa
Signing time:             Tue 18 Aug 2026 11:03:27 +0000
ASPA not before:          Tue 18 Aug 2026 11:03:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            215224
Providers:                AS: 24875
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Sep 2026 13:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:14:8a:5f:34:88:c8:12:de:5c:8f:ab:01:08:dc:8b:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
        Validity
            Not Before: Aug 18 11:03:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6938719f008620d312379c3b2eadfce9ce11af44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:86:15:3d:28:46:ec:72:16:c0:9d:5f:93:cf:
                    de:e3:ce:28:c2:b6:84:d7:0d:11:4f:ee:6e:a8:91:
                    29:23:47:c8:8a:40:c1:89:d5:eb:32:aa:b6:20:c4:
                    db:c9:51:63:c2:24:d5:83:45:4c:e4:cb:de:14:f0:
                    c0:23:2e:c8:d5:c9:6a:3d:19:32:4b:d4:b0:7b:14:
                    26:8c:3c:e4:be:91:b4:8a:08:0a:0c:ae:59:4c:e0:
                    a5:a2:b4:b0:66:e3:18:3a:02:2c:d7:a7:b9:05:bb:
                    50:42:7d:66:be:63:89:dd:bc:70:c3:48:40:40:65:
                    a7:a0:68:d7:66:5e:1d:03:3f:0b:0f:52:ba:6d:c5:
                    ae:ad:1d:02:1a:c6:3f:2e:12:03:15:7f:02:c2:8c:
                    44:79:0e:e1:ee:c4:a5:b4:c0:82:67:80:73:cc:a2:
                    89:50:9a:84:29:41:ef:df:5a:93:59:2e:2c:a5:23:
                    ce:a4:42:1a:54:4c:70:d3:98:0f:91:6d:f8:b8:e1:
                    4f:e6:29:1f:59:d5:c2:07:3d:db:89:83:93:df:b7:
                    13:e2:e9:05:1b:e5:37:7d:0f:01:1b:f0:35:02:b8:
                    00:75:69:b2:df:41:d5:37:fb:0c:52:83:44:ea:8a:
                    02:a4:c4:56:63:97:2b:5d:72:4f:ba:f5:d2:51:0a:
                    2c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:38:71:9F:00:86:20:D3:12:37:9C:3B:2E:AD:FC:E9:CE:11:AF:44
            X509v3 Authority Key Identifier:
                keyid:DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/aThxnwCGINMSN5w7Lq386c4Rr0Q.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215224

    Signature Algorithm: sha256WithRSAEncryption
         a0:03:04:21:e6:63:07:e6:30:dd:a9:bf:ae:2c:4a:fa:97:ff:
         88:3e:ea:a7:00:81:68:02:ff:15:98:35:d5:ee:c7:f6:9b:a7:
         35:df:54:cb:64:4e:30:10:7e:30:92:77:43:0e:92:a2:5f:cd:
         d4:30:ac:bf:f4:cc:03:13:a7:7b:f6:27:66:94:93:e4:9a:02:
         ae:b8:8b:6b:6d:6a:39:1f:22:bb:7c:2f:a4:56:9b:e6:75:fa:
         b9:b3:ab:b5:4b:7a:4f:09:ce:97:c3:59:73:3b:ca:89:3d:a8:
         a4:61:ff:71:38:95:0f:e1:e5:ec:22:4b:0d:9d:b3:8a:fa:4d:
         03:be:e9:21:26:b7:6a:5b:8e:31:a3:27:7e:22:63:dd:9e:08:
         f4:2a:61:24:9a:42:c0:38:84:67:57:e3:f2:50:fa:50:c8:3d:
         6d:09:7f:79:47:cd:8f:89:81:74:47:6d:3a:0c:b5:8d:ef:ea:
         b1:ac:c4:48:e8:67:ef:c9:04:4e:9a:7e:8d:77:d1:f4:d9:e7:
         b6:d4:c8:fd:de:9f:d5:e3:5b:62:16:43:f5:33:a7:79:7e:5a:
         86:44:a1:5e:cb:53:9a:63:5a:4b:c0:29:24:87:7e:70:cf:ad:
         c9:89:f3:1d:de:d0:4a:00:20:a5:17:bb:2c:f7:0a:b2:0e:d8:
         2e:aa:7a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:28:12 2026 by rpki-client