Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/Gn-JfhxZjfa_l49iGuP-mlcrUow.asa
File:                     Gn-JfhxZjfa_l49iGuP-mlcrUow.asa (raw, json)
Hash identifier:          WdyF4QoD68QIqQ9eYYsah7gnKALS9GuIQ9LM9ZYre7o=
Subject key identifier:   1A:7F:89:7E:1C:59:8D:F6:BF:97:8F:62:1A:E3:FE:9A:57:2B:52:8C
Certificate issuer:       /CN=152d518481ced2f84d01104f871d64d44301db3b
Certificate serial:       01A01BD2625CE2E034495C47DDC40FDF4457
Authority key identifier: 15:2D:51:84:81:CE:D2:F8:4D:01:10:4F:87:1D:64:D4:43:01:DB:3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FS1RhIHO0vhNARBPhx1k1EMB2zs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/Gn-JfhxZjfa_l49iGuP-mlcrUow.asa
Signing time:             Wed 19 Aug 2026 20:59:27 +0000
ASPA not before:          Wed 19 Aug 2026 20:59:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            213409
Providers:                AS: 6939
                          AS: 8772
                          AS: 29632
                          AS: 214757
                          AS: 214809
                          AS: 215296
                          AS: 215828
                          AS: 219529
                          AS: 400992
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/FS1RhIHO0vhNARBPhx1k1EMB2zs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/FS1RhIHO0vhNARBPhx1k1EMB2zs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FS1RhIHO0vhNARBPhx1k1EMB2zs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Sep 2026 17:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:1b:d2:62:5c:e2:e0:34:49:5c:47:dd:c4:0f:df:44:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=152d518481ced2f84d01104f871d64d44301db3b
        Validity
            Not Before: Aug 19 20:59:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1a7f897e1c598df6bf978f621ae3fe9a572b528c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:de:2a:7b:64:72:97:d3:3e:88:14:80:f0:c0:
                    88:38:d7:a1:0b:fa:7f:8f:49:25:28:79:0f:d6:49:
                    65:47:47:cf:a6:96:89:9e:70:2a:2b:25:c2:77:90:
                    41:fa:c9:e5:a4:58:23:ab:2d:79:95:65:cc:b0:ff:
                    f9:a7:b6:13:5f:6d:c3:8f:1a:1d:b3:04:e1:6f:68:
                    dd:49:d5:4b:17:b0:1f:90:93:ac:49:a2:56:25:25:
                    dc:87:08:9a:48:4c:f3:b5:3f:ed:1d:d0:85:7a:e5:
                    db:00:88:1f:e4:8c:d7:12:68:d4:ae:de:82:72:e1:
                    a5:6a:f1:6d:da:91:c2:4e:f9:c2:24:15:7a:c1:70:
                    4f:01:2a:30:ec:b6:e6:b1:66:34:28:71:99:07:49:
                    26:27:ee:57:8b:79:00:35:42:e2:b9:32:4f:22:4b:
                    41:53:a5:6c:8d:c9:6f:ac:d2:63:b7:de:b5:7a:ef:
                    56:12:80:85:eb:17:83:4f:23:e2:df:e8:7e:70:19:
                    09:be:91:60:f9:74:41:53:bb:b5:c6:70:ac:cf:39:
                    46:a7:4b:c6:59:cb:11:88:57:27:b8:9e:9e:da:d3:
                    b6:9e:15:29:74:36:48:bb:3a:6d:55:67:45:a6:69:
                    02:b1:26:8d:db:67:ba:79:0c:7b:68:33:d0:2b:23:
                    bb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:7F:89:7E:1C:59:8D:F6:BF:97:8F:62:1A:E3:FE:9A:57:2B:52:8C
            X509v3 Authority Key Identifier:
                keyid:15:2D:51:84:81:CE:D2:F8:4D:01:10:4F:87:1D:64:D4:43:01:DB:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FS1RhIHO0vhNARBPhx1k1EMB2zs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/Gn-JfhxZjfa_l49iGuP-mlcrUow.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/FS1RhIHO0vhNARBPhx1k1EMB2zs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213409

    Signature Algorithm: sha256WithRSAEncryption
         55:d9:0c:f6:fe:21:c6:2f:ca:1e:50:21:72:c0:1e:55:43:a4:
         5c:4f:da:a6:ad:75:1c:23:ca:11:4e:7f:00:a3:7a:85:06:30:
         6e:e0:9a:d2:7b:89:ea:09:d7:64:43:8b:33:11:fd:98:b0:d1:
         d7:5c:c7:49:6f:ac:e1:e7:0c:a4:4c:eb:bb:f7:4b:a2:e2:32:
         08:3a:b3:62:ba:1d:69:e7:c7:28:fb:e0:04:d8:8d:be:96:7a:
         be:e4:d7:d2:35:94:1f:29:72:fd:21:fc:7d:5c:28:30:05:ef:
         d1:a4:13:80:6f:52:46:8d:66:44:7a:dc:9a:81:0e:c9:14:6c:
         80:12:26:c2:c3:9d:46:f4:1a:8e:68:55:0f:66:a1:8b:98:54:
         d4:b6:8d:66:03:d8:b0:55:11:9b:ef:72:7d:2d:d2:96:4b:1f:
         14:fb:1d:b4:3c:2e:96:ac:5a:41:f6:0e:04:f7:61:c2:89:c6:
         bd:07:ca:6e:52:0d:6c:ac:a6:46:45:fc:ba:53:5f:13:56:da:
         c2:f0:4d:54:16:39:8f:88:43:50:93:9a:d9:2c:58:2d:94:b7:
         2a:ee:c4:7d:16:c5:3e:8d:c7:b4:5c:15:1f:82:6d:56:dc:b4:
         de:10:02:d6:78:4d:63:e8:fe:65:84:ff:53:14:80:5a:e8:a6:
         37:ac:ca:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 6 01:02:34 2026 by rpki-client