Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/YqVzzltVIPdeaSwCpyQY30xpr1w.asa
File:                     YqVzzltVIPdeaSwCpyQY30xpr1w.asa (raw, json)
Hash identifier:          WikOOkK+XwRTMCM7gYW5rQHy5y4vCTIDLGljHlXKP5E=
Subject key identifier:   62:A5:73:CE:5B:55:20:F7:5E:69:2C:02:A7:24:18:DF:4C:69:AF:5C
Certificate issuer:       /CN=be43d2710aad7c98c10f4d945dabdeea21c49d31
Certificate serial:       01A07B299EAE34281FF9D009345B22656FAE
Authority key identifier: BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/YqVzzltVIPdeaSwCpyQY30xpr1w.asa
Signing time:             Mon 07 Sep 2026 09:18:40 +0000
ASPA not before:          Mon 07 Sep 2026 09:18:40 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            198965
Providers:                AS: 8434
                          AS: 29518
                          AS: 202395
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 12 Sep 2026 03:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:7b:29:9e:ae:34:28:1f:f9:d0:09:34:5b:22:65:6f:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be43d2710aad7c98c10f4d945dabdeea21c49d31
        Validity
            Not Before: Sep  7 09:18:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=62a573ce5b5520f75e692c02a72418df4c69af5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7b:2a:3b:d9:17:33:b3:33:68:df:3f:09:38:
                    5a:95:c2:29:b6:ac:70:1a:e6:f1:fb:1c:7a:a1:e9:
                    72:aa:41:58:70:7a:f7:ac:f1:2d:3b:d5:9f:4f:8a:
                    c7:f0:23:b4:db:a5:4b:f8:84:36:e5:1d:8e:aa:c5:
                    a3:11:af:6b:f6:d4:91:5d:b7:35:78:ae:9c:cf:e9:
                    df:2f:f0:b2:83:90:bc:d4:20:00:76:c7:31:22:e5:
                    d2:11:4b:d9:f8:3c:7c:c8:ad:5d:a4:3f:a0:a6:95:
                    21:0f:12:39:7a:b7:98:6a:e3:b7:f6:4f:67:87:ec:
                    59:1b:21:63:3a:a3:16:79:94:1b:a5:f8:bd:37:ed:
                    c2:fc:d9:3c:28:d2:49:bb:2d:f6:4c:4a:95:34:5c:
                    19:5c:40:4f:df:ac:97:ed:e4:20:22:87:9e:ff:2a:
                    db:07:2a:cc:f1:80:dd:b9:33:59:2a:f8:f5:9d:36:
                    50:36:f1:39:53:d5:f2:e7:5b:d9:b8:04:4e:1d:f4:
                    82:45:75:4d:30:a2:d4:02:5b:0e:a9:67:e2:08:fc:
                    76:e5:83:d1:0c:45:d3:ed:5c:bb:c3:a7:e2:b1:aa:
                    7d:b6:da:9d:68:5e:28:3c:39:1f:04:9a:f9:e5:fa:
                    a4:e3:14:47:06:a5:e1:07:4a:02:e7:07:ae:2e:d8:
                    18:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A5:73:CE:5B:55:20:F7:5E:69:2C:02:A7:24:18:DF:4C:69:AF:5C
            X509v3 Authority Key Identifier:
                keyid:BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/YqVzzltVIPdeaSwCpyQY30xpr1w.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198965

    Signature Algorithm: sha256WithRSAEncryption
         52:aa:88:0a:bf:b2:cf:55:2e:46:8f:7b:d7:47:0f:31:4b:1e:
         b3:17:d2:58:a3:b9:a5:0b:6d:13:77:2a:4e:3f:57:bd:6b:9c:
         33:9a:b3:5a:9d:16:2d:3d:d1:75:0a:4f:d0:c9:f7:89:b3:fb:
         d7:d5:d0:74:ea:ad:d2:93:ae:93:ee:c6:12:ac:63:a1:bb:98:
         53:99:d6:6c:e1:22:e3:53:34:ee:e6:e0:1a:bf:d6:9c:01:f8:
         ba:0b:8d:11:68:7d:ba:b6:9b:1f:44:c1:f5:3f:6b:4b:9d:97:
         8a:bd:0b:44:a4:ab:91:02:23:70:01:cf:57:31:c9:af:81:81:
         0a:87:97:65:61:af:15:c1:19:5f:8c:d0:60:06:2e:63:f5:05:
         c9:8e:08:56:2b:27:be:97:1c:71:89:e4:99:46:17:ff:60:75:
         d0:ae:5c:fb:4c:86:6a:c9:90:74:83:6a:32:61:a4:6a:53:d5:
         6e:13:0f:da:c9:67:2a:8a:d3:c3:44:d4:69:f5:c1:5e:ea:40:
         75:fc:b8:8e:c4:73:89:06:ff:05:ef:b5:20:f9:e0:76:ce:7a:
         a3:b1:ea:b2:cc:3a:f9:15:4f:dd:d6:eb:a7:ef:85:ee:fe:71:
         30:8b:b2:6f:53:f7:fd:25:65:86:f9:5a:9a:8e:38:61:63:88:
         0b:85:ff:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 11:24:24 2026 by rpki-client