Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/b00eRSDcxFDHs0mQJe5x9UBUR_o.asa
File:                     b00eRSDcxFDHs0mQJe5x9UBUR_o.asa (raw, json)
Hash identifier:          +u0Wv9P2GIEvOKYbCsSWBArRrrqg7QPkXLV0YkQ+w6k=
Subject key identifier:   6F:4D:1E:45:20:DC:C4:50:C7:B3:49:90:25:EE:71:F5:40:54:47:FA
Certificate issuer:       /CN=b30e3011a0fb3111fbe8493c1230974aef532704
Certificate serial:       019DCECF0593FD74D67D07DF93461E1B5657
Authority key identifier: B3:0E:30:11:A0:FB:31:11:FB:E8:49:3C:12:30:97:4A:EF:53:27:04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/b00eRSDcxFDHs0mQJe5x9UBUR_o.asa
Signing time:             Mon 27 Apr 2026 11:59:27 +0000
ASPA not before:          Mon 27 Apr 2026 11:59:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            203755
Providers:                AS: 44578
                          AS: 57008
                          AS: 208951
                          AS: 209974
                          AS: 212675
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 02:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ce:cf:05:93:fd:74:d6:7d:07:df:93:46:1e:1b:56:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b30e3011a0fb3111fbe8493c1230974aef532704
        Validity
            Not Before: Apr 27 11:59:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6f4d1e4520dcc450c7b3499025ee71f5405447fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c6:4b:91:45:ce:ed:5e:71:11:d2:d2:b6:1e:
                    54:44:71:10:95:72:9e:af:77:87:03:c0:24:d6:92:
                    58:ea:74:0c:0e:13:6d:48:ac:81:64:82:a0:53:da:
                    a9:77:e9:e0:38:7f:f0:02:1f:f5:4c:45:9e:c2:b5:
                    aa:3c:14:6d:5a:c6:23:75:0b:95:91:84:30:3c:90:
                    33:5d:11:8a:b8:86:4c:e2:41:11:40:5d:1f:b6:03:
                    6e:fd:3c:a0:b9:27:43:06:5e:86:cc:7f:9e:35:51:
                    04:7e:2d:6c:f8:83:e1:c6:2c:ca:2f:39:df:c1:8b:
                    cd:d6:5a:01:25:c8:41:62:dd:4e:fc:78:0f:5d:ab:
                    46:e2:b8:d3:12:af:f1:5c:f6:f2:09:b9:58:cb:81:
                    68:84:29:fa:f3:d6:3f:9a:ea:b8:b7:ce:6c:e2:4f:
                    48:02:bd:d2:0e:be:e0:92:62:2d:41:65:1c:7d:a1:
                    39:89:22:a5:62:c8:87:05:ca:92:58:39:90:5e:a1:
                    05:b1:f4:42:89:95:91:4b:a7:0b:fd:e4:c2:88:b2:
                    ea:e8:80:db:04:c4:78:35:23:b8:73:a9:b9:fc:8a:
                    85:44:af:e1:72:7a:6d:e1:16:aa:39:9e:68:af:bd:
                    34:c3:09:a6:26:d6:61:49:81:00:2a:86:4a:fd:25:
                    02:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:4D:1E:45:20:DC:C4:50:C7:B3:49:90:25:EE:71:F5:40:54:47:FA
            X509v3 Authority Key Identifier:
                keyid:B3:0E:30:11:A0:FB:31:11:FB:E8:49:3C:12:30:97:4A:EF:53:27:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/b00eRSDcxFDHs0mQJe5x9UBUR_o.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203755

    Signature Algorithm: sha256WithRSAEncryption
         7d:87:81:91:e6:b0:63:44:d2:ae:1f:ca:e9:a4:b3:8b:fc:df:
         bf:f7:db:a5:84:45:17:a4:7d:6c:da:c7:1d:c2:08:c0:2d:26:
         8c:bc:db:d7:c7:fd:04:86:60:c4:eb:bb:77:52:f5:2d:a1:f2:
         89:d1:3d:23:2a:c4:f4:df:f0:bb:c7:67:c9:5a:0c:ab:b8:a8:
         f9:cd:1f:a5:b0:24:f9:12:23:9b:af:ea:8a:b9:75:e4:ad:2e:
         f2:35:f5:d5:13:ef:5e:ca:ee:27:18:b2:2b:23:33:dc:8d:fc:
         ee:58:cc:df:a9:11:22:b1:4d:bd:f5:e0:8a:77:6b:73:c4:e6:
         22:23:92:0e:a9:80:ee:92:ec:ca:f1:74:ae:ca:85:dc:ed:6f:
         ec:dd:38:a7:82:ea:dd:9d:a7:3d:1d:a1:52:3c:70:22:5f:30:
         75:7f:29:ac:4a:b7:c6:16:c6:22:4c:d2:0c:c4:4d:18:57:6d:
         15:92:87:46:c2:bd:16:aa:fd:d7:f8:a5:e6:7a:2f:f6:c7:9f:
         b1:f8:c8:d5:2c:d2:33:80:68:8f:a4:9e:1e:85:4a:5d:ee:ee:
         7d:e1:60:2a:8f:53:05:f8:f7:31:86:34:ae:42:2a:5f:4a:12:
         9e:20:71:49:66:72:ff:ee:90:8d:57:09:45:8c:49:0a:e6:ab:
         4b:8f:2d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 11:57:16 2026 by rpki-client