Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/fIpQ6Eb92t5j4hYZO_uotcjO7Uk.asa
File:                     fIpQ6Eb92t5j4hYZO_uotcjO7Uk.asa (raw, json)
Hash identifier:          WrsTXTFioXmfTDbLS+QXmRgF1uIdzCthLYkRozp941Y=
Subject key identifier:   7C:8A:50:E8:46:FD:DA:DE:63:E2:16:19:3B:FB:A8:B5:C8:CE:ED:49
Certificate issuer:       /CN=b30e3011a0fb3111fbe8493c1230974aef532704
Certificate serial:       019DCEC05F9A2CA742A138191FB41D8D8611
Authority key identifier: B3:0E:30:11:A0:FB:31:11:FB:E8:49:3C:12:30:97:4A:EF:53:27:04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/fIpQ6Eb92t5j4hYZO_uotcjO7Uk.asa
Signing time:             Mon 27 Apr 2026 11:43:27 +0000
ASPA not before:          Mon 27 Apr 2026 11:43:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            208951
Providers:                AS: 174
                          AS: 3580
                          AS: 6939
                          AS: 9002
                          AS: 15830
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 02:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ce:c0:5f:9a:2c:a7:42:a1:38:19:1f:b4:1d:8d:86:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b30e3011a0fb3111fbe8493c1230974aef532704
        Validity
            Not Before: Apr 27 11:43:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7c8a50e846fddade63e216193bfba8b5c8ceed49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ab:eb:86:83:a0:71:18:08:0b:f5:eb:0f:54:
                    51:af:4a:36:0c:f8:c1:93:81:ba:f3:01:50:a1:52:
                    94:10:46:98:6a:8a:34:66:ed:39:f6:0b:7c:02:4b:
                    47:34:cd:46:75:ef:dd:2b:c0:e0:79:47:61:1c:f9:
                    3b:f3:1f:a0:2a:9f:ce:58:5a:19:3c:0d:eb:7c:8b:
                    fb:7f:77:de:1a:20:2d:f8:a0:7b:30:b5:89:49:fc:
                    11:e9:6c:bf:17:2e:21:a4:48:a5:61:ad:07:dc:44:
                    22:86:12:96:f0:31:5c:79:85:70:c7:22:ec:94:8b:
                    07:c7:9d:f3:95:2c:d0:65:50:05:83:cf:ed:a1:06:
                    22:af:57:3c:eb:7c:b7:54:4f:8d:89:fa:ed:5d:58:
                    15:af:23:57:83:11:bb:0d:c9:e9:e1:79:d5:5c:cd:
                    c7:31:6f:c1:64:e9:ee:27:0c:f9:e9:81:bc:ab:8e:
                    82:88:80:ad:39:2d:15:14:6a:ec:8d:1f:0d:7e:af:
                    7f:68:f9:32:29:6e:c5:8a:f5:dd:16:dd:16:1b:61:
                    df:14:2e:21:51:49:f8:b1:18:ea:a2:2d:72:38:12:
                    3f:c3:11:94:c3:e6:d6:53:56:9d:57:19:f4:b7:bf:
                    62:25:91:50:ee:ea:6e:fb:d3:14:ab:08:5a:34:23:
                    ec:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:8A:50:E8:46:FD:DA:DE:63:E2:16:19:3B:FB:A8:B5:C8:CE:ED:49
            X509v3 Authority Key Identifier:
                keyid:B3:0E:30:11:A0:FB:31:11:FB:E8:49:3C:12:30:97:4A:EF:53:27:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/fIpQ6Eb92t5j4hYZO_uotcjO7Uk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208951

    Signature Algorithm: sha256WithRSAEncryption
         16:11:33:28:b4:0d:a3:c4:fd:9f:5a:dc:e7:f1:2b:7c:95:24:
         4f:aa:ee:02:18:41:be:6b:c1:04:c3:92:36:b3:a5:d8:44:fd:
         ed:c2:0f:3c:81:32:53:e3:99:45:3d:76:33:ec:34:e4:f9:2e:
         97:64:e6:75:89:8d:89:77:6b:4a:a4:5b:0e:e2:b8:62:f4:53:
         24:64:e0:f4:26:56:23:6b:bc:70:98:aa:ed:98:2f:42:9d:ca:
         62:fd:39:d1:3d:9b:6b:6e:d5:ee:ae:4e:35:5f:13:e2:9f:e6:
         10:ea:b0:6c:cc:ea:f6:8f:a0:ed:8a:97:71:8c:c7:2a:02:df:
         b2:46:53:a5:a9:fd:b0:fc:e8:fa:ad:13:3e:44:2e:82:89:f2:
         2a:c6:da:84:10:05:55:8c:66:ca:24:db:3a:e1:5e:5d:a4:a1:
         5c:14:b4:17:d6:ec:49:e2:5c:ad:2f:7e:e8:52:c8:e7:f7:39:
         d6:d8:9b:c1:b3:64:cf:a7:ac:eb:d5:ba:e8:33:4e:bd:7c:fd:
         5f:c8:37:f7:ec:d8:c1:a0:79:70:da:15:02:1c:85:ea:2f:6a:
         96:07:09:08:b3:b0:69:88:f3:08:c0:a2:5a:f0:b3:ac:d8:c7:
         b6:53:5c:3b:3f:38:b6:e0:62:6c:ef:54:88:40:fa:9f:1f:f7:
         35:40:b9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 11:57:53 2026 by rpki-client