Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/4vaswBnrp24ctsP1uffcGbIafl8.asa
File:                     4vaswBnrp24ctsP1uffcGbIafl8.asa (raw, json)
Hash identifier:          IS+ICdCBcFcdSPLwsYV3XIn3RFzJgSOKwzTVODW4UI4=
Subject key identifier:   E2:F6:AC:C0:19:EB:A7:6E:1C:B6:C3:F5:B9:F7:DC:19:B2:1A:7E:5F
Certificate issuer:       /CN=70bab3268085308a1f8d57084b9daa1ebf95e0dc
Certificate serial:       019FEEEB60E8FF68DFECC8AA464C56C50B8B
Authority key identifier: 70:BA:B3:26:80:85:30:8A:1F:8D:57:08:4B:9D:AA:1E:BF:95:E0:DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cLqzJoCFMIofjVcIS52qHr-V4Nw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/4vaswBnrp24ctsP1uffcGbIafl8.asa
Signing time:             Tue 11 Aug 2026 03:43:50 +0000
ASPA not before:          Tue 11 Aug 2026 03:43:50 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            207445
Providers:                AS: 6939
                          AS: 41051
                          AS: 58057
                          AS: 209533
                          AS: 212895
                          AS: 214205
                          AS: 214757
                          AS: 393577
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cLqzJoCFMIofjVcIS52qHr-V4Nw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 00:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ee:eb:60:e8:ff:68:df:ec:c8:aa:46:4c:56:c5:0b:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70bab3268085308a1f8d57084b9daa1ebf95e0dc
        Validity
            Not Before: Aug 11 03:43:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e2f6acc019eba76e1cb6c3f5b9f7dc19b21a7e5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8a:93:4e:5d:88:18:e4:3b:23:8d:db:e7:98:
                    30:8b:d9:3b:87:ce:5e:2a:dc:17:08:44:5c:0b:55:
                    c9:7e:bc:0a:e9:7e:5b:ed:1e:fc:42:41:f2:89:d5:
                    5d:12:6a:43:16:45:b6:87:5f:66:19:af:29:a0:92:
                    e3:82:f4:ec:62:92:e2:f9:d8:26:75:51:50:9b:fb:
                    38:b5:75:86:a2:c6:7e:cd:9b:26:16:8a:81:78:46:
                    89:04:c2:89:c8:97:77:2a:a4:c3:be:71:3e:ff:96:
                    6a:5e:cf:99:fa:91:ec:34:d2:eb:d9:5e:72:b3:71:
                    28:29:aa:43:90:a1:d1:6b:86:c6:77:d6:7a:79:8a:
                    bf:b2:7f:00:d8:d5:9b:72:87:30:74:ee:ad:c3:c4:
                    ac:19:d6:5c:b8:9b:e9:9a:bc:0c:ac:09:0e:84:60:
                    d5:1d:f8:65:e3:d3:3c:8e:fc:e2:b5:bc:3e:ba:19:
                    06:b0:99:18:a1:ce:d7:49:fe:a1:bc:be:3a:83:20:
                    80:11:26:5c:3e:c1:eb:31:6c:56:13:5a:c2:ae:ac:
                    37:42:52:40:35:26:95:3e:be:68:7a:98:d5:7c:40:
                    21:be:f3:2d:85:02:43:94:16:ab:c7:75:7c:df:b7:
                    08:f6:46:a5:3a:c2:58:4e:46:c4:78:76:5b:84:1d:
                    b3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F6:AC:C0:19:EB:A7:6E:1C:B6:C3:F5:B9:F7:DC:19:B2:1A:7E:5F
            X509v3 Authority Key Identifier:
                keyid:70:BA:B3:26:80:85:30:8A:1F:8D:57:08:4B:9D:AA:1E:BF:95:E0:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLqzJoCFMIofjVcIS52qHr-V4Nw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/4vaswBnrp24ctsP1uffcGbIafl8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207445

    Signature Algorithm: sha256WithRSAEncryption
         24:a3:93:0f:ed:ca:dc:a9:9c:d2:ec:25:b4:c0:94:36:c2:b5:
         10:a3:27:38:d8:9c:03:7f:76:26:ad:27:a7:6b:fd:5c:8c:2b:
         be:63:ee:cd:dc:c4:18:6d:ce:db:a0:de:a4:62:0b:55:d5:a6:
         33:69:14:20:7e:9e:7b:f3:d7:9c:8a:35:4b:ac:97:c5:72:9a:
         3e:13:2f:42:28:b2:55:9e:70:50:57:b3:20:fd:92:c0:9f:9b:
         4a:5a:55:8f:2d:c7:05:70:25:ae:f7:a4:8f:4a:11:9b:e4:18:
         62:84:3f:d5:21:fc:dd:b0:37:21:e3:f9:e1:8b:1e:25:e5:83:
         dc:b9:79:09:f8:f1:0e:75:1e:0b:65:9b:e1:e8:35:76:f4:ca:
         e5:0a:eb:84:63:36:cd:ce:b2:f0:6c:7e:b4:89:d9:97:db:3d:
         c7:ae:df:a1:a2:92:8d:d4:d7:30:8d:32:26:9e:18:94:b0:b7:
         b8:d4:a7:be:84:36:0f:d2:2f:eb:b0:8f:8f:fe:ec:4e:65:bc:
         7f:e9:ae:ba:3e:96:c6:79:5d:6e:39:34:75:d2:de:cb:8d:82:
         a8:41:29:e5:0c:8b:64:d4:bb:b0:e3:f8:96:3d:48:76:33:6d:
         14:8c:5c:ac:79:18:2c:da:0a:71:77:36:bd:d9:f3:30:d0:f4:
         a6:d8:b4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:45:53 2026 by rpki-client