Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/7d9c4c-2f34-45b6-a7f0-050d1a938644/1/WLBqKFSRYhW2BLxrPxBOnJ5-nEE.asa
File:                     WLBqKFSRYhW2BLxrPxBOnJ5-nEE.asa (raw, json)
Hash identifier:          /lRmFidkYST8vyWDfHx47uGzvp12UzkNdZt/L+a0R9k=
Subject key identifier:   58:B0:6A:28:54:91:62:15:B6:04:BC:6B:3F:10:4E:9C:9E:7E:9C:41
Certificate issuer:       /CN=e65a21e4fafc993a5a3e3635646f0e51a3eb7b6d
Certificate serial:       019F66365D7E454875118C0FB1665271D237
Authority key identifier: E6:5A:21:E4:FA:FC:99:3A:5A:3E:36:35:64:6F:0E:51:A3:EB:7B:6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5loh5Pr8mTpaPjY1ZG8OUaPre20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/7d9c4c-2f34-45b6-a7f0-050d1a938644/1/WLBqKFSRYhW2BLxrPxBOnJ5-nEE.asa
Signing time:             Wed 15 Jul 2026 14:37:46 +0000
ASPA not before:          Wed 15 Jul 2026 14:37:46 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            201853
Providers:                AS: 34872
                          AS: 34927
                          AS: 210233
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/7d9c4c-2f34-45b6-a7f0-050d1a938644/1/5loh5Pr8mTpaPjY1ZG8OUaPre20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/7d9c4c-2f34-45b6-a7f0-050d1a938644/1/5loh5Pr8mTpaPjY1ZG8OUaPre20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5loh5Pr8mTpaPjY1ZG8OUaPre20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:66:36:5d:7e:45:48:75:11:8c:0f:b1:66:52:71:d2:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e65a21e4fafc993a5a3e3635646f0e51a3eb7b6d
        Validity
            Not Before: Jul 15 14:37:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=58b06a2854916215b604bc6b3f104e9c9e7e9c41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:32:c7:c1:5f:95:14:88:a8:7d:f2:77:99:6e:
                    33:c8:32:e3:31:e9:bd:a3:53:bc:15:a3:63:24:60:
                    d7:73:58:d2:75:1b:bd:cb:ed:12:fb:3b:b1:64:20:
                    64:95:86:9b:24:04:a9:d0:8d:9c:14:2f:91:d7:f9:
                    e2:30:0f:61:12:2a:a6:24:0f:69:f3:60:f1:44:99:
                    d8:ef:45:5a:1a:6c:74:18:44:ad:3a:c2:58:f6:d7:
                    55:1c:bc:46:97:43:9d:36:ad:21:67:07:43:cc:cb:
                    03:48:ff:00:68:f7:4a:a4:e7:6c:97:31:92:9d:2c:
                    44:b7:18:fd:06:6f:2d:b2:b5:36:bd:7c:e0:05:17:
                    52:76:e9:eb:ca:5e:0e:2b:c2:9c:b6:c8:dd:c1:27:
                    7c:1d:6f:4f:a6:68:fe:a4:00:03:b5:f3:9f:ce:47:
                    d3:73:48:28:23:95:93:79:15:5f:fc:a6:31:7e:55:
                    2c:59:f7:f6:b9:42:95:d1:46:1d:84:3f:be:f2:63:
                    d7:4f:3b:2a:63:d9:da:81:59:f8:12:cc:d0:23:6e:
                    51:fa:ce:db:79:8f:f8:52:a0:d0:45:9d:1b:fd:dd:
                    e0:ed:ca:be:d2:9b:37:8c:46:55:3f:03:90:50:7a:
                    a6:32:40:ae:64:8e:67:b2:4e:cf:27:43:ff:df:df:
                    f4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:B0:6A:28:54:91:62:15:B6:04:BC:6B:3F:10:4E:9C:9E:7E:9C:41
            X509v3 Authority Key Identifier:
                keyid:E6:5A:21:E4:FA:FC:99:3A:5A:3E:36:35:64:6F:0E:51:A3:EB:7B:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5loh5Pr8mTpaPjY1ZG8OUaPre20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/7d9c4c-2f34-45b6-a7f0-050d1a938644/1/WLBqKFSRYhW2BLxrPxBOnJ5-nEE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/7d9c4c-2f34-45b6-a7f0-050d1a938644/1/5loh5Pr8mTpaPjY1ZG8OUaPre20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201853

    Signature Algorithm: sha256WithRSAEncryption
         4d:38:2f:da:ef:59:d0:09:c3:3f:10:99:7a:05:fe:45:8e:72:
         5d:b2:2d:4b:f1:98:33:0d:eb:c7:fd:b4:0e:d5:6d:67:04:d7:
         21:bd:32:0a:a9:ee:75:5e:01:0f:99:77:b4:2d:ee:4c:17:f4:
         a1:65:ff:de:3b:24:fd:3e:30:1f:82:69:50:34:89:ec:43:69:
         77:df:62:25:a4:0b:a3:7c:d0:d0:20:2e:7f:3a:87:8b:b7:ec:
         a5:56:92:14:03:23:34:49:47:a0:c8:78:a4:54:ff:d8:c2:e7:
         66:dc:45:f6:5e:93:64:12:cb:97:aa:15:26:e3:51:db:9f:f0:
         4e:62:8b:65:80:3d:d0:59:d0:9c:0d:08:f8:22:80:24:e9:34:
         92:14:c0:c3:e2:e4:4c:e9:32:a9:b5:ef:3b:a5:29:41:39:38:
         6b:71:db:cd:8a:48:90:c8:57:8c:f2:6a:dd:98:a2:01:71:30:
         7d:83:eb:b0:de:3e:4b:77:43:6c:65:f5:31:74:0e:60:42:73:
         d4:90:e9:f6:38:12:6b:9b:5d:b7:55:b9:8f:6e:dd:09:e0:a2:
         75:ad:d1:34:11:bf:cf:2b:cf:dc:3b:92:48:fd:fb:35:22:19:
         db:fe:45:7d:62:53:da:7b:0a:e8:d2:cb:08:a7:2c:ff:d7:dc:
         d0:d2:c9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:55:30 2026 by rpki-client