Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/0d294d-cc57-4dc9-b5ab-cc87ea25bbfe/1/q7ThTrs0g513Vx_EsM-SNJd-9QU.asa
File:                     q7ThTrs0g513Vx_EsM-SNJd-9QU.asa (raw, json)
Hash identifier:          tmMU4Zq5R5GAkYxxYk1nWgXxt8gVsZJujQN6NpzHTjE=
Subject key identifier:   AB:B4:E1:4E:BB:34:83:9D:77:57:1F:C4:B0:CF:92:34:97:7E:F5:05
Certificate issuer:       /CN=23163070c71a65160ec218b89fdf0b1aff060a96
Certificate serial:       01A05D55FF1CE49673AE1707EB572A1DC331
Authority key identifier: 23:16:30:70:C7:1A:65:16:0E:C2:18:B8:9F:DF:0B:1A:FF:06:0A:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IxYwcMcaZRYOwhi4n98LGv8GCpY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/0d294d-cc57-4dc9-b5ab-cc87ea25bbfe/1/q7ThTrs0g513Vx_EsM-SNJd-9QU.asa
Signing time:             Tue 01 Sep 2026 14:18:32 +0000
ASPA not before:          Tue 01 Sep 2026 14:18:32 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214630
Providers:                AS: 6939
                          AS: 11967
                          AS: 26042
                          AS: 205941
                          AS: 209874
                          AS: 215828
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/0d294d-cc57-4dc9-b5ab-cc87ea25bbfe/1/IxYwcMcaZRYOwhi4n98LGv8GCpY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/0d294d-cc57-4dc9-b5ab-cc87ea25bbfe/1/IxYwcMcaZRYOwhi4n98LGv8GCpY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IxYwcMcaZRYOwhi4n98LGv8GCpY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:5d:55:ff:1c:e4:96:73:ae:17:07:eb:57:2a:1d:c3:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23163070c71a65160ec218b89fdf0b1aff060a96
        Validity
            Not Before: Sep  1 14:18:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=abb4e14ebb34839d77571fc4b0cf9234977ef505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f0:87:83:e1:aa:aa:30:12:08:20:b0:7a:4e:
                    87:5c:af:b6:e0:af:53:fc:19:46:d1:ae:7a:b7:4c:
                    1f:1e:a0:45:05:18:4d:b8:8e:5c:31:c8:20:79:73:
                    9a:10:57:04:62:af:a0:e2:6d:3d:d5:7e:d7:7f:65:
                    e6:25:c9:4c:1e:98:51:5c:f9:83:43:4c:a0:b2:e2:
                    4d:ca:3b:68:a0:90:a7:69:d8:d9:95:6d:a5:ae:0a:
                    c0:00:f1:34:70:36:00:53:0b:04:4b:4d:68:56:1d:
                    5e:9a:71:22:c4:10:54:82:c4:0c:72:ac:e2:12:10:
                    b8:37:f9:45:aa:41:cc:1e:02:16:8d:14:ea:33:51:
                    41:f2:5f:68:38:11:dc:95:21:ba:ec:80:99:cc:11:
                    a7:1d:59:d2:06:ce:94:a0:7c:1c:b7:f3:fd:58:64:
                    34:a3:e6:d3:7e:6c:56:89:1f:36:bf:1c:35:05:44:
                    2b:da:e8:66:de:49:53:1d:e9:4a:81:1e:ec:cc:a5:
                    08:9f:10:a9:d8:f2:41:26:4b:07:79:08:af:f9:3c:
                    67:c0:10:7d:9b:1e:d2:c5:51:80:ac:b9:2f:77:a5:
                    6d:fb:f0:07:60:9b:88:44:21:b4:be:b8:0f:43:98:
                    a3:7f:93:4e:8c:09:3c:72:d4:86:d4:c4:f5:0a:8d:
                    9b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B4:E1:4E:BB:34:83:9D:77:57:1F:C4:B0:CF:92:34:97:7E:F5:05
            X509v3 Authority Key Identifier:
                keyid:23:16:30:70:C7:1A:65:16:0E:C2:18:B8:9F:DF:0B:1A:FF:06:0A:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxYwcMcaZRYOwhi4n98LGv8GCpY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0d294d-cc57-4dc9-b5ab-cc87ea25bbfe/1/q7ThTrs0g513Vx_EsM-SNJd-9QU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0d294d-cc57-4dc9-b5ab-cc87ea25bbfe/1/IxYwcMcaZRYOwhi4n98LGv8GCpY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214630

    Signature Algorithm: sha256WithRSAEncryption
         b8:67:15:16:45:3b:be:59:6f:10:47:f3:9a:30:e4:ef:10:40:
         11:fb:8c:3c:bb:af:26:68:d5:32:f6:66:5e:50:2f:fd:f9:6d:
         ac:1e:c6:f4:39:01:ca:06:44:d9:ff:fa:27:76:27:2b:d5:42:
         98:00:84:b9:78:60:76:86:0b:ad:9c:b8:a3:c3:99:9a:76:ae:
         03:bd:32:03:df:bf:e5:e8:d9:5e:17:b6:2f:43:a7:53:be:f9:
         54:cd:29:79:05:02:2a:ea:a6:19:de:45:f3:da:db:01:51:c5:
         a3:14:b4:98:ef:c4:40:85:23:9c:ba:92:8d:3e:20:68:26:0c:
         e7:2c:57:ce:76:9c:1d:2a:cf:be:b1:12:48:2a:11:4f:1e:23:
         cf:4e:67:7c:4b:49:3a:00:5e:5d:81:1a:35:58:ee:e6:14:07:
         c1:ec:f7:5b:7c:db:08:83:ce:ec:49:5f:67:3c:f0:fb:80:0f:
         fa:26:07:67:dd:3f:fd:a5:85:58:86:50:ac:c3:1c:d4:05:c4:
         a4:0b:9d:1b:ec:d9:ff:ae:c8:db:a1:e4:7d:e5:6d:d8:75:d1:
         22:bf:c5:40:0d:41:81:f5:ec:0c:4e:db:a2:e0:98:1a:ba:04:
         5f:cd:b9:d7:42:bc:b6:ae:c1:05:d9:a9:61:5c:8e:16:30:90:
         10:fe:20:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:40:11 2026 by rpki-client