Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/0f6c6e-fb3d-491e-b336-e603a48a653e/1/3eLWx94YuvwwSRAoKOfCLRLl0zY.asa
File:                     3eLWx94YuvwwSRAoKOfCLRLl0zY.asa (raw, json)
Hash identifier:          79uscgj28wgq78Iu3Rnp/+KrsVCoQRVb4tTu7d98mgM=
Subject key identifier:   DD:E2:D6:C7:DE:18:BA:FC:30:49:10:28:28:E7:C2:2D:12:E5:D3:36
Certificate issuer:       /CN=cf4de123bca9083469410d7a83df2789a86c6999
Certificate serial:       01A010DA76BFD80A5103767859143B43EA43
Authority key identifier: CF:4D:E1:23:BC:A9:08:34:69:41:0D:7A:83:DF:27:89:A8:6C:69:99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z03hI7ypCDRpQQ16g98niahsaZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/0f6c6e-fb3d-491e-b336-e603a48a653e/1/3eLWx94YuvwwSRAoKOfCLRLl0zY.asa
Signing time:             Mon 17 Aug 2026 17:52:27 +0000
ASPA not before:          Mon 17 Aug 2026 17:52:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            207149
Providers:                AS: 29632
                          AS: 34927
                          AS: 41051
                          AS: 212895
                          AS: 393577
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/0f6c6e-fb3d-491e-b336-e603a48a653e/1/z03hI7ypCDRpQQ16g98niahsaZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/0f6c6e-fb3d-491e-b336-e603a48a653e/1/z03hI7ypCDRpQQ16g98niahsaZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z03hI7ypCDRpQQ16g98niahsaZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:10:da:76:bf:d8:0a:51:03:76:78:59:14:3b:43:ea:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf4de123bca9083469410d7a83df2789a86c6999
        Validity
            Not Before: Aug 17 17:52:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=dde2d6c7de18bafc3049102828e7c22d12e5d336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:96:b9:a2:14:60:05:54:88:83:4d:e6:cb:84:
                    67:d9:da:d3:18:e6:7d:cb:fc:f7:45:30:ba:1e:91:
                    f1:21:f2:53:3f:bb:16:62:6d:88:30:e1:4c:3d:aa:
                    af:df:cf:59:7e:0b:8c:68:28:10:70:f4:a2:cc:cd:
                    5a:10:44:00:45:cd:69:98:92:28:2e:f5:5c:71:64:
                    7e:a2:89:88:af:af:90:75:1f:bc:fb:75:81:f1:e6:
                    b4:04:1f:3c:70:fe:0d:e4:93:77:b7:f1:ed:56:3e:
                    15:85:68:87:2a:73:f2:ed:9b:63:36:0d:a5:f3:da:
                    c4:68:76:88:d5:94:9d:fd:e3:3b:82:27:15:dc:cb:
                    bf:1f:3f:a1:25:c7:b8:a6:8d:79:4f:24:5b:47:67:
                    15:51:01:a9:96:3f:77:c3:7f:09:b9:93:50:4e:0f:
                    76:12:be:8e:a3:1b:3a:32:4b:0e:7b:91:ac:27:b7:
                    4d:ca:49:7a:ec:3e:d1:d9:2c:ce:8a:dd:03:d5:9e:
                    55:78:c7:21:1d:4b:2d:74:c2:93:bf:b6:a5:25:b0:
                    81:4a:ba:fd:e1:99:20:b8:3f:c9:98:86:cc:de:95:
                    d2:10:ac:5b:cf:1b:19:82:d0:c2:2d:2b:fa:e9:5c:
                    3f:26:92:d5:48:19:d7:39:e1:7d:32:69:f4:4f:5c:
                    95:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E2:D6:C7:DE:18:BA:FC:30:49:10:28:28:E7:C2:2D:12:E5:D3:36
            X509v3 Authority Key Identifier:
                keyid:CF:4D:E1:23:BC:A9:08:34:69:41:0D:7A:83:DF:27:89:A8:6C:69:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z03hI7ypCDRpQQ16g98niahsaZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0f6c6e-fb3d-491e-b336-e603a48a653e/1/3eLWx94YuvwwSRAoKOfCLRLl0zY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0f6c6e-fb3d-491e-b336-e603a48a653e/1/z03hI7ypCDRpQQ16g98niahsaZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207149

    Signature Algorithm: sha256WithRSAEncryption
         3d:7d:fb:31:e8:17:c6:13:6a:38:67:b2:05:9a:d5:d4:29:aa:
         32:f8:9c:d0:ef:fb:d8:99:1b:9b:f6:ed:d9:c7:33:f1:fe:31:
         99:e5:2c:69:31:d3:1b:28:c6:e4:78:db:ee:04:63:bf:71:67:
         d7:aa:03:41:18:26:47:91:38:76:a9:cb:c7:3d:3f:b0:76:09:
         22:d0:fd:e2:d4:0c:f5:56:ae:2a:4b:29:59:ae:aa:45:f8:54:
         8a:54:94:56:b3:02:e3:99:f7:9d:1b:0d:8d:9e:02:85:c1:91:
         d4:1a:f9:b8:16:6f:79:cb:fb:e7:9b:95:44:3c:5b:86:ef:83:
         13:17:c1:e2:5f:78:ba:5e:c5:62:a9:75:cd:26:3a:cc:48:18:
         cb:9e:a2:47:a5:8b:1f:47:28:28:1a:76:26:0a:a3:7a:ee:65:
         2b:96:af:1b:16:a0:a2:3f:0b:77:89:03:c4:67:ef:55:30:7d:
         50:9d:e6:6a:9b:0c:a2:e6:69:25:d6:f7:17:f5:d9:97:5c:01:
         6e:62:06:a8:6b:a8:00:5a:0c:30:21:43:5b:93:1e:2a:aa:3a:
         c9:d8:2c:8e:c3:24:9d:0e:b9:e4:33:de:2c:1e:0d:5d:2b:7c:
         f4:9e:fb:04:5f:33:f0:a7:0e:5f:b4:8c:fa:aa:03:01:c7:10:
         a3:88:57:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:14 2026 by rpki-client