Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/6cc7d7-3b5a-4dea-86c1-93c59420c931/1/Vz7oOsxWL7210T9Fifl_kQQeDLM.asa
File:                     Vz7oOsxWL7210T9Fifl_kQQeDLM.asa (raw, json)
Hash identifier:          rZ0F9/DNYOrNZBeOBRWHqVNZeI30ewKMxobqnhcmh7A=
Subject key identifier:   57:3E:E8:3A:CC:56:2F:BD:B5:D1:3F:45:89:F9:7F:91:04:1E:0C:B3
Certificate issuer:       /CN=3c138f36c0960d8c4d6361e7ced4c1598e61ed5a
Certificate serial:       01A0001AE359C85574485DEB88F477EF0BCE
Authority key identifier: 3C:13:8F:36:C0:96:0D:8C:4D:63:61:E7:CE:D4:C1:59:8E:61:ED:5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PBOPNsCWDYxNY2HnztTBWY5h7Vo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/6cc7d7-3b5a-4dea-86c1-93c59420c931/1/Vz7oOsxWL7210T9Fifl_kQQeDLM.asa
Signing time:             Fri 14 Aug 2026 11:49:17 +0000
ASPA not before:          Fri 14 Aug 2026 11:49:17 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            211854
Providers:                AS: 205684
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/6cc7d7-3b5a-4dea-86c1-93c59420c931/1/PBOPNsCWDYxNY2HnztTBWY5h7Vo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/6cc7d7-3b5a-4dea-86c1-93c59420c931/1/PBOPNsCWDYxNY2HnztTBWY5h7Vo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PBOPNsCWDYxNY2HnztTBWY5h7Vo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Aug 2026 22:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:1a:e3:59:c8:55:74:48:5d:eb:88:f4:77:ef:0b:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c138f36c0960d8c4d6361e7ced4c1598e61ed5a
        Validity
            Not Before: Aug 14 11:49:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=573ee83acc562fbdb5d13f4589f97f91041e0cb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:98:9e:4c:c2:74:65:0b:58:f6:df:a2:32:f7:
                    31:b7:d9:c2:07:ba:04:62:8d:e4:e9:6a:69:69:36:
                    8b:ce:da:42:4f:32:a8:e9:8c:be:ff:a0:57:bd:1a:
                    b7:12:f4:42:49:bd:91:1e:57:b5:8a:f2:2b:cd:12:
                    ef:3d:21:5f:a6:79:a7:fa:6e:40:61:eb:7a:56:4a:
                    1c:f8:ed:e8:55:4d:3e:84:c3:55:ea:6b:49:3c:cf:
                    f2:96:bf:38:81:ca:22:28:de:5a:b0:1f:9f:86:b7:
                    8e:e7:e9:e1:96:45:da:36:67:09:1a:09:85:1e:13:
                    44:56:ff:48:dc:12:32:98:ce:67:9d:b2:66:23:18:
                    94:44:b1:67:d4:22:a3:8c:58:29:08:9e:3c:36:57:
                    70:53:02:76:3a:d8:74:4d:0c:ec:e2:aa:01:ca:e7:
                    71:b2:fe:5c:e7:93:b5:04:81:6e:d6:1c:3b:7d:22:
                    5c:4e:60:d1:14:09:6d:39:0f:38:23:9a:a4:5f:25:
                    4c:47:87:9b:ce:ec:07:3e:c3:ef:81:60:06:88:11:
                    3e:8c:0a:e4:0a:f4:35:f0:f3:db:59:25:79:a8:ed:
                    c4:b3:2b:e7:68:37:85:25:a2:ed:5f:59:3e:7f:90:
                    24:b0:f2:94:dc:94:10:f8:a3:b9:d2:67:a1:77:6e:
                    b9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:3E:E8:3A:CC:56:2F:BD:B5:D1:3F:45:89:F9:7F:91:04:1E:0C:B3
            X509v3 Authority Key Identifier:
                keyid:3C:13:8F:36:C0:96:0D:8C:4D:63:61:E7:CE:D4:C1:59:8E:61:ED:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBOPNsCWDYxNY2HnztTBWY5h7Vo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6cc7d7-3b5a-4dea-86c1-93c59420c931/1/Vz7oOsxWL7210T9Fifl_kQQeDLM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6cc7d7-3b5a-4dea-86c1-93c59420c931/1/PBOPNsCWDYxNY2HnztTBWY5h7Vo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211854

    Signature Algorithm: sha256WithRSAEncryption
         08:fc:da:25:ea:cd:92:19:7b:f1:f4:df:7b:7d:0d:ce:e6:cf:
         f2:8c:44:32:2b:14:ad:b2:8e:dc:c1:90:4b:0b:6a:d0:72:79:
         f7:40:75:38:ad:11:85:e5:19:f2:31:98:c9:5b:ae:68:46:ee:
         0b:49:5a:03:7b:e1:e9:68:f6:12:ed:ef:b6:54:2b:4d:cf:b4:
         e0:29:fd:f9:a8:97:c8:72:1d:7f:ed:e3:fc:5b:0b:f1:c8:e4:
         56:2c:91:76:63:04:e0:07:1e:07:e0:7c:37:d6:22:3b:08:16:
         a0:eb:77:23:d6:3b:7b:fe:c3:d2:8d:e2:10:70:cf:36:87:4e:
         23:11:23:0a:df:c0:d4:6f:58:43:9a:7d:78:a7:0f:0f:87:a7:
         b9:51:da:de:50:f4:fe:b0:7d:87:8f:e2:61:22:99:52:ab:75:
         de:de:ca:e0:a1:02:f8:1a:37:7f:68:11:d9:46:01:d9:82:9a:
         14:0d:d7:02:e1:c6:a3:51:64:7d:49:86:3c:d6:28:af:b9:33:
         77:20:d1:a4:cb:18:5c:c3:8a:e0:4f:f6:6b:28:0d:9d:0a:16:
         f1:61:94:3a:83:3d:b4:40:d7:ce:99:ba:c8:40:cc:6e:bc:45:
         a3:53:fc:bc:e9:be:4a:c9:d4:a6:5a:09:04:5b:e5:40:a3:4e:
         af:cb:5a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 06:49:23 2026 by rpki-client