Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/996f02-b725-4813-99b3-859278648112/1/9eXFnyNVv1z9l_5l0cCjnOUm0IQ.asa
File:                     9eXFnyNVv1z9l_5l0cCjnOUm0IQ.asa (raw, json)
Hash identifier:          O3SW1Ooen27jm2tykZ/jobmF95bSbmehJoW3YQKrnuI=
Subject key identifier:   F5:E5:C5:9F:23:55:BF:5C:FD:97:FE:65:D1:C0:A3:9C:E5:26:D0:84
Certificate issuer:       /CN=974e1f8c0aa4bd034beaddb3389bd736ca443ec0
Certificate serial:       01A0534652923F030E17B4A22D69F60A0CDC
Authority key identifier: 97:4E:1F:8C:0A:A4:BD:03:4B:EA:DD:B3:38:9B:D7:36:CA:44:3E:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l04fjAqkvQNL6t2zOJvXNspEPsA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/996f02-b725-4813-99b3-859278648112/1/9eXFnyNVv1z9l_5l0cCjnOUm0IQ.asa
Signing time:             Sun 30 Aug 2026 15:25:12 +0000
ASPA not before:          Sun 30 Aug 2026 15:25:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            199742
Providers:                AS: 30823
                          AS: 42532
                          AS: 49581
                          AS: 58212
                          AS: 62255
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/996f02-b725-4813-99b3-859278648112/1/l04fjAqkvQNL6t2zOJvXNspEPsA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/996f02-b725-4813-99b3-859278648112/1/l04fjAqkvQNL6t2zOJvXNspEPsA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l04fjAqkvQNL6t2zOJvXNspEPsA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 08:15:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:53:46:52:92:3f:03:0e:17:b4:a2:2d:69:f6:0a:0c:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974e1f8c0aa4bd034beaddb3389bd736ca443ec0
        Validity
            Not Before: Aug 30 15:25:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f5e5c59f2355bf5cfd97fe65d1c0a39ce526d084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:05:3b:93:e0:e3:6e:c1:d8:79:bf:1e:37:48:
                    28:ef:49:4c:29:62:e3:09:8b:ea:4a:2d:28:9c:13:
                    b3:cd:64:b3:06:0e:3f:39:5e:97:82:3d:74:90:e7:
                    03:a7:e0:63:25:df:b9:aa:43:2a:fb:2a:1b:78:5c:
                    0a:45:57:a9:7e:37:99:21:47:f0:10:2d:8d:ad:ec:
                    3b:77:1d:76:61:3b:42:fa:a9:76:1f:57:fd:2c:a3:
                    4e:e2:d3:5d:85:17:b3:a1:c5:b3:ea:dc:ed:ae:5b:
                    96:2c:21:bf:9b:f2:f2:eb:4f:ed:d2:5a:f1:d0:3f:
                    21:fc:55:1d:e8:fd:90:9b:ee:84:60:27:59:1d:c5:
                    4f:91:e6:91:64:1f:65:b8:6e:89:d5:d8:51:33:fb:
                    de:3f:77:7a:54:33:d7:47:d9:4a:86:7b:0c:9d:dc:
                    25:00:33:c9:49:09:02:16:b0:75:fd:1a:d0:e2:9f:
                    34:0e:9d:69:1f:eb:bc:70:a0:7d:ed:b5:4d:a8:ff:
                    02:e7:a4:ca:9e:28:80:38:e1:10:fd:f5:b1:bd:5c:
                    99:2a:d2:f4:c1:76:26:06:4a:d8:ed:4f:ba:31:f1:
                    0b:d6:ff:1b:b2:05:d1:5b:c8:f6:08:17:d0:34:7e:
                    6e:fe:e8:34:8d:1a:09:94:40:21:c8:18:c9:9b:80:
                    f5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E5:C5:9F:23:55:BF:5C:FD:97:FE:65:D1:C0:A3:9C:E5:26:D0:84
            X509v3 Authority Key Identifier:
                keyid:97:4E:1F:8C:0A:A4:BD:03:4B:EA:DD:B3:38:9B:D7:36:CA:44:3E:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l04fjAqkvQNL6t2zOJvXNspEPsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/996f02-b725-4813-99b3-859278648112/1/9eXFnyNVv1z9l_5l0cCjnOUm0IQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/996f02-b725-4813-99b3-859278648112/1/l04fjAqkvQNL6t2zOJvXNspEPsA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199742

    Signature Algorithm: sha256WithRSAEncryption
         b2:3a:7d:da:ab:7e:80:40:8f:9b:07:f2:46:6d:bd:d8:78:4b:
         35:79:9d:57:19:49:91:d9:e4:e0:66:45:b7:cb:1d:57:ad:b6:
         e0:04:4e:3b:91:17:af:3a:92:2a:f8:5f:73:d5:e6:95:7d:1e:
         eb:7d:f7:da:bf:a7:e1:b9:ba:25:b0:d2:cb:d6:74:01:87:dc:
         6b:ad:59:2e:f0:2b:4a:bf:af:91:eb:74:78:bd:ab:61:33:4b:
         a8:18:59:34:57:dd:d2:36:1e:7b:19:d1:57:fe:e7:dc:ca:78:
         bb:de:b7:7d:4b:00:8a:ce:b5:b0:22:13:50:43:e9:81:df:f8:
         8b:b4:c9:85:4d:51:5e:41:eb:f7:cb:32:6d:e1:37:4d:17:20:
         9e:80:32:4d:c1:1a:ed:e4:41:d4:5f:13:43:a3:2f:71:10:87:
         8d:cc:15:f6:4c:4b:63:f5:84:e5:3c:14:0f:33:ee:01:ce:c2:
         9e:a4:18:d2:f9:0e:84:b4:c1:b8:55:07:e0:32:06:8c:84:41:
         8a:57:53:ee:a1:39:af:21:97:d9:1f:59:6d:2d:79:aa:c0:e0:
         48:7c:18:9b:6f:15:e6:26:b6:4d:81:de:6b:51:a3:d2:c6:52:
         8b:1e:6a:6e:cb:02:1f:00:6f:d6:d2:31:21:79:14:26:13:27:
         48:6b:74:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:34:36 2026 by rpki-client