Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/2GXp3bAaWM3wTgvjV8eCwVFexe4.asa
File:                     2GXp3bAaWM3wTgvjV8eCwVFexe4.asa (raw, json)
Hash identifier:          hZQJ0WbwmhsDuDCzZWaSBDjdh67b2hIGAFsSqcCCZZ8=
Subject key identifier:   D8:65:E9:DD:B0:1A:58:CD:F0:4E:0B:E3:57:C7:82:C1:51:5E:C5:EE
Certificate issuer:       /CN=5e9b9bed8f8d3d579bb0552e4fc4b81986861e64
Certificate serial:       019FACB868ED6230C17BA2DA143C0957C055
Authority key identifier: 5E:9B:9B:ED:8F:8D:3D:57:9B:B0:55:2E:4F:C4:B8:19:86:86:1E:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/2GXp3bAaWM3wTgvjV8eCwVFexe4.asa
Signing time:             Wed 29 Jul 2026 07:13:14 +0000
ASPA not before:          Wed 29 Jul 2026 07:13:14 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            24836
Providers:                AS: 12348
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 22:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:b8:68:ed:62:30:c1:7b:a2:da:14:3c:09:57:c0:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9b9bed8f8d3d579bb0552e4fc4b81986861e64
        Validity
            Not Before: Jul 29 07:13:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d865e9ddb01a58cdf04e0be357c782c1515ec5ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1f:e6:13:7e:e1:06:65:c9:56:7e:aa:58:53:
                    b3:6f:15:9a:17:79:98:4f:b8:2e:d2:03:83:b5:30:
                    d7:99:7e:b1:3b:68:22:56:03:95:e4:13:01:07:49:
                    2e:f5:52:dd:7e:ad:0d:87:4a:f4:c0:10:d7:06:bc:
                    d2:b6:db:d8:1e:89:5b:52:74:2a:50:5e:1d:3c:95:
                    17:41:0f:a0:43:57:6e:bc:cb:da:4f:71:31:27:6f:
                    ea:d4:76:ed:ac:58:2f:03:fe:58:c2:59:cb:f9:38:
                    d7:d7:a5:24:4d:4e:7b:93:fb:88:81:ac:d0:db:b1:
                    c3:80:eb:5b:0f:19:6a:76:ff:3d:b3:91:76:dc:05:
                    18:a2:bf:56:69:5f:b9:b6:18:c3:1b:fe:1b:3b:88:
                    7b:bc:66:5a:87:9f:69:a6:52:fb:35:dc:8c:dd:95:
                    af:98:5c:20:9a:c4:ea:d6:b6:d6:ba:7d:b8:b3:5c:
                    25:37:5b:a5:27:85:fc:92:8b:33:06:3f:d0:77:69:
                    81:1d:af:4b:28:c0:66:67:dd:ce:de:82:0f:c4:42:
                    40:5b:be:1c:1e:9a:fe:12:5f:c1:00:09:9f:1d:9b:
                    e9:e4:03:f2:89:2b:48:81:03:86:0b:ac:74:0b:3e:
                    93:07:ae:58:08:ad:dc:fa:76:d1:c9:1a:f6:55:a3:
                    af:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:65:E9:DD:B0:1A:58:CD:F0:4E:0B:E3:57:C7:82:C1:51:5E:C5:EE
            X509v3 Authority Key Identifier:
                keyid:5E:9B:9B:ED:8F:8D:3D:57:9B:B0:55:2E:4F:C4:B8:19:86:86:1E:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/2GXp3bAaWM3wTgvjV8eCwVFexe4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  24836

    Signature Algorithm: sha256WithRSAEncryption
         3f:c0:3b:3e:49:35:05:a6:b0:93:dd:84:d8:8c:5b:bd:8c:f5:
         52:94:a5:2a:04:ac:c2:13:26:fa:45:86:2c:17:3a:66:02:99:
         39:c3:d7:c5:90:f8:e1:9c:7e:d9:69:d6:34:ed:c5:51:d4:7f:
         d3:43:80:58:53:e1:66:ea:ad:cd:d1:00:a4:79:56:39:58:c8:
         da:2b:50:04:45:e4:30:87:0e:7a:b2:8d:81:71:a8:88:ea:1a:
         a2:81:31:84:83:fd:f6:02:fa:7c:85:63:d3:03:38:0f:3a:a5:
         63:46:d7:d3:98:a1:b7:b8:6d:f3:da:61:dc:a4:9d:24:ab:9b:
         38:6e:86:f9:52:a4:87:3d:9c:d4:b7:46:55:f8:da:9c:14:aa:
         b4:a5:98:bf:4c:07:03:81:d7:5e:29:7b:ac:67:fa:7f:05:23:
         d4:56:81:f4:51:25:34:05:d4:ac:52:bb:1d:f1:d9:c3:8e:45:
         9e:a8:6c:a3:3e:94:97:6d:b3:52:9e:4b:2c:b8:3e:82:24:3a:
         8b:bb:59:38:ee:1e:c2:41:0a:25:f8:75:89:03:b8:d4:23:e0:
         42:0d:85:95:70:14:5f:fd:73:2e:84:c4:fa:90:dd:0b:c8:0c:
         24:6e:83:03:e9:39:9d:e7:49:16:ff:bf:5c:e9:ef:c1:9f:ee:
         ad:b3:20:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:45:32 2026 by rpki-client