Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/hzlvDuEik5KewUtPDqrBpdd0iR4.asa
File:                     hzlvDuEik5KewUtPDqrBpdd0iR4.asa (raw, json)
Hash identifier:          78MMyEGGhYv2n8lAIMHN69jmN3Yqiu304UwiKvSAC60=
Subject key identifier:   87:39:6F:0E:E1:22:93:92:9E:C1:4B:4F:0E:AA:C1:A5:D7:74:89:1E
Certificate issuer:       /CN=daca83eb1faf9773d350c7dce612ca281484e7fc
Certificate serial:       019DD4263D9014FFFFDA01F8E387B738C80B
Authority key identifier: DA:CA:83:EB:1F:AF:97:73:D3:50:C7:DC:E6:12:CA:28:14:84:E7:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2sqD6x-vl3PTUMfc5hLKKBSE5_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/hzlvDuEik5KewUtPDqrBpdd0iR4.asa
Signing time:             Tue 28 Apr 2026 12:52:49 +0000
ASPA not before:          Tue 28 Apr 2026 12:52:49 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            204150
Providers:                AS: 11967
                          AS: 39392
                          AS: 47272
                          AS: 199829
                          AS: 201541
                          AS: 212895
                          AS: 214693
                          AS: 215353
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2sqD6x-vl3PTUMfc5hLKKBSE5_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:d4:26:3d:90:14:ff:ff:da:01:f8:e3:87:b7:38:c8:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daca83eb1faf9773d350c7dce612ca281484e7fc
        Validity
            Not Before: Apr 28 12:52:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=87396f0ee12293929ec14b4f0eaac1a5d774891e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:78:b3:a2:0d:c0:a5:dd:d9:40:c8:c0:8d:12:
                    7f:5f:58:8d:17:da:24:90:a1:1a:da:30:d3:74:59:
                    49:83:30:8c:97:b0:d6:98:2c:c5:a0:0a:3b:b0:b1:
                    36:4b:6d:9f:0c:8b:6d:e2:91:86:0a:c3:7b:d9:df:
                    1f:16:a3:c0:98:40:f8:01:74:5b:ff:a6:b8:99:cb:
                    ef:f9:da:25:f9:4f:58:ff:fd:9a:a8:0a:10:97:67:
                    96:ca:9b:3b:6a:08:4c:c6:02:be:eb:06:ed:99:0e:
                    cd:b7:e2:eb:ed:0d:40:96:31:f7:86:dc:6a:f2:ab:
                    52:2a:fd:51:5c:46:79:c8:f5:6b:2e:51:45:31:7f:
                    29:91:a8:b1:20:88:4a:97:cb:20:06:1a:45:f0:ef:
                    b8:36:86:70:0e:4c:93:2f:3b:60:d6:17:bb:4a:cf:
                    a1:cb:41:9d:52:bd:25:a4:04:63:56:e6:a1:24:c8:
                    af:4f:86:7e:3b:2b:6f:b5:24:ac:89:7c:81:35:7f:
                    09:00:ee:0c:7b:84:8a:b8:d3:a3:eb:2a:08:eb:c0:
                    fe:82:00:37:c3:5e:f4:20:d4:27:7b:76:00:3c:57:
                    41:2f:9c:23:1c:f8:70:78:25:ef:66:c5:5c:c2:b6:
                    4d:bf:72:86:19:ec:62:e6:7c:f1:4e:7a:4b:7f:a7:
                    75:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:39:6F:0E:E1:22:93:92:9E:C1:4B:4F:0E:AA:C1:A5:D7:74:89:1E
            X509v3 Authority Key Identifier:
                keyid:DA:CA:83:EB:1F:AF:97:73:D3:50:C7:DC:E6:12:CA:28:14:84:E7:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sqD6x-vl3PTUMfc5hLKKBSE5_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/hzlvDuEik5KewUtPDqrBpdd0iR4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204150

    Signature Algorithm: sha256WithRSAEncryption
         6d:33:6f:5e:f7:c4:39:0c:49:e2:6e:df:77:62:52:d5:8a:29:
         57:b0:d5:8e:9b:a2:86:4a:9c:4a:f5:e4:6e:7f:aa:65:13:1c:
         4b:5c:2b:8e:4e:52:a2:ab:a2:0d:3c:16:00:64:8a:7e:91:12:
         84:0b:b3:84:55:22:3f:99:9d:3a:f7:fd:d7:4a:3d:76:a7:1b:
         18:44:db:ab:f4:46:b0:c0:10:95:77:4e:75:2b:51:18:1e:9b:
         f2:d8:3b:d5:be:16:f9:b2:61:9d:9b:59:51:4a:a7:50:64:f1:
         f0:ea:b8:df:a2:29:a5:e7:6a:dc:44:a7:d7:a7:17:74:7b:5d:
         84:62:ac:11:43:44:5c:78:91:c2:25:e0:bf:db:e9:9b:07:4f:
         1c:fa:74:d3:84:de:c2:e6:4c:38:ca:e9:6d:fa:aa:ed:39:3c:
         21:dd:57:cc:10:23:c2:1c:b7:52:e0:2e:f8:0f:cc:10:cd:2c:
         48:ef:90:a3:b5:83:f8:4e:94:b2:f1:27:ce:17:8d:a1:d2:bb:
         bc:df:08:c4:14:2f:a2:85:bc:e8:8c:07:15:84:a2:44:0a:83:
         0d:bb:f2:d7:2f:24:74:89:a4:ed:b7:0d:15:ac:81:25:91:80:
         9e:43:e4:34:90:bb:08:45:f6:49:f2:a4:33:09:3a:25:2d:39:
         31:79:ab:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 11:56:55 2026 by rpki-client