Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/Q1lmJ-pOH8Zlev_WBTLT_II-SzM.asa
File:                     Q1lmJ-pOH8Zlev_WBTLT_II-SzM.asa (raw, json)
Hash identifier:          XpylMLX06y98WuOlXUOZt6B7EKHaAeUMsRTKgHzZXVU=
Subject key identifier:   43:59:66:27:EA:4E:1F:C6:65:7A:FF:D6:05:32:D3:FC:82:3E:4B:33
Certificate issuer:       /CN=c27964aabf404dda3f5e0ecc1c706ab327c6f931
Certificate serial:       019FD268DCDC1CC2CF11DA8582DB019D300D
Authority key identifier: C2:79:64:AA:BF:40:4D:DA:3F:5E:0E:CC:1C:70:6A:B3:27:C6:F9:31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/Q1lmJ-pOH8Zlev_WBTLT_II-SzM.asa
Signing time:             Wed 05 Aug 2026 14:51:55 +0000
ASPA not before:          Wed 05 Aug 2026 14:51:55 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            201494
Providers:                AS: 6762
                          AS: 56910
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:d2:68:dc:dc:1c:c2:cf:11:da:85:82:db:01:9d:30:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c27964aabf404dda3f5e0ecc1c706ab327c6f931
        Validity
            Not Before: Aug  5 14:51:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=43596627ea4e1fc6657affd60532d3fc823e4b33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5e:f7:c7:02:8e:a7:2f:40:3f:0d:af:6e:50:
                    1e:98:89:4b:84:1a:b1:46:73:86:ce:9b:39:cf:5d:
                    ac:44:e6:32:c3:00:4a:f0:9c:74:0c:7f:e2:1f:5a:
                    a9:40:b3:77:dd:8c:3d:cc:4c:38:e3:d6:8e:f3:a4:
                    0b:06:68:ac:78:65:1c:81:36:ab:30:8b:fa:ce:b9:
                    3d:da:48:46:a7:df:37:3b:0a:b5:d4:ba:93:7c:dc:
                    6d:b3:12:e5:43:b8:53:f4:73:d4:55:d3:3a:37:0e:
                    89:d4:f5:b7:ae:e5:fc:d6:fb:09:c1:60:43:e6:75:
                    ff:7a:a8:71:9a:f9:8d:8e:26:11:25:29:da:8d:5f:
                    38:fe:1a:42:11:8e:b7:48:ea:68:f1:d6:cc:c5:99:
                    2f:1c:66:8b:55:94:ed:bd:5f:99:4e:64:1d:6b:0f:
                    4f:5f:7b:bc:1d:ee:da:58:c6:43:1b:31:b4:42:31:
                    17:94:57:99:fe:79:90:9d:59:0b:64:90:7f:fb:e1:
                    72:26:98:c9:61:01:6e:73:f8:ef:a3:7f:a9:07:05:
                    85:f7:b8:1a:b2:1c:89:a0:bf:ca:ae:01:84:86:4a:
                    3e:54:73:4b:78:e9:3c:85:c0:60:99:53:c8:6c:cd:
                    20:cd:e6:05:a5:10:29:88:ae:6f:0e:f1:c0:b9:15:
                    a2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:59:66:27:EA:4E:1F:C6:65:7A:FF:D6:05:32:D3:FC:82:3E:4B:33
            X509v3 Authority Key Identifier:
                keyid:C2:79:64:AA:BF:40:4D:DA:3F:5E:0E:CC:1C:70:6A:B3:27:C6:F9:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/Q1lmJ-pOH8Zlev_WBTLT_II-SzM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201494

    Signature Algorithm: sha256WithRSAEncryption
         9c:81:c4:cb:90:bb:a6:e2:08:ec:16:54:39:66:37:e8:04:fc:
         46:71:21:20:fb:66:59:c4:b3:4d:0f:dc:0b:64:f4:8e:a4:f6:
         12:7e:cf:73:7e:04:ff:e4:a8:32:7a:55:e6:4b:b7:8f:7f:57:
         74:1c:5a:b9:37:fa:e3:99:68:89:1b:c0:0e:07:06:6b:1b:fb:
         10:9e:9e:88:16:bd:73:fa:fa:44:28:76:62:31:10:96:44:7d:
         5b:ec:83:a4:05:bd:08:d4:e7:6f:d2:bf:f0:f7:ac:07:44:cd:
         b1:63:e2:b4:4c:d0:99:0e:00:fc:0e:cc:32:bc:0f:bf:26:43:
         d4:a1:7e:81:3c:cd:c7:b1:f6:6e:48:78:d0:90:75:a0:ef:04:
         09:6e:c8:79:41:1b:ed:30:45:67:f5:ca:e4:1a:67:99:a7:5f:
         d4:d4:ce:18:1a:15:28:f2:29:6b:d3:c2:fe:a3:da:21:6f:04:
         af:7e:72:33:20:6c:7c:bf:98:db:36:f6:fe:04:ec:19:d3:61:
         f0:6e:db:4f:a4:82:9d:6b:30:85:84:7a:10:46:09:78:cd:c2:
         10:2b:32:a3:9a:b3:d1:80:bf:e5:4f:7d:3f:5c:19:1b:9a:98:
         59:ea:d6:f5:d4:a0:9c:da:b8:52:1c:66:d3:11:cb:9d:d2:17:
         94:d4:85:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:49:43 2026 by rpki-client