Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/awXRcerSAP4jrgOUBQ68Ss0j_JE.asa
File:                     awXRcerSAP4jrgOUBQ68Ss0j_JE.asa (raw, json)
Hash identifier:          7H/s8bfQHFW6k1q0+FHWfKFzwz0TBvvLD09+Qjh3Rf8=
Subject key identifier:   6B:05:D1:71:EA:D2:00:FE:23:AE:03:94:05:0E:BC:4A:CD:23:FC:91
Certificate issuer:       /CN=5fc24743304b7fd9a065d22cd89cda95045e269c
Certificate serial:       019ECC7A647E390239A6838800EC17554E7D
Authority key identifier: 5F:C2:47:43:30:4B:7F:D9:A0:65:D2:2C:D8:9C:DA:95:04:5E:26:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/awXRcerSAP4jrgOUBQ68Ss0j_JE.asa
Signing time:             Mon 15 Jun 2026 18:10:33 +0000
ASPA not before:          Mon 15 Jun 2026 18:10:33 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            201659
Providers:                AS: 2200
                          AS: 16347
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:cc:7a:64:7e:39:02:39:a6:83:88:00:ec:17:55:4e:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fc24743304b7fd9a065d22cd89cda95045e269c
        Validity
            Not Before: Jun 15 18:10:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6b05d171ead200fe23ae0394050ebc4acd23fc91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9c:2e:a1:ab:30:f9:e7:ff:b6:b8:3d:7e:83:
                    73:be:58:4b:49:f8:9a:30:7a:40:97:81:9b:88:3d:
                    ff:92:df:7d:15:73:62:1e:c0:6d:e1:d6:e4:ca:65:
                    a3:ab:b0:c9:82:9f:89:2b:34:47:14:a2:2d:84:13:
                    28:0f:c1:11:5e:7c:d5:a3:8e:59:cc:f8:bd:79:62:
                    0c:fa:9c:2a:6d:7a:bd:ff:84:e7:3a:64:b4:c5:9f:
                    16:2b:8a:19:34:be:9b:01:a2:9f:37:60:f2:96:1c:
                    a5:9e:fc:bc:c7:45:5a:42:b5:90:ac:81:5e:8a:02:
                    1f:42:ae:27:24:ea:f9:99:99:c0:fc:27:c4:7a:d1:
                    e4:55:35:cc:ab:40:e8:2d:93:bc:f5:50:bf:b1:bb:
                    08:b3:47:76:b5:94:42:e6:89:30:fb:51:8b:25:2a:
                    18:82:b8:81:6b:3d:ea:61:89:c4:bb:de:f4:45:2e:
                    35:44:ff:86:07:90:35:7a:f8:26:7b:59:2f:d9:30:
                    2c:0f:78:57:6a:d8:97:96:9b:38:29:a6:99:d7:2d:
                    40:d3:86:b2:4d:06:d0:4e:8f:92:1a:66:cb:83:f9:
                    2d:91:e9:67:06:82:38:16:cb:bc:03:68:1a:80:4a:
                    44:2a:1d:32:d5:b6:98:02:43:2d:90:0c:58:74:7e:
                    fd:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:05:D1:71:EA:D2:00:FE:23:AE:03:94:05:0E:BC:4A:CD:23:FC:91
            X509v3 Authority Key Identifier:
                keyid:5F:C2:47:43:30:4B:7F:D9:A0:65:D2:2C:D8:9C:DA:95:04:5E:26:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/awXRcerSAP4jrgOUBQ68Ss0j_JE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201659

    Signature Algorithm: sha256WithRSAEncryption
         00:85:c8:25:82:37:89:2d:e1:2e:04:a8:df:c8:d3:82:8c:a0:
         e6:40:eb:ae:81:f6:47:a8:28:d8:5d:08:d4:c2:48:cc:8f:0c:
         72:09:43:e8:45:ba:ea:76:4c:95:f7:94:4f:90:23:37:11:88:
         2f:2b:43:7b:7a:4e:d6:50:1c:bf:e1:2d:b2:b7:59:7f:5d:d5:
         0c:fb:a2:8f:6c:f3:cb:4d:1d:ee:4d:d1:7d:c4:53:af:a6:91:
         41:d6:20:c1:0e:37:12:e8:55:97:c0:dc:89:34:9d:6d:ff:31:
         42:e8:d8:95:4f:58:bd:85:bd:95:92:54:df:2f:5c:70:fa:3c:
         b8:21:3c:0f:2a:42:a8:74:76:5e:21:cc:4a:a1:a6:d0:4d:3d:
         5c:57:13:e9:65:e5:7f:4e:01:87:00:67:2d:f5:bd:71:4e:e6:
         18:bb:18:97:b6:d8:79:d9:83:71:25:ee:68:8d:d4:77:d6:95:
         33:42:11:29:35:c3:d2:b1:89:e5:e8:51:f6:fc:fc:c6:f5:c6:
         e4:70:b5:c4:9d:4e:52:59:05:59:49:c2:89:ba:b9:3b:94:01:
         be:47:dc:a1:94:45:d2:cd:09:9c:be:f6:c3:4a:ee:15:e4:1b:
         ae:c5:9a:22:61:b5:f5:0c:43:6c:c6:18:df:e4:54:f7:b9:e8:
         71:e6:4c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 09:33:34 2026 by rpki-client