Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/UsS6n1K71nl0Lh6BAnFQ8lHnMqI.asa
File:                     UsS6n1K71nl0Lh6BAnFQ8lHnMqI.asa (raw, json)
Hash identifier:          J5Nt80Z8FdamdVnoP+6gxOKMw5uY55OOjhEU5/92KAs=
Subject key identifier:   52:C4:BA:9F:52:BB:D6:79:74:2E:1E:81:02:71:50:F2:51:E7:32:A2
Certificate issuer:       /CN=723335b0507554ae6c6cc294750764cafd0bd688
Certificate serial:       01A000AC9DA9F0D7DA3A9C3F3CDDDCE3ACFB
Authority key identifier: 72:33:35:B0:50:75:54:AE:6C:6C:C2:94:75:07:64:CA:FD:0B:D6:88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cjM1sFB1VK5sbMKUdQdkyv0L1og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/UsS6n1K71nl0Lh6BAnFQ8lHnMqI.asa
Signing time:             Fri 14 Aug 2026 14:28:27 +0000
ASPA not before:          Fri 14 Aug 2026 14:28:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            208790
Providers:                AS: 50338
                          AS: 209533
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cjM1sFB1VK5sbMKUdQdkyv0L1og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 14:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:ac:9d:a9:f0:d7:da:3a:9c:3f:3c:dd:dc:e3:ac:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=723335b0507554ae6c6cc294750764cafd0bd688
        Validity
            Not Before: Aug 14 14:28:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=52c4ba9f52bbd679742e1e81027150f251e732a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e7:6d:c2:c2:3b:7c:c6:5c:85:eb:41:6e:5f:
                    b3:33:7b:8c:11:19:7e:dc:1e:34:ac:cb:6c:bd:78:
                    93:21:18:f5:9b:f6:3e:6f:c3:8a:aa:6f:a0:e5:8f:
                    f1:33:74:8b:9c:10:43:72:24:b8:f4:2c:97:95:df:
                    00:f3:5d:ec:ca:e3:28:05:97:90:de:50:c7:98:68:
                    60:be:97:79:7e:90:5a:03:af:8d:e2:2b:bb:0b:19:
                    06:84:74:a7:c5:02:8a:5f:d5:61:d7:4a:2f:12:8a:
                    6d:6e:2e:82:99:eb:c6:aa:a9:82:e4:85:fb:44:69:
                    ab:c1:3e:2a:8d:01:a5:75:ab:32:d3:18:87:67:59:
                    51:47:c7:ae:c5:c1:b6:58:a3:05:93:15:d3:7c:ff:
                    00:c4:0f:3e:bb:15:5f:27:a0:0d:b4:30:99:87:12:
                    4a:36:23:0e:d9:09:f7:7f:f0:53:22:60:cb:29:26:
                    ed:81:38:85:b9:4e:02:d0:86:29:d7:45:5e:c7:30:
                    46:a9:93:29:3e:a0:fd:0e:ad:5d:48:50:35:6c:de:
                    81:d4:24:7e:ba:87:4e:37:d6:4a:69:6c:4e:94:28:
                    8a:c1:a6:ee:aa:3e:40:22:81:57:75:76:0c:9d:21:
                    80:b9:dc:db:6f:1c:d1:41:3d:22:d1:00:64:a3:87:
                    5f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:C4:BA:9F:52:BB:D6:79:74:2E:1E:81:02:71:50:F2:51:E7:32:A2
            X509v3 Authority Key Identifier:
                keyid:72:33:35:B0:50:75:54:AE:6C:6C:C2:94:75:07:64:CA:FD:0B:D6:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cjM1sFB1VK5sbMKUdQdkyv0L1og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/UsS6n1K71nl0Lh6BAnFQ8lHnMqI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208790

    Signature Algorithm: sha256WithRSAEncryption
         54:52:b6:1a:b4:9a:da:2f:79:3a:d1:83:8f:3e:7a:4f:9e:77:
         64:8a:9c:2c:9d:e4:6d:0e:3e:9b:3f:db:9f:d2:c4:e5:f0:b2:
         dc:2f:4e:5f:46:e6:af:ec:d3:b5:09:da:16:54:b9:a7:65:f3:
         db:92:0f:f9:30:94:e9:4a:b2:b6:4d:d9:ed:12:6a:ba:7c:99:
         e0:b6:40:2c:40:34:d0:5e:77:1d:0f:dc:04:42:b2:41:86:d7:
         0b:1e:4c:81:f3:6e:de:09:4f:f0:d7:da:29:d1:b2:0a:f9:59:
         36:8c:19:0c:55:2c:a5:63:60:c1:38:50:ec:77:fb:52:d8:b4:
         50:6a:af:aa:79:23:1e:29:be:65:62:37:29:4b:44:1b:ad:80:
         a7:a0:11:7a:ae:d4:fd:4c:22:d8:0b:de:52:c1:c0:d6:f9:70:
         ea:6f:71:6b:57:c6:ae:07:7a:c4:cd:27:4a:52:1a:96:57:51:
         fd:6c:ac:fb:82:7b:f5:f6:a5:7e:c7:29:f8:aa:f5:af:f5:b3:
         88:3e:b2:64:e2:9d:60:79:65:ec:cb:8b:ac:4f:fe:b8:6d:bf:
         0a:27:9f:95:ba:fa:0d:4b:98:e6:7b:87:02:cf:f2:2d:4a:bb:
         86:8e:13:42:3e:23:d7:6f:f2:10:c2:ab:be:07:c1:72:bd:d2:
         ee:a0:49:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:38 2026 by rpki-client