Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/dH15cbq5Y6Zy8iqzGzlnY9ZG-s8.asa
File:                     dH15cbq5Y6Zy8iqzGzlnY9ZG-s8.asa (raw, json)
Hash identifier:          VBUuhHt9rKOYb0Tn/kVePRp5RzDldrdaMvqER4megYI=
Subject key identifier:   74:7D:79:71:BA:B9:63:A6:72:F2:2A:B3:1B:39:67:63:D6:46:FA:CF
Certificate issuer:       /CN=ff7d173466efbb26d2a119298bb9799a093c3230
Certificate serial:       01A030D173999FB0BDE786C723F83978BEB7
Authority key identifier: FF:7D:17:34:66:EF:BB:26:D2:A1:19:29:8B:B9:79:9A:09:3C:32:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/dH15cbq5Y6Zy8iqzGzlnY9ZG-s8.asa
Signing time:             Sun 23 Aug 2026 22:50:28 +0000
ASPA not before:          Sun 23 Aug 2026 22:50:28 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            212121
Providers:                AS: 15562
                          AS: 29632
                          AS: 41051
                          AS: 58057
                          AS: 199036
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 30 Aug 2026 04:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:30:d1:73:99:9f:b0:bd:e7:86:c7:23:f8:39:78:be:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff7d173466efbb26d2a119298bb9799a093c3230
        Validity
            Not Before: Aug 23 22:50:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=747d7971bab963a672f22ab31b396763d646facf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c2:21:4f:da:88:24:9e:b7:d1:97:9d:29:c4:
                    f7:da:ab:20:64:b3:ca:5e:55:aa:15:f9:25:30:40:
                    04:bf:1b:0a:85:73:5c:5a:d3:26:ee:00:c2:12:d1:
                    ad:e3:b5:e7:b7:e7:7b:ef:53:3f:e3:ff:23:ac:28:
                    b0:1a:69:4d:b3:46:30:58:0e:b3:d4:65:8b:11:c6:
                    ef:42:e7:f7:c6:a4:d3:a8:88:60:29:bb:5b:4e:ba:
                    7a:3e:f1:0e:cd:c3:37:53:22:52:d9:50:23:d3:d7:
                    0a:47:eb:e7:46:8a:8b:7c:43:ec:31:02:fe:19:22:
                    3f:e1:e6:91:b2:71:fd:9d:d7:2f:49:bc:ee:a8:37:
                    3a:ca:b3:48:cf:8e:b1:3e:33:53:31:03:5a:cf:4c:
                    f4:04:d3:25:fb:fb:27:74:7d:5c:f9:2a:68:7b:03:
                    2f:20:e6:f0:e8:03:cf:a8:f8:80:f8:c4:fe:cd:a1:
                    ac:53:3a:24:27:03:d9:73:c6:10:f5:70:ef:a6:05:
                    d6:51:9d:76:a5:f0:ec:16:5d:4f:e0:b2:7e:67:93:
                    81:51:80:a7:77:1d:6c:d4:bd:a8:05:6f:67:05:ef:
                    98:64:44:35:8e:71:37:ce:35:01:2b:06:e3:33:8a:
                    53:a8:99:99:ad:3d:ed:38:8d:56:ad:4f:4b:eb:c9:
                    75:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:7D:79:71:BA:B9:63:A6:72:F2:2A:B3:1B:39:67:63:D6:46:FA:CF
            X509v3 Authority Key Identifier:
                keyid:FF:7D:17:34:66:EF:BB:26:D2:A1:19:29:8B:B9:79:9A:09:3C:32:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/dH15cbq5Y6Zy8iqzGzlnY9ZG-s8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212121

    Signature Algorithm: sha256WithRSAEncryption
         61:9c:dc:48:59:7c:4e:eb:bb:9c:1f:eb:8d:13:82:d6:5d:ef:
         28:4b:8f:65:f7:14:66:6a:a3:98:5e:2e:3b:23:d8:a3:58:c3:
         d1:e7:5d:18:70:1b:e9:e5:a4:8f:61:9f:d6:03:13:ab:09:ce:
         44:92:26:22:35:17:54:6e:8f:cf:79:f2:55:d7:a1:6f:83:58:
         85:c0:2c:8c:e6:3a:a3:90:ec:12:47:d9:32:d7:80:b0:c7:93:
         cf:4d:6e:75:0d:1b:09:0b:bc:34:75:33:fb:1a:58:4f:6d:b6:
         5a:fc:25:3f:2d:0a:79:ae:0c:97:05:15:22:bc:e0:d9:8e:22:
         ec:ba:cc:e5:75:43:e2:d4:bb:b0:e7:8a:3b:6f:1b:2d:e0:bf:
         c2:f3:fb:25:39:6a:81:76:00:48:be:73:94:ae:ad:a6:e7:5c:
         61:18:8f:1a:44:fc:d0:a6:f1:3a:e0:2b:fa:91:10:08:28:fd:
         43:60:39:7b:a2:b2:46:5a:fd:2b:96:57:d6:d2:7b:af:60:c2:
         16:bf:a0:21:50:1b:92:b9:a6:9c:8d:7e:f3:71:8f:bf:75:48:
         8e:e7:ea:f4:25:43:91:fe:b5:eb:36:51:bc:a1:29:65:a0:bb:
         c3:e9:69:9b:b5:86:61:67:6e:5a:95:18:d4:63:0f:83:98:63:
         e5:30:97:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 13:43:00 2026 by rpki-client