Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/AUt5aEe9I9r-_yYGhcti899JX80.asa
File:                     AUt5aEe9I9r-_yYGhcti899JX80.asa (raw, json)
Hash identifier:          W9/s7qsjqgi329110nptyxROIVauh37lCo9hMcGLc8E=
Subject key identifier:   01:4B:79:68:47:BD:23:DA:FE:FF:26:06:85:CB:62:F3:DF:49:5F:CD
Certificate issuer:       /CN=9bba51cae7a5974ac7cf857434b71f8a5f664b07
Certificate serial:       019FEA55ACBE223CF671F2929E5491115F3F
Authority key identifier: 9B:BA:51:CA:E7:A5:97:4A:C7:CF:85:74:34:B7:1F:8A:5F:66:4B:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m7pRyuell0rHz4V0NLcfil9mSwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/AUt5aEe9I9r-_yYGhcti899JX80.asa
Signing time:             Mon 10 Aug 2026 06:21:51 +0000
ASPA not before:          Mon 10 Aug 2026 06:21:51 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214072
Providers:                AS: 8778
                          AS: 29405
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/m7pRyuell0rHz4V0NLcfil9mSwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/m7pRyuell0rHz4V0NLcfil9mSwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m7pRyuell0rHz4V0NLcfil9mSwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 21:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ea:55:ac:be:22:3c:f6:71:f2:92:9e:54:91:11:5f:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bba51cae7a5974ac7cf857434b71f8a5f664b07
        Validity
            Not Before: Aug 10 06:21:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=014b796847bd23dafeff260685cb62f3df495fcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7a:27:54:fc:a6:9f:c2:dd:53:30:51:14:80:
                    09:21:e2:34:27:33:01:e5:18:e8:2a:87:5d:d1:b2:
                    1b:75:de:91:61:e2:b8:dc:99:db:c5:78:c7:4b:39:
                    03:d4:ca:75:19:36:17:19:c7:a6:f9:de:e2:4e:48:
                    12:b1:bd:dc:5d:18:de:8d:be:3f:cb:a4:c1:86:a8:
                    24:be:fe:29:5d:3f:40:3d:7f:93:4e:6c:b0:e5:b6:
                    e5:a0:e6:50:7b:c2:ce:f4:ef:2e:29:1a:44:bc:ee:
                    0b:06:d1:32:97:39:e5:fe:cc:f7:3e:e5:a3:0b:1e:
                    65:b0:78:fe:ea:c5:29:f1:6b:b1:7c:65:ec:8f:22:
                    41:3d:ca:de:63:97:fc:44:2e:f2:66:a4:e1:14:8b:
                    53:5b:5f:18:4e:67:c3:96:eb:23:09:64:12:7b:8b:
                    21:6d:89:a5:f4:db:e1:f0:6e:bc:90:39:f6:4f:7e:
                    8d:04:1e:c2:42:c6:52:75:90:ae:92:f2:f6:d2:30:
                    14:3e:45:59:5b:82:b7:05:02:41:f8:22:ea:14:90:
                    38:4c:7e:df:ae:ac:22:e4:40:f8:b9:f6:f6:5d:2c:
                    fd:5f:99:ec:e0:b9:cb:cf:9d:76:e4:1e:7d:e1:e7:
                    48:89:b9:f8:1d:b4:1c:92:3a:5b:40:9f:68:01:c0:
                    11:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:4B:79:68:47:BD:23:DA:FE:FF:26:06:85:CB:62:F3:DF:49:5F:CD
            X509v3 Authority Key Identifier:
                keyid:9B:BA:51:CA:E7:A5:97:4A:C7:CF:85:74:34:B7:1F:8A:5F:66:4B:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7pRyuell0rHz4V0NLcfil9mSwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/AUt5aEe9I9r-_yYGhcti899JX80.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/m7pRyuell0rHz4V0NLcfil9mSwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214072

    Signature Algorithm: sha256WithRSAEncryption
         8c:5a:f9:b5:62:22:ca:bd:20:36:c6:86:05:7d:72:ee:47:2d:
         2d:d9:4c:0e:b7:12:c2:5d:08:bb:07:3d:50:61:94:ab:c5:7b:
         ec:45:ce:e0:54:f9:c5:05:73:bc:89:81:a5:84:46:85:67:13:
         d9:fa:5e:0d:5f:f4:4e:dd:cf:fe:e7:9d:dc:23:dc:66:b5:7d:
         0a:ec:4b:c0:d9:bb:8e:c0:22:c7:c9:83:06:7d:0a:96:da:fd:
         98:64:a9:7b:e5:3a:60:0e:a9:19:7b:ef:54:4b:42:76:eb:d1:
         d8:53:ac:61:ad:3b:5c:16:b2:2a:c2:fd:f6:5d:79:15:e5:1b:
         b3:40:0a:f1:f7:d2:a1:f3:eb:68:6d:8d:09:07:72:e0:71:6b:
         c2:f4:49:0f:e6:5e:1d:ca:c3:3d:22:90:ff:d7:59:b6:76:01:
         c1:0d:22:5a:bf:67:bb:ba:fe:32:c0:d7:d4:af:36:67:55:8f:
         49:bd:30:d7:2d:11:77:60:6b:b9:51:94:e5:4f:6b:bf:93:4c:
         c1:d8:01:23:ab:a0:32:95:e5:d8:95:96:53:9c:ce:9a:93:06:
         bc:4d:88:e1:1c:8d:32:f4:d0:f3:e0:9a:63:82:f3:ff:af:a7:
         73:a0:9f:98:f4:a5:e9:66:2d:84:cb:04:1f:31:56:58:1a:ff:
         6b:27:b9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:50:40 2026 by rpki-client