Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/C7UE1TukEx66P-DCQUS-cUpN8ug.asa
File:                     C7UE1TukEx66P-DCQUS-cUpN8ug.asa (raw, json)
Hash identifier:          c1XB54snVdAnFRI7kv38xXNUYptuN9rQkHiA3PIOJME=
Subject key identifier:   0B:B5:04:D5:3B:A4:13:1E:BA:3F:E0:C2:41:44:BE:71:4A:4D:F2:E8
Certificate issuer:       /CN=51306f5f46dbdb4136042a2be38d05d222a7c761
Certificate serial:       019F0FE24A9D5E54A7FF0F0C88AE597ED172
Authority key identifier: 51:30:6F:5F:46:DB:DB:41:36:04:2A:2B:E3:8D:05:D2:22:A7:C7:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UTBvX0bb20E2BCor440F0iKnx2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/C7UE1TukEx66P-DCQUS-cUpN8ug.asa
Signing time:             Sun 28 Jun 2026 20:18:36 +0000
ASPA not before:          Sun 28 Jun 2026 20:18:36 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            211585
Providers:                AS: 41051
                          AS: 47272
                          AS: 209533
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UTBvX0bb20E2BCor440F0iKnx2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:0f:e2:4a:9d:5e:54:a7:ff:0f:0c:88:ae:59:7e:d1:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51306f5f46dbdb4136042a2be38d05d222a7c761
        Validity
            Not Before: Jun 28 20:18:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0bb504d53ba4131eba3fe0c24144be714a4df2e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c1:a9:1e:07:4d:c7:cf:1e:f8:d2:c5:18:1a:
                    06:b3:97:7f:ad:dd:81:ac:10:7b:17:b6:2c:6a:32:
                    8f:8f:c9:35:1c:c6:07:49:ac:e0:6b:06:50:3a:22:
                    24:d8:d1:f0:e1:0c:22:9e:19:ec:8e:f2:bd:b2:53:
                    e0:65:5c:5d:64:ab:ae:a8:b3:a3:37:75:3b:50:db:
                    43:54:4d:1e:47:07:ab:0a:2d:4a:da:56:86:a5:46:
                    c5:07:f4:dd:96:48:9a:f7:7b:9f:be:23:6d:a9:bb:
                    b3:8d:35:9c:2e:91:1f:a6:fd:7e:a9:ca:ae:31:ea:
                    7d:7b:f3:d8:63:08:fc:c4:82:73:d7:f0:0f:d3:67:
                    ba:29:1c:dc:22:5a:de:4e:31:bf:93:07:4e:ce:aa:
                    22:92:b6:7d:6b:9e:1c:17:71:08:54:38:be:3b:13:
                    d2:77:ef:a5:6f:52:03:02:b7:25:b5:28:de:f6:ad:
                    c3:4f:c6:44:a9:99:c2:eb:8c:04:c2:28:34:a3:04:
                    7c:cd:ad:bb:b4:88:d6:68:6c:12:8a:fc:41:29:dd:
                    b2:bf:d9:cd:a5:3f:6a:c6:13:f4:a5:c2:02:06:6e:
                    de:29:8d:cc:e4:c2:28:0d:72:1a:38:c0:85:98:75:
                    be:37:a4:6e:d6:dc:74:9e:e6:f9:2a:60:93:48:7b:
                    63:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B5:04:D5:3B:A4:13:1E:BA:3F:E0:C2:41:44:BE:71:4A:4D:F2:E8
            X509v3 Authority Key Identifier:
                keyid:51:30:6F:5F:46:DB:DB:41:36:04:2A:2B:E3:8D:05:D2:22:A7:C7:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTBvX0bb20E2BCor440F0iKnx2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/C7UE1TukEx66P-DCQUS-cUpN8ug.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211585

    Signature Algorithm: sha256WithRSAEncryption
         01:67:11:3f:ef:d2:fd:2f:02:32:9e:86:b2:c9:70:0d:93:07:
         70:df:ac:19:4f:12:29:a4:07:5b:b2:af:9a:04:7b:57:e0:c2:
         97:b4:8a:a9:71:f3:ef:b0:2d:75:39:04:f7:9a:0e:1f:15:3c:
         0d:4f:ae:76:ba:bf:f9:b3:f5:90:d4:88:8f:09:1b:57:e0:e1:
         5f:08:5b:6e:d1:15:f9:74:cb:6c:18:1a:f5:8d:44:d2:53:9e:
         05:e4:28:e7:bb:cd:58:65:9d:c5:de:40:3a:bd:db:12:a7:22:
         cd:78:0e:ca:84:a2:dc:d2:04:0f:a9:be:e6:ca:1f:0c:6c:3c:
         56:a1:81:fd:28:88:88:61:62:0e:28:a0:32:5b:9a:23:68:00:
         1d:d0:77:90:79:5b:fb:ca:b7:f9:04:53:dd:44:48:af:42:6d:
         20:d7:8d:58:c8:4b:c2:bb:14:b7:9b:c6:59:9b:71:6f:f2:e1:
         a4:53:c8:80:5b:c0:99:d3:07:9d:a1:7b:a3:23:fd:b0:b1:fd:
         d1:cb:37:f9:18:fe:90:cc:30:c7:0f:a7:b1:41:52:71:69:7b:
         9a:55:85:8c:3f:af:fb:f3:97:b6:c5:92:2e:14:59:03:85:16:
         b5:c4:2e:2f:ac:03:ee:8a:aa:20:9f:53:a6:73:32:95:35:49:
         7f:41:0b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 09:33:20 2026 by rpki-client