Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/Yo8vYPryUnuVJotyGpiBSmoKzeY.asa
File:                     Yo8vYPryUnuVJotyGpiBSmoKzeY.asa (raw, json)
Hash identifier:          ZYZGB8hDEmnzNSAscPvCGLkXXklvXiM5op3rNA3iy7k=
Subject key identifier:   62:8F:2F:60:FA:F2:52:7B:95:26:8B:72:1A:98:81:4A:6A:0A:CD:E6
Certificate issuer:       /CN=51306f5f46dbdb4136042a2be38d05d222a7c761
Certificate serial:       01A04F4B56A0C67A320703CDB9679748134B
Authority key identifier: 51:30:6F:5F:46:DB:DB:41:36:04:2A:2B:E3:8D:05:D2:22:A7:C7:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UTBvX0bb20E2BCor440F0iKnx2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/Yo8vYPryUnuVJotyGpiBSmoKzeY.asa
Signing time:             Sat 29 Aug 2026 20:52:12 +0000
ASPA not before:          Sat 29 Aug 2026 20:52:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            211585
Providers:                AS: 7377
                          AS: 31898
                          AS: 41051
                          AS: 47272
                          AS: 209533
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UTBvX0bb20E2BCor440F0iKnx2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Sep 2026 21:04:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:4f:4b:56:a0:c6:7a:32:07:03:cd:b9:67:97:48:13:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51306f5f46dbdb4136042a2be38d05d222a7c761
        Validity
            Not Before: Aug 29 20:52:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=628f2f60faf2527b95268b721a98814a6a0acde6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d9:84:80:13:5d:ff:1b:a4:e2:bb:87:e9:be:
                    2d:cb:20:ed:16:6c:05:c0:bf:54:cf:e2:3c:e2:7e:
                    b1:78:b5:2e:fe:71:95:8a:a2:32:ea:16:14:95:19:
                    44:0b:57:73:fa:9f:bd:2f:5b:f8:dd:f6:95:ff:90:
                    5a:17:a8:e6:34:67:a8:f6:45:d9:1e:e5:cd:78:d6:
                    1d:a3:f7:7d:4e:57:1c:fd:76:d5:9a:f1:d6:c1:07:
                    86:75:80:a7:40:00:cd:5b:d6:34:ce:6f:3d:33:a7:
                    94:37:c4:7c:32:b2:4a:2b:25:60:35:00:f4:ff:1b:
                    78:ab:31:4b:72:a5:08:64:c2:90:8e:51:f7:0f:b1:
                    23:76:b1:82:4d:d2:23:d4:72:5b:ce:08:09:18:16:
                    66:d4:1f:c3:54:fb:22:48:39:4a:0f:a6:07:2f:bf:
                    62:8d:dc:59:4e:cd:83:51:51:5e:9f:56:b6:5e:73:
                    01:6d:00:fe:49:f0:10:43:3d:5a:da:cb:4f:fc:9a:
                    12:c6:75:32:50:d6:0a:31:5c:9e:44:e7:11:de:5d:
                    c5:0b:dc:26:78:6d:eb:fc:94:f6:72:2d:3d:da:8a:
                    de:2e:68:a2:79:ea:a1:af:b7:2d:19:1e:d4:3b:d5:
                    49:53:c5:b5:c0:25:72:ac:4a:58:cc:19:3b:8f:77:
                    b1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:8F:2F:60:FA:F2:52:7B:95:26:8B:72:1A:98:81:4A:6A:0A:CD:E6
            X509v3 Authority Key Identifier:
                keyid:51:30:6F:5F:46:DB:DB:41:36:04:2A:2B:E3:8D:05:D2:22:A7:C7:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTBvX0bb20E2BCor440F0iKnx2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/Yo8vYPryUnuVJotyGpiBSmoKzeY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211585

    Signature Algorithm: sha256WithRSAEncryption
         68:4f:e2:93:ea:40:fe:b2:be:77:27:2e:fa:7b:90:ab:d9:9f:
         6e:f4:45:9d:c1:81:da:fd:b4:f5:cc:19:c6:dd:39:04:31:b9:
         10:92:09:de:28:b4:7f:b9:c3:67:f9:1f:fe:ba:3e:58:58:89:
         73:c1:91:69:05:42:c3:33:e7:5a:c5:dd:1a:c5:46:a1:9c:d3:
         b1:fb:1c:ed:27:76:a4:fe:8c:39:55:e7:8d:26:c8:4f:dd:b0:
         ba:78:39:68:50:5d:25:35:a8:05:c9:08:21:60:d1:f6:7b:38:
         e7:e8:58:85:d9:cb:bf:b7:d4:fc:4e:e5:26:76:4d:ac:0a:67:
         b6:c7:e0:ce:20:83:03:6d:63:17:82:fe:41:c6:cc:63:87:3b:
         44:9b:93:7a:4e:d5:8f:79:28:b1:37:4c:5c:f6:11:b6:4d:33:
         ce:27:4f:14:3a:d3:bc:25:f1:9d:da:a4:a4:46:1e:e7:e5:8d:
         ce:df:ab:9d:cd:81:62:ad:e8:ed:a5:06:3a:96:50:97:5d:ea:
         c0:e9:f2:81:fe:4a:b7:b3:c4:c7:97:85:d2:ca:e2:6e:69:67:
         b6:5e:f2:e1:ac:9e:4c:02:c5:6b:d2:c7:4f:69:df:a0:8a:d8:
         43:c0:cf:d0:58:83:41:09:ef:8e:65:6a:94:f3:ed:55:68:bb:
         a5:d9:df:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 06:01:13 2026 by rpki-client