Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/4b0abe-c332-4aae-ab60-d8e1bc44d2d4/1/ZSIyFnlfJZuqIU-6QI9Jt6BhStQ.asa
File:                     ZSIyFnlfJZuqIU-6QI9Jt6BhStQ.asa (raw, json)
Hash identifier:          yafPGi/4cIiLIirWhcmLE4fOTcFchmZLLaICx5mS/sU=
Subject key identifier:   65:22:32:16:79:5F:25:9B:AA:21:4F:BA:40:8F:49:B7:A0:61:4A:D4
Certificate issuer:       /CN=580de65241f763d6908d01a443ddf594220c0f46
Certificate serial:       019FA8FBAE79A491948CB5A2C7C3F1AB6B01
Authority key identifier: 58:0D:E6:52:41:F7:63:D6:90:8D:01:A4:43:DD:F5:94:22:0C:0F:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WA3mUkH3Y9aQjQGkQ931lCIMD0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/4b0abe-c332-4aae-ab60-d8e1bc44d2d4/1/ZSIyFnlfJZuqIU-6QI9Jt6BhStQ.asa
Signing time:             Tue 28 Jul 2026 13:48:14 +0000
ASPA not before:          Tue 28 Jul 2026 13:48:14 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            219125
Providers:                AS: 24961
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/4b0abe-c332-4aae-ab60-d8e1bc44d2d4/1/WA3mUkH3Y9aQjQGkQ931lCIMD0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/4b0abe-c332-4aae-ab60-d8e1bc44d2d4/1/WA3mUkH3Y9aQjQGkQ931lCIMD0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WA3mUkH3Y9aQjQGkQ931lCIMD0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 22:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:fb:ae:79:a4:91:94:8c:b5:a2:c7:c3:f1:ab:6b:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=580de65241f763d6908d01a443ddf594220c0f46
        Validity
            Not Before: Jul 28 13:48:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=65223216795f259baa214fba408f49b7a0614ad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:52:fd:bc:a6:f7:16:d3:07:ed:fc:81:2e:56:
                    49:a7:7d:28:9d:97:47:11:92:43:d7:e3:73:d1:9d:
                    f1:a1:61:11:da:c2:58:65:ea:f4:26:0e:cf:7c:34:
                    94:10:e0:a9:d8:f8:de:90:be:ed:0c:ea:25:23:9f:
                    3b:7f:2f:9c:e0:c5:f6:2e:46:e6:98:f6:3d:17:8a:
                    70:e2:5f:58:ba:95:12:a0:10:ec:7d:a9:d8:50:f0:
                    9e:d3:da:72:a5:44:65:fe:09:de:9b:91:f1:fa:3c:
                    27:3e:05:03:aa:72:bb:93:d9:cf:50:d5:38:6d:dd:
                    de:fe:e0:00:31:06:f4:28:44:34:d6:5b:78:f8:b8:
                    d8:17:ce:fd:e3:62:b8:62:80:7b:9b:6b:d3:73:b1:
                    64:e8:2f:b1:a3:64:50:b1:ce:70:1f:02:7b:ed:ad:
                    09:23:21:26:b8:6d:ee:07:3d:e3:31:4a:bf:b7:a5:
                    64:38:ec:ef:22:4a:74:b6:3a:a6:a8:0a:bd:ff:e0:
                    03:b1:a7:b1:a6:a3:09:0a:ae:a7:49:96:b1:07:c4:
                    c0:25:4d:10:10:d8:72:62:07:0a:d0:66:fe:f9:63:
                    0d:02:5a:4d:b5:1f:ba:f2:fe:7b:86:f1:35:c9:a2:
                    4b:a1:ea:07:cc:b0:92:c6:63:49:92:3a:e0:b6:61:
                    2b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:22:32:16:79:5F:25:9B:AA:21:4F:BA:40:8F:49:B7:A0:61:4A:D4
            X509v3 Authority Key Identifier:
                keyid:58:0D:E6:52:41:F7:63:D6:90:8D:01:A4:43:DD:F5:94:22:0C:0F:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WA3mUkH3Y9aQjQGkQ931lCIMD0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4b0abe-c332-4aae-ab60-d8e1bc44d2d4/1/ZSIyFnlfJZuqIU-6QI9Jt6BhStQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4b0abe-c332-4aae-ab60-d8e1bc44d2d4/1/WA3mUkH3Y9aQjQGkQ931lCIMD0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  219125

    Signature Algorithm: sha256WithRSAEncryption
         6e:c2:2c:97:1a:ac:16:db:c4:b0:38:2b:25:90:70:32:da:b3:
         a6:f6:d1:6f:ec:0c:ab:c0:9d:16:8e:4f:a4:37:63:e7:66:92:
         c1:c6:46:ca:36:00:cf:c0:38:dd:b5:44:21:d7:a5:12:6c:82:
         ac:96:20:cf:6d:f2:9c:1b:78:c7:d8:8f:e6:92:0b:ec:99:5a:
         d5:7d:23:ee:6d:cc:58:9e:3b:42:dd:5c:27:27:b0:28:a3:44:
         2f:7e:e7:94:e7:5d:5e:80:4e:a9:59:a5:2d:b6:a5:bc:69:2f:
         53:2e:66:2e:80:b3:b7:1a:a2:8f:17:d6:a9:21:0f:b1:3e:db:
         43:fd:4c:27:8c:f3:e1:e6:5b:fd:36:7b:b0:49:d0:1c:5d:b7:
         7d:39:79:c6:c5:43:bb:01:08:88:c2:e7:99:9c:1f:7a:b9:0b:
         f6:7a:51:c4:7e:6d:e4:71:fc:8b:de:95:fc:a2:bd:74:ee:82:
         ac:0a:1f:8d:3c:dd:db:23:cf:e9:f5:b9:e3:3d:42:33:82:f0:
         74:67:25:1a:fb:a4:48:05:c8:8c:34:7e:e7:98:24:18:17:66:
         06:02:ad:85:1b:78:0a:f1:f4:33:33:81:46:3d:bf:87:79:dc:
         03:ca:23:65:31:db:83:c3:43:8f:00:51:85:99:46:ae:f3:f7:
         b1:63:48:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:50:40 2026 by rpki-client