Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/H9M9hJ2Wf0edu4O6BWjDO8iQCIY.asa
File:                     H9M9hJ2Wf0edu4O6BWjDO8iQCIY.asa (raw, json)
Hash identifier:          X7hW2mdrTDcdJA7Y5SsLSoNgjMb7M7DnZnmZizxX5K0=
Subject key identifier:   1F:D3:3D:84:9D:96:7F:47:9D:BB:83:BA:05:68:C3:3B:C8:90:08:86
Certificate issuer:       /CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Certificate serial:       01A00CFA251595EDCE053A8120EF58A4A422
Authority key identifier: BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/H9M9hJ2Wf0edu4O6BWjDO8iQCIY.asa
Signing time:             Sun 16 Aug 2026 23:48:35 +0000
ASPA not before:          Sun 16 Aug 2026 23:48:35 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            57797
Providers:                AS: 2027
                          AS: 35661
                          AS: 39801
                          AS: 52025
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Sep 2026 21:38:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:0c:fa:25:15:95:ed:ce:05:3a:81:20:ef:58:a4:a4:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
        Validity
            Not Before: Aug 16 23:48:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1fd33d849d967f479dbb83ba0568c33bc8900886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:08:5d:31:b2:25:ef:e4:13:df:98:be:3b:38:
                    65:4e:fb:56:c7:64:58:89:c1:1d:bb:b2:04:cb:d7:
                    f2:ab:2d:fa:3b:23:38:ea:7f:c3:07:a0:22:06:40:
                    e6:02:9a:34:eb:2d:77:1a:4b:be:da:83:b6:82:19:
                    f8:da:af:3e:37:5a:3b:4c:c5:a4:13:3c:5e:e4:1c:
                    2d:e6:91:3f:dc:5c:5a:64:a7:a1:22:2b:6f:4b:92:
                    2a:78:2e:cb:60:a0:21:8f:77:43:14:18:07:92:f2:
                    a8:ad:01:1f:09:fe:91:d6:85:d7:0c:d7:dc:05:99:
                    ed:74:1f:6f:06:3c:6f:a2:75:ed:29:39:46:27:ec:
                    06:76:5d:56:cf:dd:54:77:8b:e5:d2:d1:d7:4c:a2:
                    6b:33:38:4f:09:8b:a6:80:85:b9:3b:9e:08:6a:db:
                    f3:fc:c6:ae:4e:c3:0d:7e:1f:bb:cf:8c:c2:78:2d:
                    cd:f7:9b:f2:ab:f4:00:ca:4e:32:bb:12:35:65:8f:
                    b9:80:36:73:83:da:eb:37:86:c3:a4:4c:90:ea:95:
                    2e:b6:e5:41:ce:0a:f2:44:1e:8e:d3:7a:e8:0d:45:
                    29:26:31:f1:72:f1:fd:25:c5:3e:19:31:2e:67:b9:
                    89:38:7c:58:8c:be:d8:d4:cd:c4:69:4d:d4:dd:49:
                    7f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D3:3D:84:9D:96:7F:47:9D:BB:83:BA:05:68:C3:3B:C8:90:08:86
            X509v3 Authority Key Identifier:
                keyid:BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/H9M9hJ2Wf0edu4O6BWjDO8iQCIY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57797

    Signature Algorithm: sha256WithRSAEncryption
         84:6a:15:94:41:93:92:2c:ba:6d:bf:bc:82:29:c8:d4:a8:29:
         56:74:dd:c7:07:78:df:a6:02:78:bb:5f:e2:0d:e6:a5:d4:b1:
         2c:9b:6d:cf:ea:11:0e:25:b3:ba:a7:a7:10:d5:7e:eb:9a:46:
         36:6d:7b:4f:3a:38:49:9e:90:72:43:cd:95:02:d9:e4:53:38:
         af:5a:22:68:1d:f2:ff:ef:a5:a4:99:48:eb:6e:94:17:5c:3b:
         21:3d:8e:3a:cd:63:bf:3d:50:d0:6b:5a:df:fe:a1:06:0f:79:
         0d:0f:df:72:13:02:aa:cc:a0:5c:bd:15:62:61:27:2d:a1:ad:
         79:79:f7:58:50:e2:62:a6:71:5e:96:3b:a1:56:3b:ee:74:fd:
         18:07:84:ba:da:72:b4:bb:cc:22:be:63:bf:fa:19:11:71:d4:
         e2:ab:c0:22:a8:cd:ae:80:f7:4b:0c:97:dd:9e:22:76:52:96:
         39:95:f9:a4:27:ac:25:20:46:71:ca:fc:a2:26:88:59:e9:cd:
         7e:51:81:b4:46:cf:f7:99:bc:e1:ae:28:9b:e6:3d:0f:83:ba:
         1a:22:6b:25:25:e2:af:b8:da:94:2b:b9:84:fa:2b:61:71:b0:
         ca:36:bc:73:5f:85:a2:22:0b:89:86:85:8a:28:8a:b9:13:b0:
         be:ac:9c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:06:26 2026 by rpki-client