Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/WmLHmdZMxDOKlC1Fqsc3FlKEnfY.asa
File:                     WmLHmdZMxDOKlC1Fqsc3FlKEnfY.asa (raw, json)
Hash identifier:          m/8JCGEVFLwz3ghFyicJoK6G6xzZBUtlwCYggVSvDxc=
Subject key identifier:   5A:62:C7:99:D6:4C:C4:33:8A:94:2D:45:AA:C7:37:16:52:84:9D:F6
Certificate issuer:       /CN=e2407a7696f07984143054d411e3ca5f1836ecd4
Certificate serial:       019FE6527378A68054E6B3DA0B768161BBC1
Authority key identifier: E2:40:7A:76:96:F0:79:84:14:30:54:D4:11:E3:CA:5F:18:36:EC:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/WmLHmdZMxDOKlC1Fqsc3FlKEnfY.asa
Signing time:             Sun 09 Aug 2026 11:39:51 +0000
ASPA not before:          Sun 09 Aug 2026 11:39:51 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            201377
Providers:                AS: 34927
                          AS: 41051
                          AS: 58212
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:e6:52:73:78:a6:80:54:e6:b3:da:0b:76:81:61:bb:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2407a7696f07984143054d411e3ca5f1836ecd4
        Validity
            Not Before: Aug  9 11:39:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5a62c799d64cc4338a942d45aac7371652849df6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:09:59:b9:cd:1f:0a:f6:2f:38:ef:3e:c6:a1:
                    b4:3a:ff:2d:34:a4:14:b2:ae:5f:d8:0e:10:85:f0:
                    10:e6:1b:cf:13:c1:f5:08:7f:a9:07:3e:62:1c:a9:
                    28:d7:1a:f5:3c:43:3e:0c:2d:57:be:f7:2b:3d:d9:
                    a7:5f:b0:2a:e1:d3:82:78:9f:42:06:0f:4d:66:6a:
                    3c:28:7a:43:40:8e:59:f6:1b:c3:64:91:d3:55:d3:
                    57:39:95:bf:cf:7d:0a:f0:0c:0a:3c:f3:5d:4d:bd:
                    49:08:e1:4a:62:16:97:81:b5:f2:14:26:9a:d8:9a:
                    df:01:84:05:20:a1:3f:a8:7b:6b:04:60:50:8e:07:
                    e6:6f:e0:c0:f3:f2:d7:c3:b2:b4:dc:ca:2f:59:af:
                    8a:b1:47:95:2b:18:ee:67:3a:8c:a1:4f:fd:58:27:
                    75:c2:c6:4f:bf:fe:57:79:59:c8:10:9c:dd:5c:5e:
                    d0:cc:d1:e2:44:16:8d:bd:59:1a:b7:9b:07:36:3a:
                    a0:07:89:64:7a:b1:2c:60:0c:87:7e:9a:eb:b3:52:
                    7d:d5:8b:c9:19:c5:ed:46:c5:50:a2:56:e2:00:73:
                    7c:8d:0e:32:91:50:6c:1c:92:56:c0:26:e7:80:4c:
                    5d:df:9e:09:12:6c:a8:6b:99:1c:3d:82:15:5e:11:
                    8d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:62:C7:99:D6:4C:C4:33:8A:94:2D:45:AA:C7:37:16:52:84:9D:F6
            X509v3 Authority Key Identifier:
                keyid:E2:40:7A:76:96:F0:79:84:14:30:54:D4:11:E3:CA:5F:18:36:EC:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/WmLHmdZMxDOKlC1Fqsc3FlKEnfY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201377

    Signature Algorithm: sha256WithRSAEncryption
         0a:51:f6:6a:31:d4:6e:c5:97:48:81:05:7d:cc:42:f7:d0:bc:
         ea:2d:f7:99:77:45:92:4e:d4:57:45:dd:0f:f6:68:55:8b:bd:
         5d:9e:3d:9b:13:85:ea:fa:ed:28:ff:a8:7c:43:65:71:26:83:
         a4:4e:ba:7f:d9:0b:d2:8f:0f:ab:1c:83:9d:69:e6:23:38:52:
         88:09:e4:15:ae:42:8a:4a:7e:c9:17:3a:7e:38:9f:19:4e:9b:
         e9:33:0e:a6:e4:63:e3:53:6d:64:7b:8b:df:c0:bd:46:14:6f:
         33:05:98:b8:35:67:e1:e5:84:72:2f:08:18:49:f0:d0:fd:0a:
         92:22:d1:6b:51:78:df:e6:62:80:2d:20:38:26:f8:64:fb:42:
         c0:3e:d5:be:dc:94:e5:74:a6:ba:a2:9b:29:1e:28:56:97:7c:
         7c:d7:b5:ee:8f:8e:c6:6d:64:46:35:7a:0f:f3:ff:f7:f6:37:
         49:eb:fb:18:01:c9:cf:de:55:37:f5:d2:3d:4b:c6:f9:8d:6e:
         37:13:96:2f:92:86:c5:45:fd:6c:3a:1c:26:1d:c3:b2:e9:1b:
         27:01:e4:24:c6:5d:fe:b8:b9:40:ea:9f:42:2b:ae:f0:39:17:
         e9:76:8d:95:9a:ed:d2:2d:76:08:e5:57:f4:2c:90:42:34:19:
         29:86:42:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:51:27 2026 by rpki-client