Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3a48c0-54b3-4c08-bfbe-1f36e6baf5fb/1/oV7oEBtVkW-ZG0CNfBXZibq26cI.asa
File:                     oV7oEBtVkW-ZG0CNfBXZibq26cI.asa (raw, json)
Hash identifier:          mCEcA0bMAnu7Jp7d+IWKI+vKl49ls8wLdVUMkuF36Dk=
Subject key identifier:   A1:5E:E8:10:1B:55:91:6F:99:1B:40:8D:7C:15:D9:89:BA:B6:E9:C2
Certificate issuer:       /CN=35b2d29eb2abe08e5e775978d000a63d0e6ec84a
Certificate serial:       019FC295E0B3E0DF40B1E1105268C08A21DB
Authority key identifier: 35:B2:D2:9E:B2:AB:E0:8E:5E:77:59:78:D0:00:A6:3D:0E:6E:C8:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NbLSnrKr4I5ed1l40ACmPQ5uyEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/3a48c0-54b3-4c08-bfbe-1f36e6baf5fb/1/oV7oEBtVkW-ZG0CNfBXZibq26cI.asa
Signing time:             Sun 02 Aug 2026 13:07:10 +0000
ASPA not before:          Sun 02 Aug 2026 13:07:10 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            207549
Providers:                AS: 47272
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/3a48c0-54b3-4c08-bfbe-1f36e6baf5fb/1/NbLSnrKr4I5ed1l40ACmPQ5uyEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/3a48c0-54b3-4c08-bfbe-1f36e6baf5fb/1/NbLSnrKr4I5ed1l40ACmPQ5uyEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NbLSnrKr4I5ed1l40ACmPQ5uyEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Aug 2026 08:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:c2:95:e0:b3:e0:df:40:b1:e1:10:52:68:c0:8a:21:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35b2d29eb2abe08e5e775978d000a63d0e6ec84a
        Validity
            Not Before: Aug  2 13:07:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a15ee8101b55916f991b408d7c15d989bab6e9c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:58:fb:4f:99:03:82:36:c2:b1:56:f2:37:fb:
                    1e:e4:79:0e:80:c0:68:58:2b:50:bd:29:8e:80:76:
                    a6:46:a8:76:2d:c2:5c:f9:6e:b7:1e:e5:83:3d:c1:
                    60:4b:71:b0:c2:11:5f:5b:ee:e2:9d:05:19:32:1a:
                    bc:d8:1a:de:bf:9a:e3:d2:a7:c9:51:00:6b:28:17:
                    4b:b3:2a:9e:df:0b:2f:fc:2c:1a:e9:00:3b:d6:55:
                    44:51:dc:61:e1:db:45:8b:3b:f6:c0:3c:f5:7c:00:
                    aa:a9:40:f9:5a:57:2c:c6:04:01:64:92:f9:d2:f0:
                    1a:0d:03:c7:c4:76:e4:57:a8:cd:40:07:cd:5f:74:
                    27:2e:1b:3c:79:87:76:e7:fe:60:3b:f8:89:06:d2:
                    63:b6:ba:6b:ba:b5:59:3d:de:1c:7e:bc:e6:a0:41:
                    85:c2:d0:64:43:55:f3:ef:91:e9:65:0a:f3:d5:94:
                    76:5d:8e:2e:c2:12:be:ec:35:ca:46:dc:33:f5:ff:
                    bf:9c:88:e7:65:74:ed:3a:a3:ba:6d:19:73:28:ac:
                    b7:c6:15:92:e1:e3:d7:e3:45:e6:c2:14:4b:34:9a:
                    82:51:9f:2f:e2:0c:48:81:61:54:2a:14:65:d6:f0:
                    cf:30:6a:3d:4e:0f:0d:b5:71:6d:27:db:2a:f4:8f:
                    a7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:5E:E8:10:1B:55:91:6F:99:1B:40:8D:7C:15:D9:89:BA:B6:E9:C2
            X509v3 Authority Key Identifier:
                keyid:35:B2:D2:9E:B2:AB:E0:8E:5E:77:59:78:D0:00:A6:3D:0E:6E:C8:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NbLSnrKr4I5ed1l40ACmPQ5uyEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3a48c0-54b3-4c08-bfbe-1f36e6baf5fb/1/oV7oEBtVkW-ZG0CNfBXZibq26cI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3a48c0-54b3-4c08-bfbe-1f36e6baf5fb/1/NbLSnrKr4I5ed1l40ACmPQ5uyEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207549

    Signature Algorithm: sha256WithRSAEncryption
         74:7f:48:f5:d4:c1:df:55:e7:f9:10:ba:96:8a:06:2c:1f:82:
         ed:70:d8:4d:09:81:4b:0c:31:ad:c4:8b:dd:6e:c7:78:9c:1f:
         d3:c3:d1:d1:6f:5f:94:4a:50:ff:bc:54:91:99:c5:a3:1a:77:
         28:cf:db:f8:b6:5b:d0:c2:54:0e:81:26:1a:2d:0a:44:5f:ca:
         62:3d:22:47:d9:c8:21:3c:f2:73:27:39:85:1b:1f:0e:c1:be:
         95:44:b2:68:c5:33:d9:da:86:e0:0c:c2:3a:a6:17:f0:00:27:
         05:da:14:4d:50:80:38:b1:91:d6:c7:e1:50:30:ec:b5:cc:76:
         4b:f1:d4:7f:59:2f:50:16:ed:7b:e2:6a:e4:dd:c9:f2:b9:b6:
         80:8b:21:07:4b:b8:b4:6d:6d:6a:b4:76:03:50:7c:88:cb:6c:
         dd:4d:88:cb:80:ef:14:9b:e8:c2:1e:c9:c3:3a:46:31:e2:65:
         0f:c3:ea:a0:93:bd:3e:91:fb:db:00:4f:b3:fd:b0:a2:38:ff:
         90:ed:eb:db:27:9a:04:90:b9:9f:77:45:6d:bd:3b:f4:13:ed:
         3d:6b:e0:6b:b2:20:ae:73:ac:4c:c0:3c:e1:02:14:11:ec:b8:
         ab:29:81:ae:ba:0e:77:9e:bb:12:ec:a2:c9:9d:54:ff:5c:be:
         21:1d:7e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 14:55:15 2026 by rpki-client