Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/19ebc7-5782-4c63-8814-74061fd36dc9/1/lzBvt8j7QjYQ1ElEK6XgDejWB_s.asa
File:                     lzBvt8j7QjYQ1ElEK6XgDejWB_s.asa (raw, json)
Hash identifier:          5pT8OsSJlMwgdW//vHQ4jVWkbC26ni2BfE6UrfKD9fM=
Subject key identifier:   97:30:6F:B7:C8:FB:42:36:10:D4:49:44:2B:A5:E0:0D:E8:D6:07:FB
Certificate issuer:       /CN=7b6e5aaeef539629cc6aca8c9aa113314ab85145
Certificate serial:       019CEE13525B36EA6241C663A3D50C60F414
Authority key identifier: 7B:6E:5A:AE:EF:53:96:29:CC:6A:CA:8C:9A:A1:13:31:4A:B8:51:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e25aru9TlinMasqMmqETMUq4UUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/19ebc7-5782-4c63-8814-74061fd36dc9/1/lzBvt8j7QjYQ1ElEK6XgDejWB_s.asa
Signing time:             Sat 14 Mar 2026 20:39:29 +0000
ASPA not before:          Sat 14 Mar 2026 20:39:29 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            213427
Providers:                AS: 16276
                          AS: 202053
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/19ebc7-5782-4c63-8814-74061fd36dc9/1/e25aru9TlinMasqMmqETMUq4UUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/19ebc7-5782-4c63-8814-74061fd36dc9/1/e25aru9TlinMasqMmqETMUq4UUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e25aru9TlinMasqMmqETMUq4UUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Mar 2026 23:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ee:13:52:5b:36:ea:62:41:c6:63:a3:d5:0c:60:f4:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b6e5aaeef539629cc6aca8c9aa113314ab85145
        Validity
            Not Before: Mar 14 20:39:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=97306fb7c8fb423610d449442ba5e00de8d607fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:30:b9:21:fc:23:85:0c:8d:f2:e6:b3:40:06:
                    d0:e4:d1:7f:34:3c:84:11:60:d9:08:2b:a1:f6:c6:
                    41:06:63:de:6a:64:46:23:9f:24:89:4e:a1:40:b4:
                    97:eb:94:48:81:ed:e2:3d:62:49:2c:f3:21:62:d8:
                    2f:e1:e7:04:e1:27:67:21:65:5e:a2:4c:ea:ec:55:
                    af:d2:78:d6:d8:60:88:f7:ea:bc:4a:19:5d:a5:46:
                    52:d7:0a:3a:ff:8d:04:f4:b7:7a:88:9e:e4:10:43:
                    e5:1c:1a:73:c8:12:29:0e:22:40:4f:0c:bc:33:8b:
                    be:e3:1e:37:b4:fb:18:6c:f5:98:65:fc:03:0e:11:
                    b5:63:2e:76:bf:af:b5:01:ee:e6:ba:94:50:dd:a4:
                    ff:b1:b5:b2:63:6d:30:9e:21:fb:16:5e:6c:e8:3c:
                    51:81:03:df:b4:64:5d:e9:01:e2:f2:f2:0c:b7:e9:
                    51:39:87:8a:96:bc:96:21:1e:77:a3:f8:ee:19:8d:
                    15:69:4f:2c:29:88:f5:67:ad:55:ce:42:ce:5e:eb:
                    9b:e1:14:ba:a2:5e:2f:40:c6:7c:d2:38:94:c6:62:
                    3f:5e:3a:92:a2:ba:02:b9:e1:d5:c8:70:1c:af:14:
                    ba:3c:ce:38:b5:b3:30:fc:8c:5c:d5:f3:af:be:b3:
                    20:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:30:6F:B7:C8:FB:42:36:10:D4:49:44:2B:A5:E0:0D:E8:D6:07:FB
            X509v3 Authority Key Identifier:
                keyid:7B:6E:5A:AE:EF:53:96:29:CC:6A:CA:8C:9A:A1:13:31:4A:B8:51:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e25aru9TlinMasqMmqETMUq4UUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/19ebc7-5782-4c63-8814-74061fd36dc9/1/lzBvt8j7QjYQ1ElEK6XgDejWB_s.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/19ebc7-5782-4c63-8814-74061fd36dc9/1/e25aru9TlinMasqMmqETMUq4UUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213427

    Signature Algorithm: sha256WithRSAEncryption
         67:eb:f1:43:b0:a9:e4:e6:42:73:20:38:15:5b:73:1c:ae:31:
         c8:30:fc:38:42:c3:34:c1:63:ca:01:c1:ab:d0:fd:3a:03:b4:
         af:c3:a4:d4:b6:62:c3:96:c2:1c:c5:cb:03:6e:78:37:20:ad:
         5d:86:f6:5f:36:dd:2c:e2:fc:17:5e:55:6e:84:91:ca:f8:17:
         22:4a:43:bc:6c:39:d0:62:eb:e8:7f:c7:58:02:ef:8e:0a:8c:
         93:22:10:7f:8b:d8:74:a3:d5:54:91:9b:0a:2a:67:b6:18:9c:
         6d:85:69:50:3b:19:da:bc:2e:97:48:81:19:b0:27:6b:3a:22:
         dd:0f:c9:8c:d2:b3:fe:0b:50:fc:8e:3e:14:9b:39:b6:23:10:
         ca:de:56:96:0a:03:2e:24:7f:ac:56:31:13:ca:31:23:1c:62:
         7f:9e:27:bf:cc:cb:5d:c6:9c:5c:00:83:a8:16:d3:e9:aa:ed:
         92:5c:4e:7a:48:c5:07:df:d3:d3:d3:9a:19:fe:59:91:bb:d9:
         84:4b:32:92:41:2e:44:75:4a:cb:67:3c:af:ef:33:04:dc:c1:
         47:a6:29:63:0b:02:19:fd:43:fc:33:f3:8d:49:ec:9a:36:09:
         90:3b:e9:2b:7e:9f:c9:8e:8a:28:c3:1d:23:74:0a:21:2d:06:
         cd:cf:fd:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:51:10 2026 by rpki-client