Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/b983c6-3d5c-41e3-8a12-e6feb6c278d9/1/C2Djxl16Ca2rwWtj_eKt5oGgAsI.asa
File:                     C2Djxl16Ca2rwWtj_eKt5oGgAsI.asa (raw, json)
Hash identifier:          sodZbgdDyIFMQyl+gyx0pP+VLLCT1xLBjnYnzpybdGY=
Subject key identifier:   0B:60:E3:C6:5D:7A:09:AD:AB:C1:6B:63:FD:E2:AD:E6:81:A0:02:C2
Certificate issuer:       /CN=1970bbdfe4c1dbbd25535b224edccd8cbd16cb4b
Certificate serial:       01A0F91861D15CB6F1DF5D004AF293677624
Authority key identifier: 19:70:BB:DF:E4:C1:DB:BD:25:53:5B:22:4E:DC:CD:8C:BD:16:CB:4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GXC73-TB270lU1siTtzNjL0Wy0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/b983c6-3d5c-41e3-8a12-e6feb6c278d9/1/C2Djxl16Ca2rwWtj_eKt5oGgAsI.asa
Signing time:             Thu 01 Oct 2026 20:11:59 +0000
ASPA not before:          Thu 01 Oct 2026 20:11:59 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            210699
Providers:                AS: 150670
                          AS: 198831
                          AS: 399486
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/b983c6-3d5c-41e3-8a12-e6feb6c278d9/1/GXC73-TB270lU1siTtzNjL0Wy0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/b983c6-3d5c-41e3-8a12-e6feb6c278d9/1/GXC73-TB270lU1siTtzNjL0Wy0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GXC73-TB270lU1siTtzNjL0Wy0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 11:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f9:18:61:d1:5c:b6:f1:df:5d:00:4a:f2:93:67:76:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1970bbdfe4c1dbbd25535b224edccd8cbd16cb4b
        Validity
            Not Before: Oct  1 20:11:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0b60e3c65d7a09adabc16b63fde2ade681a002c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bd:92:de:8b:4a:14:9a:ac:d0:a0:8e:65:34:
                    f1:40:fc:a5:2b:40:9f:11:b7:5f:6c:02:cb:df:52:
                    36:07:77:57:24:c6:29:dc:af:dc:ee:44:08:23:bf:
                    4c:ca:a4:01:31:aa:62:81:83:5f:91:b9:30:14:6f:
                    9e:4f:7a:03:a1:ff:d5:03:c5:f2:7a:8e:4c:7e:cf:
                    e5:b2:5c:1d:4e:8d:f3:4d:5c:56:08:7b:f1:5d:30:
                    1b:74:36:b1:a1:54:3c:61:0b:c7:ba:c8:36:61:00:
                    d7:55:25:3f:35:56:5f:84:8a:16:37:9d:17:27:72:
                    e0:56:aa:a1:00:d8:e2:cb:7c:d3:1c:d9:56:da:9b:
                    e4:14:6d:32:0b:f5:e1:71:69:0a:2b:ee:77:f9:cb:
                    e7:9d:15:ba:e6:d9:77:d3:5b:8d:c7:86:a8:db:eb:
                    75:89:96:9a:ce:fb:8d:08:3c:60:00:65:98:75:8c:
                    ee:c0:50:86:57:1b:b4:e1:d5:8e:22:cb:42:91:98:
                    f4:9a:2b:e3:67:99:15:d9:1d:f2:e2:34:b5:aa:2e:
                    04:21:b8:78:d8:ae:e8:a3:88:0d:c7:ae:f5:ec:e4:
                    2f:c2:1e:e7:d2:57:a0:59:15:81:4a:25:06:95:39:
                    58:db:eb:4c:e3:80:05:a2:e2:9c:3d:ae:7d:43:f6:
                    41:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:60:E3:C6:5D:7A:09:AD:AB:C1:6B:63:FD:E2:AD:E6:81:A0:02:C2
            X509v3 Authority Key Identifier:
                keyid:19:70:BB:DF:E4:C1:DB:BD:25:53:5B:22:4E:DC:CD:8C:BD:16:CB:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXC73-TB270lU1siTtzNjL0Wy0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b983c6-3d5c-41e3-8a12-e6feb6c278d9/1/C2Djxl16Ca2rwWtj_eKt5oGgAsI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b983c6-3d5c-41e3-8a12-e6feb6c278d9/1/GXC73-TB270lU1siTtzNjL0Wy0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210699

    Signature Algorithm: sha256WithRSAEncryption
         96:94:50:56:92:13:86:cb:8b:de:9e:5c:44:c5:f6:ef:1a:c8:
         f7:8d:4e:00:88:1d:e1:51:1d:95:64:b3:94:f0:c5:f9:84:7b:
         aa:9a:fb:5d:55:d7:c6:f1:92:2f:83:6d:1b:42:a3:13:d1:d7:
         f2:18:c2:ad:98:4b:50:85:14:0f:16:5e:33:d5:8a:1c:0f:4b:
         77:94:c9:6b:2f:24:df:b1:7f:ed:fb:39:4e:db:a1:ee:87:27:
         34:59:8c:b4:68:96:e2:48:7c:06:11:5d:1c:23:8e:ac:2d:f9:
         c0:25:42:93:bd:be:af:35:9f:b2:ce:1f:15:32:47:90:a6:04:
         c6:d2:1e:38:5c:d8:1a:31:eb:f2:a6:5e:a9:0f:11:ed:ae:96:
         30:ed:91:66:f3:5d:4c:cf:67:c0:8a:56:47:d5:f7:dd:2b:b4:
         aa:0c:7b:cb:a1:7f:fc:b9:e1:c6:35:08:1e:61:3a:4e:43:cd:
         08:79:98:7c:3e:b6:5d:1e:37:1a:ea:bd:ff:0a:75:00:5a:4a:
         bd:5b:d1:51:e1:be:a6:fe:47:a1:24:e7:a1:eb:5e:d6:d4:d0:
         4e:07:2f:42:d5:de:4c:16:74:a3:93:0b:a4:82:60:e3:0d:c9:
         91:cf:22:cb:cc:c4:6e:38:07:08:3d:07:6f:23:ed:aa:52:da:
         92:2a:9d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 19:16:46 2026 by rpki-client