Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/T4UuZXBeaCSXXhb6vNH7Vy75_hg.asa
File:                     T4UuZXBeaCSXXhb6vNH7Vy75_hg.asa (raw, json)
Hash identifier:          hJkbS7Ns7tr/dUI7yRHtcG/eXbm7a0GJDdxjVlyXMNM=
Subject key identifier:   4F:85:2E:65:70:5E:68:24:97:5E:16:FA:BC:D1:FB:57:2E:F9:FE:18
Certificate issuer:       /CN=6988c4bebad38f9e7247acb28fb5e1e5cef6588b
Certificate serial:       019EE76E06A635D84AEFA32C455FDD5CF1D3
Authority key identifier: 69:88:C4:BE:BA:D3:8F:9E:72:47:AC:B2:8F:B5:E1:E5:CE:F6:58:8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aYjEvrrTj55yR6yyj7Xh5c72WIs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/T4UuZXBeaCSXXhb6vNH7Vy75_hg.asa
Signing time:             Sat 20 Jun 2026 23:46:48 +0000
ASPA not before:          Sat 20 Jun 2026 23:46:48 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            215323
Providers:                AS: 20473
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aYjEvrrTj55yR6yyj7Xh5c72WIs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e7:6e:06:a6:35:d8:4a:ef:a3:2c:45:5f:dd:5c:f1:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6988c4bebad38f9e7247acb28fb5e1e5cef6588b
        Validity
            Not Before: Jun 20 23:46:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4f852e65705e6824975e16fabcd1fb572ef9fe18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:93:71:4a:05:55:82:8b:87:d7:a0:a4:84:44:
                    13:50:5a:b3:c2:50:3f:13:e3:c3:f2:b6:3d:49:1d:
                    b0:d7:ba:58:51:a8:53:b2:31:bf:23:46:87:4e:fe:
                    56:cf:9a:4e:14:9d:4a:c2:8f:80:a6:c8:ba:3f:fe:
                    97:5c:68:c5:23:d0:e1:f7:d3:d5:f1:21:bc:c0:a7:
                    17:ad:77:6e:b1:5e:ff:ea:06:c6:e3:78:1b:c7:6c:
                    7a:78:cd:07:bf:93:06:e0:cd:5e:5e:72:cd:48:76:
                    07:5a:ec:e8:3b:b4:85:d2:37:16:1e:b4:72:6a:13:
                    6b:63:e8:2b:e6:1e:3d:58:1c:1c:b3:84:31:a0:00:
                    f2:ee:c8:f8:c6:50:2b:fe:46:a9:9f:cd:72:2e:b5:
                    59:55:ce:44:15:28:d3:20:bf:16:8d:86:70:58:84:
                    39:31:73:be:18:dc:26:32:f2:7f:02:92:06:8b:cb:
                    e9:a3:77:f5:e5:3f:e3:ab:98:d0:fe:21:dd:28:29:
                    65:05:00:68:a6:b0:43:9c:fe:fa:b2:4b:45:c9:8b:
                    2d:dc:de:54:97:5c:95:92:8d:e8:50:be:29:b7:8d:
                    0d:ad:d2:33:56:2a:b7:cf:15:d7:7a:63:28:45:48:
                    63:38:e9:46:3a:aa:6b:f0:45:93:39:1e:a8:e5:71:
                    14:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:85:2E:65:70:5E:68:24:97:5E:16:FA:BC:D1:FB:57:2E:F9:FE:18
            X509v3 Authority Key Identifier:
                keyid:69:88:C4:BE:BA:D3:8F:9E:72:47:AC:B2:8F:B5:E1:E5:CE:F6:58:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYjEvrrTj55yR6yyj7Xh5c72WIs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/T4UuZXBeaCSXXhb6vNH7Vy75_hg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215323

    Signature Algorithm: sha256WithRSAEncryption
         82:13:71:e0:5b:31:8b:a6:de:61:b1:d6:74:df:21:7a:ad:d2:
         6c:fe:c0:d5:70:57:5e:e9:bc:14:e1:f0:e3:9a:f7:a5:80:8a:
         ac:48:0e:df:a2:21:5f:2b:36:80:98:63:e4:87:1f:bc:9c:7f:
         6a:8e:7f:ae:fe:1d:37:13:6f:2a:5d:bf:a0:66:c0:bd:bb:85:
         a9:3c:cd:7a:6c:71:bc:47:c5:70:45:10:21:26:c0:3e:07:67:
         7e:69:1c:a8:0e:de:e2:56:ca:99:c4:0d:e4:9a:41:02:b6:2f:
         fb:10:23:e7:51:9a:38:b1:a9:26:cb:f7:84:2a:5d:05:30:16:
         c9:f8:ad:dc:8b:6d:c2:ad:55:69:d5:03:0e:59:6a:c3:fc:b4:
         b8:89:dc:7f:7b:11:2b:94:0f:79:da:53:db:29:5d:ee:26:11:
         11:21:4b:ae:d5:de:59:6c:60:74:fe:c7:78:2d:6c:e8:ae:4d:
         a1:77:4b:fc:d0:83:19:22:18:1b:cf:1b:72:df:ee:14:b5:09:
         f4:0d:31:d6:a2:f7:12:6c:b3:f8:16:e4:1b:57:80:02:93:bd:
         5f:22:e9:50:fe:d4:8b:6c:4b:e7:49:26:26:55:d9:ad:37:f3:
         a0:67:19:aa:d8:57:20:9e:1b:29:2f:7b:e5:78:eb:03:c1:b8:
         19:44:5b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:26:02 2026 by rpki-client