Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/sYTH2xaYQo9XYa_EEP4k8tAtn3M.asa
File:                     sYTH2xaYQo9XYa_EEP4k8tAtn3M.asa (raw, json)
Hash identifier:          WJoWu8Ygfu3XEz0Y8P0zm4tHyBUMT7PoRt6+SRfESnE=
Subject key identifier:   B1:84:C7:DB:16:98:42:8F:57:61:AF:C4:10:FE:24:F2:D0:2D:9F:73
Certificate issuer:       /CN=1903647efb243662e57e61d4ec45b4a25a37eac8
Certificate serial:       019FC3BD5ECF90E918000C62F18EE2D1ABD9
Authority key identifier: 19:03:64:7E:FB:24:36:62:E5:7E:61:D4:EC:45:B4:A2:5A:37:EA:C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/sYTH2xaYQo9XYa_EEP4k8tAtn3M.asa
Signing time:             Sun 02 Aug 2026 18:29:55 +0000
ASPA not before:          Sun 02 Aug 2026 18:29:55 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            25538
Providers:                AS: 553
                          AS: 6939
                          AS: 41051
                          AS: 48284
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 21:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:c3:bd:5e:cf:90:e9:18:00:0c:62:f1:8e:e2:d1:ab:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1903647efb243662e57e61d4ec45b4a25a37eac8
        Validity
            Not Before: Aug  2 18:29:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b184c7db1698428f5761afc410fe24f2d02d9f73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:33:7c:f5:78:c4:94:f8:ca:ac:92:79:40:9c:
                    d4:f8:c5:c3:d1:9b:a9:4c:9a:99:8b:d3:e7:cc:aa:
                    bd:c9:26:67:7c:a1:32:94:cd:33:e3:9d:27:46:06:
                    2a:5f:10:f4:40:f2:3f:4a:f0:88:86:48:66:2a:81:
                    d3:67:18:e6:7d:a8:c7:09:5d:56:30:25:12:f1:00:
                    5a:9f:49:d6:ea:df:f0:52:c9:48:e8:34:50:da:77:
                    5b:7c:50:40:09:1e:30:f7:26:77:43:4b:27:63:cd:
                    c9:cc:9e:2d:ca:97:83:79:6e:74:d2:9b:76:21:14:
                    de:bd:27:32:a7:c8:2e:04:96:9d:3c:d8:33:2d:f4:
                    0f:52:2a:65:c8:d9:5e:3c:ae:77:30:a6:7c:5f:07:
                    6c:48:0f:9a:cf:51:db:b4:54:ed:f0:70:fe:51:44:
                    80:76:ac:3f:f8:97:85:6a:17:1f:aa:c4:b2:ef:2c:
                    7c:da:74:b2:59:dc:20:69:da:54:22:2c:a9:22:81:
                    8d:50:0b:60:29:0c:42:33:8c:86:ca:d9:a2:c7:62:
                    74:5c:8a:1a:b3:94:c8:0b:e3:4f:1e:09:b5:17:c9:
                    f2:a0:95:12:5c:58:0a:17:b7:db:9d:42:7e:e5:4e:
                    c8:0b:5a:6e:e1:c8:f1:34:e1:f3:e7:a7:b6:ce:37:
                    90:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:84:C7:DB:16:98:42:8F:57:61:AF:C4:10:FE:24:F2:D0:2D:9F:73
            X509v3 Authority Key Identifier:
                keyid:19:03:64:7E:FB:24:36:62:E5:7E:61:D4:EC:45:B4:A2:5A:37:EA:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/sYTH2xaYQo9XYa_EEP4k8tAtn3M.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  25538

    Signature Algorithm: sha256WithRSAEncryption
         8d:9d:47:ec:1a:06:44:7d:35:79:b0:5d:bf:aa:f5:19:61:0c:
         9b:b0:38:6c:bb:85:d8:7f:ae:2f:8b:57:39:6c:df:85:be:4c:
         c1:0e:08:5b:0b:5b:76:fd:bc:13:e1:e6:ee:fe:e4:17:59:08:
         5a:eb:d8:11:f1:2b:24:c5:96:58:ba:2c:9c:da:50:26:5f:8e:
         31:b0:4d:a6:0c:71:33:8d:2c:ad:00:34:51:82:80:49:88:b5:
         48:06:ce:16:08:82:5d:2a:03:d7:70:97:e5:99:b4:68:14:ac:
         85:f7:1f:1a:14:3d:7b:0b:f1:28:19:ae:57:bb:da:a7:56:a4:
         eb:3a:28:7c:43:a0:64:37:0b:1d:14:ac:b6:d4:4f:62:80:9d:
         3f:2c:ca:55:b9:b1:e0:6f:a4:6f:0c:fe:84:f7:ef:db:e1:0a:
         99:07:57:26:b4:79:38:37:25:c5:f2:80:97:fe:63:b7:d8:c3:
         5c:c7:56:56:4a:5d:e4:65:12:29:d2:6e:be:27:65:12:2f:f3:
         44:79:48:00:f4:ce:8b:07:1c:55:83:58:90:1f:d8:37:6e:bc:
         07:ba:ea:89:48:f1:91:91:c9:43:cf:c3:4f:38:d3:77:93:83:
         a5:3b:40:ee:c2:9e:61:17:74:96:7c:a7:40:57:54:52:72:d6:
         44:33:36:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:50:04 2026 by rpki-client