Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/XFryV8mEeuupb3XAen-H_Ldq_cU.asa
File:                     XFryV8mEeuupb3XAen-H_Ldq_cU.asa (raw, json)
Hash identifier:          Ast+jSD2OPEQb3cMST/Crq23gjaP4zlj9dOQBafa+Uw=
Subject key identifier:   5C:5A:F2:57:C9:84:7A:EB:A9:6F:75:C0:7A:7F:87:FC:B7:6A:FD:C5
Certificate issuer:       /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Certificate serial:       019EF50D14388BCDD1AFC102D757AAC8423A
Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/XFryV8mEeuupb3XAen-H_Ldq_cU.asa
Signing time:             Tue 23 Jun 2026 15:15:35 +0000
ASPA not before:          Tue 23 Jun 2026 15:15:35 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            42325
Providers:                AS: 8903
                          AS: 12541
                          AS: 202766
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:f5:0d:14:38:8b:cd:d1:af:c1:02:d7:57:aa:c8:42:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
        Validity
            Not Before: Jun 23 15:15:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5c5af257c9847aeba96f75c07a7f87fcb76afdc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f4:47:90:5b:32:b7:ed:ca:b0:0b:ca:c0:70:
                    fa:fc:55:b6:07:83:74:97:f8:a1:5f:70:d6:6d:1c:
                    4f:e1:e3:32:0f:d4:d8:c3:88:01:7b:ed:bd:b4:05:
                    fd:00:27:98:c4:b4:e5:de:cb:cc:50:2b:a6:10:48:
                    62:fa:4d:8b:0d:a4:f8:5c:7f:31:00:81:3c:e7:4b:
                    c2:f1:d9:17:e3:45:82:a9:b0:fe:d9:4e:8c:a9:3c:
                    3b:22:55:07:6a:7d:ef:e2:d2:53:59:7e:3d:77:6b:
                    96:27:49:66:da:77:03:ec:ab:d8:38:a9:95:0a:1d:
                    d1:82:bb:e2:f2:80:40:8a:4e:a7:29:23:26:0b:d2:
                    30:e2:36:af:44:8f:b2:3f:8f:3f:4d:3a:bd:e3:ed:
                    88:fa:8d:44:49:85:8a:ae:a4:f1:66:24:2e:3b:13:
                    5b:41:38:c6:95:65:4a:0b:df:e0:57:79:1b:8a:a2:
                    9c:e2:49:d5:03:cd:6c:84:75:b9:e7:9c:85:a2:cb:
                    d8:0f:04:1b:23:04:ad:c8:49:cb:b3:e8:af:71:3b:
                    0e:70:38:a2:92:22:b6:11:ef:58:de:c6:e6:ac:01:
                    3c:d7:12:4a:9a:4a:68:28:7a:38:81:27:63:9e:64:
                    86:60:12:ae:af:b3:2c:ca:94:46:8e:47:75:a2:08:
                    51:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:5A:F2:57:C9:84:7A:EB:A9:6F:75:C0:7A:7F:87:FC:B7:6A:FD:C5
            X509v3 Authority Key Identifier:
                keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/XFryV8mEeuupb3XAen-H_Ldq_cU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42325

    Signature Algorithm: sha256WithRSAEncryption
         11:91:d8:41:f1:9e:f0:1f:2f:9a:19:a3:97:f8:61:06:9b:46:
         8f:24:09:07:18:98:0c:97:09:62:ff:72:fc:5a:4f:5e:9e:83:
         0c:e6:dd:bf:16:c7:3b:c0:5b:0d:7a:bd:13:e5:16:9f:6f:dd:
         9b:3e:98:23:32:80:13:6a:a2:a6:e9:81:b8:c6:34:6d:84:51:
         19:ca:67:df:d7:91:3e:23:06:53:b9:28:d8:fc:04:b3:ab:d1:
         14:e0:b9:3c:a5:23:09:13:5a:3d:24:25:94:5d:25:04:8f:a0:
         cd:61:55:f6:01:93:cb:21:5f:03:b5:91:43:cf:2f:e0:72:6d:
         f1:76:07:c8:d0:10:0d:c0:57:d7:fa:b7:27:c7:ba:80:24:5d:
         15:9d:73:fb:f2:99:8f:fc:b5:66:ae:7f:09:5a:c7:57:98:80:
         44:09:77:01:c8:b3:bd:a0:64:2e:8a:b0:b6:09:fc:1c:6d:71:
         4f:7b:74:71:93:c2:ed:c4:f2:fa:bb:07:83:46:61:de:dd:17:
         97:79:59:59:90:4f:66:a3:02:8d:62:79:be:55:41:ee:18:e6:
         68:9a:2a:13:af:28:d6:b3:6c:3c:00:fb:5e:1f:e3:4d:1d:b8:
         62:ab:28:a6:7a:af:f9:dd:1a:37:ef:04:f5:3d:2f:25:93:ef:
         14:02:0a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 09:33:32 2026 by rpki-client