Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/yp2AU1llCHkyOj3CufgRPl-N_Tk.asa
File:                     yp2AU1llCHkyOj3CufgRPl-N_Tk.asa (raw, json)
Hash identifier:          WtTfRm5N0C4SFgr+MVGe8srzzJzvJBZGACuMZcOKeM8=
Subject key identifier:   CA:9D:80:53:59:65:08:79:32:3A:3D:C2:B9:F8:11:3E:5F:8D:FD:39
Certificate issuer:       /CN=f731c339b1861722bffe867218314ce1295c3c85
Certificate serial:       01A00026083630B88C9007A508B8EA666055
Authority key identifier: F7:31:C3:39:B1:86:17:22:BF:FE:86:72:18:31:4C:E1:29:5C:3C:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9zHDObGGFyK__oZyGDFM4SlcPIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/yp2AU1llCHkyOj3CufgRPl-N_Tk.asa
Signing time:             Fri 14 Aug 2026 12:01:27 +0000
ASPA not before:          Fri 14 Aug 2026 12:01:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            56791
Providers:                AS: 12389
                          AS: 20485
                          AS: 31133
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9zHDObGGFyK__oZyGDFM4SlcPIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 03:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:26:08:36:30:b8:8c:90:07:a5:08:b8:ea:66:60:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f731c339b1861722bffe867218314ce1295c3c85
        Validity
            Not Before: Aug 14 12:01:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ca9d805359650879323a3dc2b9f8113e5f8dfd39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f2:65:27:aa:74:78:4a:64:5c:8a:cf:d8:d5:
                    96:c0:43:d4:e5:c6:a2:cd:5c:26:0c:2a:0c:79:11:
                    a8:d8:85:4b:66:79:64:1b:94:ac:ab:04:35:42:7d:
                    58:6e:ca:1e:a7:c1:80:fc:a9:4c:73:04:c1:7d:34:
                    d3:e2:31:3c:13:f6:9e:04:9e:36:7d:7d:c4:73:8a:
                    4b:48:25:b4:4b:22:63:38:2c:02:85:2c:1f:69:41:
                    7b:b6:98:b8:00:e9:c4:51:3e:dd:08:ae:a6:05:0b:
                    fc:50:ee:b5:e9:20:2e:6e:53:5b:2d:7a:d2:cd:da:
                    f1:9c:87:5a:75:8f:32:0c:3f:3b:7d:8e:b8:b9:27:
                    db:22:a1:1c:4e:f0:2a:f2:b7:12:cd:5a:a5:5f:f6:
                    07:ac:fe:ee:a2:b0:cc:64:58:3f:48:07:1d:17:7e:
                    0d:18:95:c1:81:5f:f5:af:cd:3f:cf:51:4c:28:98:
                    3d:aa:3d:b5:20:9e:2c:4b:d0:9e:63:50:c8:3a:9a:
                    cd:6c:4b:0c:29:86:e8:2c:8a:56:57:1d:a1:96:56:
                    94:d1:21:e1:b7:12:f5:a0:84:44:b3:98:29:58:cd:
                    59:95:0f:b1:2e:1a:97:40:e0:1a:cb:07:12:e4:75:
                    d9:64:5b:c7:f0:63:31:99:a7:bb:11:8c:9c:f8:b7:
                    4e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:9D:80:53:59:65:08:79:32:3A:3D:C2:B9:F8:11:3E:5F:8D:FD:39
            X509v3 Authority Key Identifier:
                keyid:F7:31:C3:39:B1:86:17:22:BF:FE:86:72:18:31:4C:E1:29:5C:3C:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zHDObGGFyK__oZyGDFM4SlcPIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/yp2AU1llCHkyOj3CufgRPl-N_Tk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  56791

    Signature Algorithm: sha256WithRSAEncryption
         57:e1:75:89:08:ba:6b:3b:96:00:cc:f6:7b:ce:22:c7:4d:bf:
         6f:f8:48:db:f8:c3:c8:36:c7:52:42:89:8e:e4:89:1f:56:90:
         2a:cc:a2:61:27:d1:fc:be:b1:fd:bf:76:1a:e0:f7:78:f7:95:
         b4:c7:7f:0b:96:a2:7c:0a:c2:ca:4c:ae:cb:d3:5f:e7:6e:6e:
         ab:44:0f:a3:4b:0f:9f:49:1a:ef:24:83:3d:26:b0:5c:ad:be:
         5d:2b:29:fe:a7:a6:4f:6c:57:2e:b8:80:07:41:54:5b:a9:eb:
         27:55:5d:7b:a3:4e:4e:19:b6:2f:7a:c2:f0:79:b2:31:cd:46:
         e6:e2:3a:f8:55:43:ba:91:cb:9b:de:7e:92:a4:de:f4:f6:8d:
         29:ca:7d:24:37:fa:f8:64:8e:ab:0d:71:97:18:33:96:c0:16:
         3c:8b:d8:4e:d5:73:f5:81:ce:5a:66:f3:76:85:92:dd:e0:47:
         79:58:5c:56:11:bc:27:e3:88:0f:92:9a:c1:94:80:d0:9e:84:
         df:ea:11:e2:53:a7:48:f3:13:b0:ae:ba:4b:44:c2:2e:41:71:
         77:3f:11:14:d3:4a:53:5f:bf:20:0b:70:83:09:ad:13:83:9c:
         b4:2f:25:ed:78:3f:3b:39:9f:82:c5:9b:d7:f2:53:d1:f6:3b:
         3a:69:94:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:00:54 2026 by rpki-client