Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/350edf-099b-4549-b987-823db1b85bca/1/fNLPZyr7tjwkFb0_nEhTcM4W4zA.asa
File:                     fNLPZyr7tjwkFb0_nEhTcM4W4zA.asa (raw, json)
Hash identifier:          H/Qtg2MVE67F1b0Jil386VOnCKa4In18ScPS/BN4YB8=
Subject key identifier:   7C:D2:CF:67:2A:FB:B6:3C:24:15:BD:3F:9C:48:53:70:CE:16:E3:30
Certificate issuer:       /CN=6998c30779e65d37a7614541b9aae3bb32b42c66
Certificate serial:       019FE50B9C11FC82E9E990019BB28C0D9EBE
Authority key identifier: 69:98:C3:07:79:E6:5D:37:A7:61:45:41:B9:AA:E3:BB:32:B4:2C:66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aZjDB3nmXTenYUVBuarjuzK0LGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/350edf-099b-4549-b987-823db1b85bca/1/fNLPZyr7tjwkFb0_nEhTcM4W4zA.asa
Signing time:             Sun 09 Aug 2026 05:42:51 +0000
ASPA not before:          Sun 09 Aug 2026 05:42:51 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214575
Providers:                AS: 6939
                          AS: 17408
                          AS: 17433
                          AS: 41051
                          AS: 44324
                          AS: 53667
                          AS: 53808
                          AS: 209533
                          AS: 209554
                          AS: 212895
                          AS: 214677
                          AS: 215362
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/350edf-099b-4549-b987-823db1b85bca/1/aZjDB3nmXTenYUVBuarjuzK0LGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/350edf-099b-4549-b987-823db1b85bca/1/aZjDB3nmXTenYUVBuarjuzK0LGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aZjDB3nmXTenYUVBuarjuzK0LGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 23:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:e5:0b:9c:11:fc:82:e9:e9:90:01:9b:b2:8c:0d:9e:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6998c30779e65d37a7614541b9aae3bb32b42c66
        Validity
            Not Before: Aug  9 05:42:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7cd2cf672afbb63c2415bd3f9c485370ce16e330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:12:63:55:9a:5b:ab:a1:a3:90:63:e1:20:dd:
                    e8:b6:b9:b0:ce:94:f3:71:2b:74:9b:5a:00:00:54:
                    14:39:10:85:f5:48:29:97:1f:48:25:cc:ca:fa:77:
                    23:b1:c2:07:04:e5:83:9e:a4:bf:ff:80:ef:39:43:
                    24:aa:96:3f:2a:76:fb:9d:2b:ec:b1:f4:d7:56:b8:
                    00:58:a7:29:48:36:77:e1:6c:d3:8d:2d:fd:49:ce:
                    9f:f8:23:fc:a5:f5:8b:28:18:c1:2a:d7:2f:4a:3a:
                    4a:78:3e:cf:07:a1:ca:1f:0f:1d:a1:cc:8b:2f:c0:
                    f2:38:a9:25:ba:88:2f:3a:0d:d6:60:e3:ee:69:25:
                    fe:9f:20:e6:0a:f2:4e:59:3c:2e:24:dc:b6:ec:d3:
                    b9:8c:4d:ad:7e:71:d2:0c:b4:90:ef:85:d1:b4:ba:
                    05:fe:d7:33:54:a7:fe:62:fe:56:65:ff:75:bb:50:
                    b0:dc:3e:26:c9:7a:38:0f:97:a9:f8:fc:6e:ed:55:
                    cc:f3:28:42:19:a0:b1:3a:ae:ba:d7:34:5d:be:3a:
                    3b:7a:61:1e:37:be:a0:66:80:a2:b6:4b:c5:c0:ad:
                    e8:52:67:5d:ad:e3:ee:98:fe:b8:5f:01:65:0e:aa:
                    6a:cc:1e:1f:73:f4:4c:2d:2b:52:34:b5:c4:f0:d6:
                    cc:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D2:CF:67:2A:FB:B6:3C:24:15:BD:3F:9C:48:53:70:CE:16:E3:30
            X509v3 Authority Key Identifier:
                keyid:69:98:C3:07:79:E6:5D:37:A7:61:45:41:B9:AA:E3:BB:32:B4:2C:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZjDB3nmXTenYUVBuarjuzK0LGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/350edf-099b-4549-b987-823db1b85bca/1/fNLPZyr7tjwkFb0_nEhTcM4W4zA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/350edf-099b-4549-b987-823db1b85bca/1/aZjDB3nmXTenYUVBuarjuzK0LGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214575

    Signature Algorithm: sha256WithRSAEncryption
         a0:fe:b0:03:40:90:8c:18:ac:5d:e1:d5:93:ef:1a:b2:ae:8d:
         7c:a0:65:18:bc:df:1c:80:fc:34:bf:fb:c3:81:41:4c:cf:0d:
         2f:2e:3e:08:af:11:2d:8d:3c:2d:d6:72:aa:32:b3:20:38:ec:
         95:ad:71:26:6d:d6:0b:d0:5e:41:4c:26:75:17:fa:ce:90:24:
         51:86:f2:c1:58:8f:94:49:7f:94:9a:5a:21:25:ed:e1:2f:f5:
         29:9f:c8:22:0b:f8:a6:0d:1f:85:57:82:a8:64:a1:2c:ae:45:
         94:48:e6:ab:40:fb:cb:d5:8d:0e:f9:04:30:36:35:08:89:44:
         51:ee:b6:b8:45:bc:99:1d:1e:80:59:7f:bb:32:3c:91:3b:60:
         cb:dd:72:0a:5e:b8:c4:9d:b5:3f:e5:15:4a:e9:c2:04:ba:3e:
         f6:af:f2:2a:6f:30:67:b7:cc:f3:35:a5:c5:76:f6:4d:53:70:
         b2:6f:c9:bb:71:7b:b9:03:fb:a5:ed:6f:6f:29:af:76:0a:3a:
         f6:79:88:9c:e6:09:80:46:d3:b6:58:c0:73:cf:09:56:21:c8:
         25:72:22:00:4f:fa:50:86:a9:ca:bf:8f:02:2d:a3:58:9b:df:
         ff:8d:44:64:4a:23:59:82:c7:ff:f8:11:53:ed:6b:87:07:67:
         69:0b:a9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:49:39 2026 by rpki-client