Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/aKFXDQJ1g0NDedLCeRK6Ggm9zcw.asa
File:                     aKFXDQJ1g0NDedLCeRK6Ggm9zcw.asa (raw, json)
Hash identifier:          JtafcLYMGEwIcNre5OE2y+aBbH/gXzNhnq+bk0ZNlPU=
Subject key identifier:   68:A1:57:0D:02:75:83:43:43:79:D2:C2:79:12:BA:1A:09:BD:CD:CC
Certificate issuer:       /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial:       01A0451094C8846E79616CDF6974081EAA31
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/aKFXDQJ1g0NDedLCeRK6Ggm9zcw.asa
Signing time:             Thu 27 Aug 2026 21:11:49 +0000
ASPA not before:          Thu 27 Aug 2026 21:11:49 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            197959
Providers:                AS: 6939
                          AS: 35661
                          AS: 52025
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Sep 2026 21:04:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:45:10:94:c8:84:6e:79:61:6c:df:69:74:08:1e:aa:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
        Validity
            Not Before: Aug 27 21:11:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=68a1570d027583434379d2c27912ba1a09bdcdcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a0:43:97:23:f1:2e:1b:40:a0:06:58:e4:6b:
                    8e:cd:ee:d1:5d:c8:f9:af:42:57:bf:c6:b6:47:78:
                    bc:6e:57:f7:9e:8f:90:79:43:b2:1f:eb:17:76:ad:
                    9b:e4:fd:38:35:d9:6d:9d:c8:69:75:5f:12:83:54:
                    cd:3e:c5:e0:d0:83:6f:6b:52:2f:a2:f6:40:32:60:
                    3e:c7:6f:4c:b5:a9:72:9c:3e:3e:84:3a:12:2d:f1:
                    60:98:d8:1d:57:d6:3b:91:c2:2b:76:34:ed:63:2d:
                    ca:7d:cb:2b:0b:27:b9:4b:75:34:22:85:25:cb:6d:
                    d4:bb:0e:3a:7d:77:65:5f:ef:d7:ee:ca:4e:91:28:
                    ab:3e:d1:6b:96:24:33:d3:49:c7:ba:8b:83:ba:14:
                    b7:cc:60:92:c1:e0:c4:48:c9:4e:17:5b:cc:3c:ff:
                    a8:30:7d:4c:8b:c8:67:d2:70:3b:dc:04:f9:91:24:
                    ad:5a:4b:3b:4d:d6:8a:31:1e:68:26:c4:0d:2b:74:
                    2a:88:61:66:64:17:eb:6f:10:9c:05:26:6f:e8:e5:
                    fe:80:ab:05:06:05:16:7a:28:3d:0f:aa:aa:d2:9a:
                    6b:a9:dd:61:d2:41:34:68:f8:97:2c:97:46:c1:ef:
                    e7:98:6d:58:7f:3e:96:21:90:3a:3f:13:a7:55:13:
                    f7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A1:57:0D:02:75:83:43:43:79:D2:C2:79:12:BA:1A:09:BD:CD:CC
            X509v3 Authority Key Identifier:
                keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/aKFXDQJ1g0NDedLCeRK6Ggm9zcw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197959

    Signature Algorithm: sha256WithRSAEncryption
         1e:f9:cf:4c:0f:9c:90:a4:32:99:45:4a:ae:4c:3c:ad:8e:b3:
         13:de:b8:65:f5:19:4d:90:6d:db:75:59:92:3d:0d:de:e0:78:
         b5:d5:a7:00:7e:39:4e:65:93:7b:0e:09:9b:10:96:0e:6d:d8:
         0a:58:24:fb:96:30:15:0e:e1:4b:70:d8:0e:ce:ce:85:9f:91:
         76:b1:b0:31:9e:e5:84:30:91:b1:3c:24:f9:98:dc:0d:fd:36:
         ab:39:ef:77:1c:9e:c0:8c:1b:bb:bc:b6:67:2d:95:4b:60:c0:
         65:e7:bb:ec:f5:ca:76:0d:34:b5:29:29:84:de:4e:ed:34:f1:
         80:4e:05:58:da:b4:84:16:f2:d2:24:9f:8d:69:43:01:87:45:
         3a:e7:85:b6:52:6e:0a:70:86:22:7d:21:a9:8f:e6:51:ba:05:
         f6:9e:15:44:c7:5d:c1:48:ca:71:46:c1:56:b2:32:50:1b:39:
         7d:7e:fd:1b:7e:77:9b:5b:73:cb:04:e0:36:2d:f7:63:11:c7:
         61:21:3c:45:29:d7:0e:0e:60:a7:ec:d3:5e:26:6b:82:5a:68:
         7a:9f:95:ee:99:6d:c0:50:2f:a4:ec:ce:df:61:74:66:85:06:
         8c:ed:9f:25:d2:35:d6:fb:8d:28:95:07:48:d5:17:6d:3a:16:
         94:bf:0b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 06:25:57 2026 by rpki-client