Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/pjDwdQHNJVDo70btJAsKcL2t8Wc.asa
File:                     pjDwdQHNJVDo70btJAsKcL2t8Wc.asa (raw, json)
Hash identifier:          9hs9uCk4t0lY0AxWzX7WklKc5C2LiY8Jejt1rMjXdhc=
Subject key identifier:   A6:30:F0:75:01:CD:25:50:E8:EF:46:ED:24:0B:0A:70:BD:AD:F1:67
Certificate issuer:       /CN=8cbb196dcb5b41b2c35f68cdc3d08a723f8e30a7
Certificate serial:       019F2369020FF6AF55E03AB38925AE32E06C
Authority key identifier: 8C:BB:19:6D:CB:5B:41:B2:C3:5F:68:CD:C3:D0:8A:72:3F:8E:30:A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jLsZbctbQbLDX2jNw9CKcj-OMKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/pjDwdQHNJVDo70btJAsKcL2t8Wc.asa
Signing time:             Thu 02 Jul 2026 15:18:32 +0000
ASPA not before:          Thu 02 Jul 2026 15:18:32 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            210812
Providers:                AS: 31898
                          AS: 44355
                          AS: 47272
                          AS: 209735
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/jLsZbctbQbLDX2jNw9CKcj-OMKc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/jLsZbctbQbLDX2jNw9CKcj-OMKc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jLsZbctbQbLDX2jNw9CKcj-OMKc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:69:02:0f:f6:af:55:e0:3a:b3:89:25:ae:32:e0:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cbb196dcb5b41b2c35f68cdc3d08a723f8e30a7
        Validity
            Not Before: Jul  2 15:18:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a630f07501cd2550e8ef46ed240b0a70bdadf167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:26:b1:54:2e:09:ff:cc:ff:36:d2:cd:ea:fb:
                    f9:15:61:b6:8b:46:06:97:c2:4d:7d:f7:6f:2f:db:
                    b3:c1:b0:da:64:71:7a:70:57:ed:08:02:4b:57:77:
                    7c:98:5f:0d:a7:dd:81:26:ee:50:8b:d0:50:e2:68:
                    fe:77:3c:d5:15:8f:78:7a:b9:44:e1:be:f1:f7:9b:
                    28:83:d9:13:0c:d2:8a:59:f4:b5:2b:c0:ac:a6:14:
                    25:04:73:18:71:43:f4:ba:1d:5a:88:9c:8e:76:e4:
                    78:7d:41:43:fe:8d:bb:43:07:2d:1a:f7:9a:15:69:
                    88:26:df:78:fc:c3:e8:73:0c:c5:d5:00:c9:eb:50:
                    87:c6:7e:7e:cd:09:36:bb:94:94:81:7a:03:1c:af:
                    9f:18:15:b7:5c:16:c3:e1:da:30:b8:c3:fd:1d:e8:
                    47:4c:21:dc:2a:95:61:e5:50:af:2b:99:03:e5:82:
                    bc:65:f9:81:88:96:49:ae:cf:ba:80:ad:5e:11:c4:
                    a8:c0:49:1b:16:50:1b:59:4d:7c:4e:3c:63:15:05:
                    ef:8a:2b:51:58:2d:7f:5a:e2:ad:15:16:ec:4d:43:
                    13:d0:21:70:dc:6a:6b:ea:a6:58:85:0b:f6:09:dc:
                    f6:fd:ef:dc:36:b4:97:64:93:57:4c:cf:90:b4:5a:
                    89:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:30:F0:75:01:CD:25:50:E8:EF:46:ED:24:0B:0A:70:BD:AD:F1:67
            X509v3 Authority Key Identifier:
                keyid:8C:BB:19:6D:CB:5B:41:B2:C3:5F:68:CD:C3:D0:8A:72:3F:8E:30:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jLsZbctbQbLDX2jNw9CKcj-OMKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/pjDwdQHNJVDo70btJAsKcL2t8Wc.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/jLsZbctbQbLDX2jNw9CKcj-OMKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210812

    Signature Algorithm: sha256WithRSAEncryption
         a1:93:8a:53:90:10:02:d5:03:5f:b3:5a:8f:3a:32:d7:c1:d9:
         51:a2:25:37:96:d8:8e:0a:30:3f:1d:42:3f:d2:8a:cf:4b:f6:
         19:6c:0b:40:04:80:07:e3:15:19:1d:aa:29:cf:b5:54:7f:d0:
         0a:d3:ac:0f:3a:4c:4b:db:2d:09:58:a0:72:36:64:bb:59:ef:
         99:37:33:55:42:97:29:26:be:1b:f0:f5:70:0f:8f:95:96:14:
         1a:9c:4b:dc:9f:00:9c:a2:02:6a:f2:7c:52:96:16:4c:50:8a:
         1e:67:05:23:a9:32:d1:bc:32:db:d4:ff:b7:0d:7e:ac:1f:8c:
         7f:18:a1:9f:6f:9f:2b:b5:dd:51:18:88:92:79:e5:dc:89:72:
         fb:ae:06:6a:e8:45:ab:b0:2b:de:45:e8:99:63:c0:97:79:0e:
         e9:46:24:97:45:37:76:88:56:f7:c7:0f:ea:00:f5:f6:83:5c:
         9a:9f:6f:5c:ae:57:a4:1e:0f:8e:7a:16:39:a5:4e:38:c3:7c:
         aa:af:ac:c6:da:03:22:dc:33:22:fd:d2:07:af:6d:aa:a9:ae:
         32:d9:27:93:42:9e:53:c3:85:93:c8:5a:3c:5a:44:74:9e:38:
         da:67:c5:f9:bd:83:ff:ec:97:bf:19:7c:7a:6a:1c:a5:97:4b:
         1d:6c:24:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:56:31 2026 by rpki-client