Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/oIK2Z-WZccXvLr2RG9gLfuLDl6A.asa
File:                     oIK2Z-WZccXvLr2RG9gLfuLDl6A.asa (raw, json)
Hash identifier:          mE+KHmijj5W8A3iZKivxhsc/epFskqz+kgA1sCsCW3M=
Subject key identifier:   A0:82:B6:67:E5:99:71:C5:EF:2E:BD:91:1B:D8:0B:7E:E2:C3:97:A0
Certificate issuer:       /CN=02930f8c688c04d17433a2b9c7249bc625bce316
Certificate serial:       01A08A20E8C66422D11D97C80DB8635E5095
Authority key identifier: 02:93:0F:8C:68:8C:04:D1:74:33:A2:B9:C7:24:9B:C6:25:BC:E3:16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/oIK2Z-WZccXvLr2RG9gLfuLDl6A.asa
Signing time:             Thu 10 Sep 2026 07:03:27 +0000
ASPA not before:          Thu 10 Sep 2026 07:03:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            196709
Providers:                AS: 49800
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Sep 2026 16:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:20:e8:c6:64:22:d1:1d:97:c8:0d:b8:63:5e:50:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02930f8c688c04d17433a2b9c7249bc625bce316
        Validity
            Not Before: Sep 10 07:03:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a082b667e59971c5ef2ebd911bd80b7ee2c397a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:06:f2:63:8d:4c:f7:59:c2:f2:fb:77:f6:c5:
                    61:07:5b:f8:68:a3:a2:1f:d4:a0:a8:0e:2f:75:5d:
                    b0:dd:93:a7:66:a1:1c:6c:93:a0:90:f4:2c:bb:c2:
                    b3:20:02:f8:ca:1f:98:16:6f:3e:bd:cd:be:bd:1d:
                    6d:fa:32:11:94:58:44:c7:b2:44:5f:7c:3c:b2:5e:
                    c5:66:5b:9c:ce:bb:ab:52:2b:92:75:22:87:be:59:
                    22:b6:52:6e:27:e5:d0:ff:73:35:e1:e6:6f:82:44:
                    f3:86:b8:8a:56:83:16:df:66:a0:d7:99:cc:81:f7:
                    79:28:71:0d:ed:af:67:d4:77:fe:67:87:f2:33:41:
                    77:35:02:96:cf:56:50:6b:56:40:3b:70:bf:8e:6e:
                    d2:26:c4:1d:fa:99:a8:74:02:96:ad:dd:27:e8:2a:
                    bf:90:3a:82:c5:61:19:cb:b9:eb:3a:f4:3e:75:26:
                    e1:3b:d1:cc:0d:4a:46:3d:0d:84:67:2d:05:fc:40:
                    a1:28:0f:27:aa:60:05:2e:f4:2e:0a:14:ba:f7:e3:
                    cb:f0:9e:47:ab:8b:db:42:c8:6c:b5:f0:5e:6d:44:
                    ca:b1:98:ff:21:9c:56:b8:51:35:64:71:b4:e3:3e:
                    60:96:af:57:d2:52:f4:5e:23:88:ab:75:77:7c:38:
                    bc:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:82:B6:67:E5:99:71:C5:EF:2E:BD:91:1B:D8:0B:7E:E2:C3:97:A0
            X509v3 Authority Key Identifier:
                keyid:02:93:0F:8C:68:8C:04:D1:74:33:A2:B9:C7:24:9B:C6:25:BC:E3:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/oIK2Z-WZccXvLr2RG9gLfuLDl6A.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  196709

    Signature Algorithm: sha256WithRSAEncryption
         20:22:dd:44:34:8d:3c:3b:ae:47:17:0d:17:9e:fe:65:d3:ce:
         00:74:59:da:35:fd:d1:89:62:64:68:4c:1a:ef:c7:8c:bb:ce:
         37:45:4c:a9:1a:42:f3:16:d5:3d:d2:34:3c:4a:f3:1a:6f:2c:
         ab:a1:3d:90:0e:32:8a:46:87:89:4e:8c:6d:87:5f:84:48:2c:
         64:a4:e7:d5:56:79:68:a2:7b:3a:e9:46:aa:8e:28:c3:70:14:
         b0:eb:12:fc:95:fc:87:b8:74:4e:05:b9:c9:35:58:17:b9:ce:
         a7:b0:7c:ad:7b:fd:7f:d2:af:2f:22:1b:1d:99:c9:71:c8:6a:
         15:5e:a1:f9:97:be:eb:d4:e9:94:53:f1:8a:a8:7c:c6:03:3b:
         27:80:5e:52:0b:05:13:3d:4e:75:86:94:f9:3e:00:b7:b7:2a:
         5f:1f:dd:1a:83:f2:99:fc:97:0f:1b:3c:a8:76:9e:72:95:7e:
         ba:20:d9:f3:33:84:a2:ea:ab:c4:0d:2b:a8:cf:a3:61:ed:6a:
         b0:2a:d1:a8:9a:cb:77:85:f3:93:80:30:2b:96:70:85:8b:3e:
         03:3d:c6:42:8b:3a:c5:4b:0f:70:db:c9:9a:e5:51:c6:91:08:
         b4:26:49:e4:f2:8a:80:2e:79:1a:64:7c:5e:8d:bb:39:e5:94:
         b2:76:1e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 02:57:12 2026 by rpki-client