Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/S9YM-g2WnmeVKMvqwcx7fs6MlSo.asa
File:                     S9YM-g2WnmeVKMvqwcx7fs6MlSo.asa (raw, json)
Hash identifier:          b3P+Vt9qPAdwW/UOZpdus/kmkrfhIAwmiOm6TTdFFgQ=
Subject key identifier:   4B:D6:0C:FA:0D:96:9E:67:95:28:CB:EA:C1:CC:7B:7E:CE:8C:95:2A
Certificate issuer:       /CN=9748828d7b99b0a97017ec26bcbefe96fdbe9579
Certificate serial:       019FC5444CD96B0F25A4E71EBC9C632699DF
Authority key identifier: 97:48:82:8D:7B:99:B0:A9:70:17:EC:26:BC:BE:FE:96:FD:BE:95:79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l0iCjXuZsKlwF-wmvL7-lv2-lXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/S9YM-g2WnmeVKMvqwcx7fs6MlSo.asa
Signing time:             Mon 03 Aug 2026 01:36:55 +0000
ASPA not before:          Mon 03 Aug 2026 01:36:55 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            29432
Providers:                AS: 719
                          AS: 6667
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l0iCjXuZsKlwF-wmvL7-lv2-lXk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:c5:44:4c:d9:6b:0f:25:a4:e7:1e:bc:9c:63:26:99:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9748828d7b99b0a97017ec26bcbefe96fdbe9579
        Validity
            Not Before: Aug  3 01:36:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4bd60cfa0d969e679528cbeac1cc7b7ece8c952a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c9:e6:8e:ed:9e:94:a1:af:0d:09:29:69:ea:
                    fc:36:48:50:7c:3d:a9:12:0c:a6:12:96:72:0c:db:
                    78:14:02:1a:5e:c1:46:83:d3:d4:04:a6:05:76:6c:
                    8f:f0:56:b0:b4:02:8e:6e:08:86:3e:04:85:6f:fc:
                    7a:5f:47:d2:bc:8a:4a:75:e2:b1:29:8f:45:43:01:
                    75:67:2c:13:3d:49:f6:9d:2a:20:3e:09:cb:e9:51:
                    d8:13:8e:21:09:4d:6d:8c:c5:52:12:ab:f1:68:10:
                    33:86:fb:b6:02:4a:b3:3f:63:a2:b4:28:5e:6e:ed:
                    06:ce:67:fc:ad:06:9b:ee:3e:77:ad:15:10:dc:08:
                    8a:e7:09:a1:00:23:34:cd:29:6c:ff:c8:43:ac:24:
                    d4:5c:dd:59:da:2b:ec:e6:68:5a:ad:b3:d8:2a:93:
                    fc:32:f1:85:06:5c:8d:11:d1:ef:87:91:50:3e:d2:
                    90:e0:1e:aa:1b:c6:9c:96:98:af:ca:d4:43:26:d7:
                    6b:8d:57:60:83:6b:96:f6:61:fb:6d:b0:de:38:32:
                    2f:a0:00:d3:26:90:5b:be:05:76:a7:c0:df:66:0b:
                    08:7f:ae:1d:bc:8d:ea:f9:2c:1b:f9:a3:13:9b:55:
                    f0:10:89:78:cf:eb:1d:10:42:89:43:d5:f6:10:79:
                    d0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D6:0C:FA:0D:96:9E:67:95:28:CB:EA:C1:CC:7B:7E:CE:8C:95:2A
            X509v3 Authority Key Identifier:
                keyid:97:48:82:8D:7B:99:B0:A9:70:17:EC:26:BC:BE:FE:96:FD:BE:95:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0iCjXuZsKlwF-wmvL7-lv2-lXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/S9YM-g2WnmeVKMvqwcx7fs6MlSo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  29432

    Signature Algorithm: sha256WithRSAEncryption
         77:d3:09:cb:a7:30:f4:18:01:9b:6a:a2:18:89:77:af:74:7d:
         55:ee:62:c1:d4:a0:9e:a0:bf:a4:77:e7:3c:d1:9b:57:64:dc:
         fc:af:6c:58:ea:16:69:fc:67:d1:e3:07:87:b6:e4:69:70:ae:
         11:32:14:5f:0c:22:b7:d0:14:0b:9b:9a:47:6c:18:c5:f2:e7:
         96:c4:7d:1e:18:40:5a:f0:f5:ad:70:40:e2:41:40:3a:32:4a:
         3f:b1:93:f5:2e:42:88:d5:2c:d9:5d:9d:34:fb:a1:47:e0:d2:
         62:66:8a:5a:95:d5:7a:27:22:9f:3d:14:aa:58:2f:df:64:33:
         7b:cb:85:ab:b6:fd:f0:c1:78:7e:ce:b8:bb:38:93:b5:65:78:
         e3:07:ea:b4:04:bc:da:2d:da:6c:55:94:dc:d8:65:cc:6d:d1:
         1f:2a:03:bd:2d:b4:a5:c1:49:59:af:d9:bc:9c:03:8a:81:98:
         ce:6b:7c:bd:04:dc:54:07:03:33:45:0e:d2:f4:a2:d8:69:64:
         16:26:61:2d:8f:8f:aa:03:4a:85:98:59:ea:e9:4b:60:11:97:
         63:8d:ff:a2:09:67:71:b2:1e:aa:40:56:e9:de:2d:77:c3:ad:
         f5:c0:23:ae:7c:dc:fd:1b:2c:71:f5:4e:b5:e8:14:99:50:a9:
         21:ce:8f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:51:29 2026 by rpki-client