Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/i-EtNF_kbxrqPtcOw0wZyikQw64.asa
File:                     i-EtNF_kbxrqPtcOw0wZyikQw64.asa (raw, json)
Hash identifier:          fQ3Bs2aBwCwhKkRI7k0HC8Xwpc6RFlI6Vun+oYE/J7A=
Subject key identifier:   8B:E1:2D:34:5F:E4:6F:1A:EA:3E:D7:0E:C3:4C:19:CA:29:10:C3:AE
Certificate issuer:       /CN=66feef09c450990af34779ce701be6cd54b3d924
Certificate serial:       019EFE6BBE8A0516C9CA87A4426992E4EBE1
Authority key identifier: 66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/i-EtNF_kbxrqPtcOw0wZyikQw64.asa
Signing time:             Thu 25 Jun 2026 10:55:34 +0000
ASPA not before:          Thu 25 Jun 2026 10:55:34 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            201532
Providers:                AS: 35179
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fe:6b:be:8a:05:16:c9:ca:87:a4:42:69:92:e4:eb:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66feef09c450990af34779ce701be6cd54b3d924
        Validity
            Not Before: Jun 25 10:55:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8be12d345fe46f1aea3ed70ec34c19ca2910c3ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6d:d9:29:0a:61:12:63:df:ce:a7:a6:a4:94:
                    90:99:e4:45:c1:90:9e:4c:3b:a4:8b:42:ae:9e:d0:
                    a5:52:4c:46:3d:45:82:6a:6d:c9:d2:8a:6b:a2:c3:
                    1d:dc:9b:4b:80:19:58:cb:d6:61:fa:fb:43:02:3e:
                    ec:50:ee:ac:ef:95:f0:bd:72:b0:b1:23:1a:24:d6:
                    ee:ee:24:96:60:9e:c6:d8:f0:ba:2e:35:1a:65:8e:
                    75:f1:f9:9f:83:91:20:e8:b4:23:c3:d9:b2:93:25:
                    3c:b9:53:e0:dd:36:b1:f7:29:97:2c:fc:51:77:27:
                    10:44:e7:aa:7f:20:ac:31:ce:16:c1:72:28:33:96:
                    27:8d:56:7d:ee:6c:b2:94:82:a8:62:d3:47:fe:0a:
                    dc:de:19:da:8e:fb:93:b1:ad:a0:7d:e4:97:9d:63:
                    3e:b5:5f:d0:44:ba:21:ad:47:f2:8e:ba:20:7e:12:
                    e9:7e:7a:90:0a:4b:aa:c0:39:e9:43:23:cb:af:15:
                    8b:41:25:94:e6:f2:2d:9d:3c:26:c5:88:fd:99:10:
                    04:2a:f2:12:96:02:44:98:04:7f:5e:7e:2c:71:82:
                    7e:6f:8c:01:01:0a:37:2e:f5:a4:f6:0b:1d:1e:9e:
                    23:23:5f:14:55:12:dd:2f:09:d7:e8:72:53:33:0b:
                    2f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E1:2D:34:5F:E4:6F:1A:EA:3E:D7:0E:C3:4C:19:CA:29:10:C3:AE
            X509v3 Authority Key Identifier:
                keyid:66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/i-EtNF_kbxrqPtcOw0wZyikQw64.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201532

    Signature Algorithm: sha256WithRSAEncryption
         8a:05:3b:41:a9:75:b5:77:db:1f:7c:02:ee:80:2a:51:4d:05:
         0d:c8:70:26:74:fc:64:96:d0:ac:fe:5d:9b:95:d5:9d:bd:b8:
         a1:5b:a2:c9:60:a7:4f:38:1d:37:09:78:f7:63:50:78:4a:db:
         1f:bf:7b:98:52:8e:ec:ce:96:1f:45:2c:84:4f:57:27:10:c0:
         97:e8:a7:50:a9:79:ff:6d:63:90:0d:3d:07:62:fe:1d:2d:fb:
         1f:35:b4:1c:53:e6:8e:e0:b8:1c:30:3b:7b:97:6b:60:97:89:
         13:33:2b:fd:3b:fe:6e:27:5f:0e:81:6f:ec:be:a6:8a:5a:97:
         06:f7:0f:09:ab:9e:57:f6:0e:bf:24:fb:6a:59:bb:35:90:56:
         3a:88:40:d7:23:74:68:54:94:e3:ca:e3:f1:60:e6:9c:9c:5f:
         28:c7:d8:42:93:95:5b:41:5c:8b:ae:b3:18:1e:62:19:88:be:
         16:90:6b:66:ad:50:cf:15:6e:54:96:22:97:f8:c9:74:d6:12:
         a8:7c:46:05:e6:f1:d8:d7:87:ec:00:d7:4e:48:a2:d7:c0:8c:
         21:05:84:47:ac:d0:45:ec:b5:a1:dd:47:aa:fb:1b:80:a5:a7:
         34:37:40:07:8b:00:7d:5c:ae:c8:25:a9:ba:c9:85:2d:53:d5:
         44:7e:51:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 09:34:29 2026 by rpki-client