Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/MDiMp5EqheOCmd-Ltueb5OXNt8c.asa
File:                     MDiMp5EqheOCmd-Ltueb5OXNt8c.asa (raw, json)
Hash identifier:          ywSSu+fJFMpdCeXOsIQATlRnAO4cv5ZmuGJZSVI5UeE=
Subject key identifier:   30:38:8C:A7:91:2A:85:E3:82:99:DF:8B:B6:E7:9B:E4:E5:CD:B7:C7
Certificate issuer:       /CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
Certificate serial:       019EF482D48A01CBC1A1FD02476FB29C1341
Authority key identifier: A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/MDiMp5EqheOCmd-Ltueb5OXNt8c.asa
Signing time:             Tue 23 Jun 2026 12:44:35 +0000
ASPA not before:          Tue 23 Jun 2026 12:44:35 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            202945
Providers:                AS: 30781
                          AS: 34019
                          AS: 60132
                          AS: 204092
                          AS: 208627
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:f4:82:d4:8a:01:cb:c1:a1:fd:02:47:6f:b2:9c:13:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
        Validity
            Not Before: Jun 23 12:44:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=30388ca7912a85e38299df8bb6e79be4e5cdb7c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:2e:6b:e2:26:42:ce:14:17:7f:4f:79:a9:3d:
                    50:69:3e:ad:34:c4:6c:b7:da:a3:90:20:68:04:2d:
                    3d:10:36:8a:5f:b4:35:03:32:9d:2c:f3:39:0a:4e:
                    4b:a5:cc:6a:da:76:bd:1a:cb:bf:5e:fe:5e:2f:7c:
                    99:b0:e2:c6:f2:e9:f9:3e:4e:bb:29:84:09:24:b4:
                    3b:6b:ad:25:53:72:51:63:56:8c:79:40:31:b7:99:
                    7c:6d:bb:c3:c9:65:a8:fe:cd:46:8b:8c:aa:97:c5:
                    5f:56:f5:d8:7b:48:36:9e:f9:8a:94:08:d1:93:4c:
                    45:63:ce:f9:6f:b7:d7:32:17:91:7f:cb:ad:b1:2d:
                    51:a6:7b:b8:e7:f0:cd:92:6b:cc:b4:d5:32:31:ab:
                    54:aa:cf:69:3f:76:a0:8a:3d:d2:45:1c:7f:7d:ae:
                    63:2d:bf:9b:1a:db:8d:aa:e9:90:f1:5a:12:ad:2f:
                    4c:ab:a4:90:ee:76:53:49:b4:49:d6:af:18:2a:fb:
                    87:bf:b5:c1:3f:34:c5:23:70:4e:f0:80:b2:24:b7:
                    46:f0:dd:27:33:9a:9c:c9:f8:1a:02:15:79:05:28:
                    42:0b:79:47:b2:5a:bd:5b:16:51:cd:bd:06:e0:1c:
                    49:c6:6b:8c:de:a5:29:01:da:f0:39:a0:b4:6a:9d:
                    5f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:38:8C:A7:91:2A:85:E3:82:99:DF:8B:B6:E7:9B:E4:E5:CD:B7:C7
            X509v3 Authority Key Identifier:
                keyid:A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/MDiMp5EqheOCmd-Ltueb5OXNt8c.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202945

    Signature Algorithm: sha256WithRSAEncryption
         e6:2b:49:9f:fd:11:d5:4d:32:ce:13:14:14:51:c7:41:d0:9f:
         d5:20:f0:05:d7:b5:b8:7e:32:43:00:6f:b5:12:23:43:27:e7:
         c9:47:6b:74:bd:7d:e9:57:69:ca:e9:03:a1:0d:c3:81:ff:62:
         28:a5:a6:ff:44:be:3d:de:e9:42:c4:9b:04:3d:8b:3b:3c:39:
         24:1d:d3:98:9e:e8:7b:48:0e:ea:67:f3:df:28:c0:2f:fc:95:
         90:76:8c:ec:29:b8:dd:c9:67:a2:09:e2:87:03:a7:e2:ef:1e:
         a5:8e:09:e6:58:1e:58:20:50:bc:26:10:58:91:cf:40:7c:f7:
         8b:7b:5a:6f:d2:61:4d:2f:d8:08:d9:3c:fa:6f:da:de:46:41:
         08:73:c2:84:c7:b1:83:f5:f6:c6:d0:34:e3:5a:a2:af:f6:e0:
         d3:95:5c:17:94:61:cb:4d:6d:00:10:73:7d:8e:20:cd:b1:3d:
         c7:6a:69:1e:48:14:ed:8c:84:e2:e4:5e:04:1f:8f:0e:ba:49:
         68:bd:2b:fa:0f:b1:77:95:be:1f:9f:77:c1:bd:2b:fc:b5:20:
         cb:0e:c0:92:95:07:16:88:59:e4:7c:16:c8:aa:3a:10:46:95:
         d1:17:af:e5:6b:f9:21:d8:dc:cf:c5:b6:4d:6e:9e:4c:88:d4:
         5b:ed:87:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 09:33:55 2026 by rpki-client