Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/bgMpMI4WldrMWD31yd0aqnCdNoE.asa
File:                     bgMpMI4WldrMWD31yd0aqnCdNoE.asa (raw, json)
Hash identifier:          OqNfRNFZs7Vjw9Lnj9jbn6dEae0oyFdssh6TRGhNAw8=
Subject key identifier:   6E:03:29:30:8E:16:95:DA:CC:58:3D:F5:C9:DD:1A:AA:70:9D:36:81
Certificate issuer:       /CN=427a95d6f91b676b9d71ab8ae11419418de3c30e
Certificate serial:       019FB52D5733D3550DFD51DB50EDAD1DDD71
Authority key identifier: 42:7A:95:D6:F9:1B:67:6B:9D:71:AB:8A:E1:14:19:41:8D:E3:C3:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QnqV1vkbZ2udcauK4RQZQY3jww4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/bgMpMI4WldrMWD31yd0aqnCdNoE.asa
Signing time:             Thu 30 Jul 2026 22:37:55 +0000
ASPA not before:          Thu 30 Jul 2026 22:37:55 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            62379
Providers:                AS: 12389
                          AS: 20764
                          AS: 35598
                          AS: 50509
                          AS: 62255
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QnqV1vkbZ2udcauK4RQZQY3jww4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:b5:2d:57:33:d3:55:0d:fd:51:db:50:ed:ad:1d:dd:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=427a95d6f91b676b9d71ab8ae11419418de3c30e
        Validity
            Not Before: Jul 30 22:37:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6e0329308e1695dacc583df5c9dd1aaa709d3681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bd:22:e9:77:49:03:e9:3f:79:d3:85:5a:ad:
                    eb:b9:15:45:21:cf:8c:ba:00:d1:d7:cc:04:d6:5e:
                    15:c7:ce:49:94:fb:db:c2:1a:68:8c:e5:c4:30:31:
                    7f:6b:37:bf:ec:5c:57:6b:8c:4f:1c:65:eb:8c:72:
                    f0:1a:16:8f:37:fd:9e:f5:f9:8c:1f:d8:c6:67:82:
                    bd:f0:bc:3c:ac:da:25:36:c3:3e:ce:d7:54:ea:86:
                    5a:5f:f9:12:b0:2c:9f:16:65:30:f3:99:fa:82:6b:
                    9f:d6:8d:b4:18:c9:8c:d2:89:5e:56:8e:31:ae:0b:
                    68:a3:34:c9:64:07:1c:e6:cb:47:2f:3d:6f:6e:48:
                    58:e2:0a:68:1b:fb:c9:c8:5a:d8:60:6d:20:55:2e:
                    cc:10:f0:3f:6b:2b:1c:2a:23:10:fe:0e:01:7a:0f:
                    d8:a5:cf:44:2c:30:86:09:81:b0:d0:b0:ca:b9:e9:
                    ff:93:25:08:50:3f:e2:71:8a:b5:47:33:a3:dc:0b:
                    39:fa:a8:13:69:ba:59:76:da:83:9d:37:c7:15:2a:
                    44:d8:2a:ca:3f:8d:d2:5d:9d:79:b5:42:41:69:9a:
                    34:e0:f3:bc:a1:39:7e:08:8e:a6:54:b7:0f:17:f6:
                    a7:35:19:5e:f9:2c:eb:42:11:28:fd:40:ba:49:43:
                    b9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:03:29:30:8E:16:95:DA:CC:58:3D:F5:C9:DD:1A:AA:70:9D:36:81
            X509v3 Authority Key Identifier:
                keyid:42:7A:95:D6:F9:1B:67:6B:9D:71:AB:8A:E1:14:19:41:8D:E3:C3:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnqV1vkbZ2udcauK4RQZQY3jww4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/bgMpMI4WldrMWD31yd0aqnCdNoE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62379

    Signature Algorithm: sha256WithRSAEncryption
         08:29:1e:a3:7f:1c:62:3d:9e:8d:96:34:3f:dd:06:65:43:e3:
         26:4b:1b:18:d4:5d:82:d1:d3:d7:61:c2:2b:d3:80:e5:dc:af:
         cd:00:8a:27:b3:d6:13:8e:09:ad:2b:3a:88:a2:a6:d4:72:af:
         1e:d0:ee:a4:d9:29:08:01:92:25:20:37:5c:63:59:4b:f0:30:
         93:55:3b:32:3b:33:e1:92:7d:12:26:11:3f:c7:c3:90:70:01:
         f9:ca:11:c3:73:76:25:19:ef:63:f6:dd:7b:97:c4:e6:e6:e9:
         5d:f1:c8:5e:c8:c7:57:43:fa:6e:98:46:3f:76:5a:02:5e:c7:
         c7:7a:a3:5a:4b:c1:6c:eb:2d:fb:13:f2:af:6a:05:ac:7d:dc:
         1b:a7:16:7b:d3:38:21:fc:3e:c8:9b:90:0e:11:c5:d6:59:cc:
         cc:f9:ea:5e:16:24:17:6e:07:a2:b5:44:4a:43:61:83:26:fa:
         90:6e:ff:e2:2d:1d:a6:35:1f:bd:11:17:eb:8f:00:7b:0f:32:
         6e:f1:d5:67:f6:4b:d1:c6:97:af:1a:52:1e:2c:ac:ad:5b:1e:
         90:a6:f3:0d:36:b3:39:3c:83:b9:bf:f8:cb:a9:8d:18:a9:2f:
         18:46:4c:f4:11:cd:71:8e:d8:05:c2:da:69:ec:01:24:4e:0d:
         b1:0d:ac:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:51:33 2026 by rpki-client