Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/6c0622-2000-4e4e-aac2-f6b018e7c80a/1/Xw3dQirRAOok3CTP82mGyXKPmok.asa
File:                     Xw3dQirRAOok3CTP82mGyXKPmok.asa (raw, json)
Hash identifier:          aFLFSLfyBSfcQzE9nVtp1dDJF959Pdr2S4U/6m0srr8=
Subject key identifier:   5F:0D:DD:42:2A:D1:00:EA:24:DC:24:CF:F3:69:86:C9:72:8F:9A:89
Certificate issuer:       /CN=cedd23bb8e38d09774633cb0db42e5a20d7e1767
Certificate serial:       01A135D8EC577FAFEA89519ACD3ECBB49C0D
Authority key identifier: CE:DD:23:BB:8E:38:D0:97:74:63:3C:B0:DB:42:E5:A2:0D:7E:17:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zt0ju4440Jd0Yzyw20Llog1-F2c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/6c0622-2000-4e4e-aac2-f6b018e7c80a/1/Xw3dQirRAOok3CTP82mGyXKPmok.asa
Signing time:             Tue 13 Oct 2026 15:19:30 +0000
ASPA not before:          Tue 13 Oct 2026 15:19:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            207330
Providers:                AS: 208734
                          AS: 213295
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/6c0622-2000-4e4e-aac2-f6b018e7c80a/1/zt0ju4440Jd0Yzyw20Llog1-F2c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/6c0622-2000-4e4e-aac2-f6b018e7c80a/1/zt0ju4440Jd0Yzyw20Llog1-F2c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zt0ju4440Jd0Yzyw20Llog1-F2c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Oct 2026 00:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:35:d8:ec:57:7f:af:ea:89:51:9a:cd:3e:cb:b4:9c:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cedd23bb8e38d09774633cb0db42e5a20d7e1767
        Validity
            Not Before: Oct 13 15:19:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5f0ddd422ad100ea24dc24cff36986c9728f9a89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7f:f0:ce:b0:0a:99:b6:0c:8f:b4:74:2e:87:
                    a7:d8:4d:7f:e2:02:96:ad:aa:2e:e2:50:59:24:5d:
                    ea:34:3a:d9:0c:8c:7d:f6:56:e5:37:7d:d2:48:ee:
                    ad:17:92:6e:15:f5:ab:40:78:ed:d1:f6:a3:f7:27:
                    85:99:9c:ef:0d:b1:d0:7b:57:c5:5c:da:84:84:34:
                    c7:72:44:c1:1b:ee:02:3b:2c:66:2d:0f:7b:ae:5e:
                    66:c0:32:8b:58:54:9e:78:96:c8:62:60:4a:b8:1a:
                    c7:23:1b:ea:a5:bd:87:96:32:ba:f3:09:32:75:c3:
                    00:29:5a:03:d1:48:e9:5d:44:62:e3:af:7a:13:41:
                    dc:de:6c:2a:25:94:a8:56:3b:33:71:9e:1c:ad:c5:
                    10:0b:85:fc:4f:c9:bb:31:31:b9:ce:15:2c:eb:d7:
                    b1:d4:4e:da:64:73:54:7d:3e:77:7f:b4:a0:23:3e:
                    fa:9a:5a:12:50:72:c7:8e:dd:61:72:b9:c4:a4:a8:
                    d8:b9:72:1a:c4:5a:36:a1:67:dc:dd:66:2f:3d:ce:
                    ac:b5:2e:46:f5:16:1f:23:7e:d9:cb:86:8b:4e:e0:
                    e0:c1:56:4e:42:d7:ea:af:ec:04:a0:83:3a:57:f1:
                    c7:57:84:11:d6:da:ec:93:52:32:06:34:3d:67:07:
                    24:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:0D:DD:42:2A:D1:00:EA:24:DC:24:CF:F3:69:86:C9:72:8F:9A:89
            X509v3 Authority Key Identifier:
                keyid:CE:DD:23:BB:8E:38:D0:97:74:63:3C:B0:DB:42:E5:A2:0D:7E:17:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zt0ju4440Jd0Yzyw20Llog1-F2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/6c0622-2000-4e4e-aac2-f6b018e7c80a/1/Xw3dQirRAOok3CTP82mGyXKPmok.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/6c0622-2000-4e4e-aac2-f6b018e7c80a/1/zt0ju4440Jd0Yzyw20Llog1-F2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207330

    Signature Algorithm: sha256WithRSAEncryption
         93:b7:06:dc:8f:b4:40:4c:e0:61:33:b8:e0:23:d4:41:c8:94:
         6d:04:75:58:85:c7:1a:8b:d5:d5:a6:7b:04:ce:bb:e2:ac:49:
         cd:22:9b:cd:f3:8e:c8:0b:af:29:22:55:65:4e:46:50:c1:7d:
         28:35:04:a1:07:3a:35:ef:e8:00:b0:30:42:a4:c5:b3:67:6d:
         38:33:b0:47:1b:d1:7e:75:50:80:4e:b8:ec:42:77:7a:67:fd:
         83:dc:99:b3:9a:93:7e:78:9d:dc:0c:19:2c:99:a2:d1:48:24:
         5e:22:32:4a:78:24:24:10:27:41:8e:35:e0:8d:97:91:37:c4:
         1b:26:52:16:a8:06:18:94:c2:fb:b9:c1:f1:1d:21:4e:56:2f:
         6d:8a:03:ff:35:26:87:11:63:22:d2:fc:e2:46:53:36:a1:d1:
         fb:cd:b3:21:dd:a0:bf:6b:2b:5b:83:51:e7:a0:52:01:af:5b:
         72:d5:ca:94:ca:8c:48:5e:dc:ed:f8:47:8c:b1:90:ca:f9:83:
         4c:98:bd:a0:4b:b7:94:c9:6b:68:f2:47:51:17:c2:84:5b:75:
         3c:d1:ce:77:63:e1:cd:14:02:c3:87:91:d9:bd:ae:b4:c7:50:
         66:ee:f2:ba:2f:0c:fd:19:0d:ef:8f:df:26:03:79:0c:84:5c:
         85:ff:da:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 07:12:23 2026 by rpki-client