Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/OCWwmflcXZ-MpitkN34g33uhezE.asa
File:                     OCWwmflcXZ-MpitkN34g33uhezE.asa (raw, json)
Hash identifier:          1YUAAVLF+tPMxuueJPJ05bKJupv/hD23+u5f4EdrtuI=
Subject key identifier:   38:25:B0:99:F9:5C:5D:9F:8C:A6:2B:64:37:7E:20:DF:7B:A1:7B:31
Certificate issuer:       /CN=5643415c22e141972c0d7e76c24e88b22427b024
Certificate serial:       019F19015C0B289C992CFE673E133B1578CC
Authority key identifier: 56:43:41:5C:22:E1:41:97:2C:0D:7E:76:C2:4E:88:B2:24:27:B0:24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/OCWwmflcXZ-MpitkN34g33uhezE.asa
Signing time:             Tue 30 Jun 2026 14:49:07 +0000
ASPA not before:          Tue 30 Jun 2026 14:49:07 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            8265
Providers:                AS: 6453
                          AS: 51569
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:5c:0b:28:9c:99:2c:fe:67:3e:13:3b:15:78:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5643415c22e141972c0d7e76c24e88b22427b024
        Validity
            Not Before: Jun 30 14:49:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3825b099f95c5d9f8ca62b64377e20df7ba17b31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c9:35:2e:a0:ce:d4:cc:7b:fb:e6:8e:4d:75:
                    ce:ad:da:e5:57:50:a2:35:39:a1:1c:36:17:18:c5:
                    66:26:4f:40:7f:c7:8e:79:2b:ab:b4:6c:cf:74:6c:
                    ce:bd:22:e1:62:a4:1a:27:26:e3:37:3a:bb:69:be:
                    23:6c:18:aa:5d:43:43:8a:0c:2d:8c:93:d9:0e:1b:
                    20:eb:b9:51:85:e8:1c:b2:93:86:52:9b:ad:d2:74:
                    45:53:b2:f3:34:91:33:aa:f5:63:09:c5:f8:b3:68:
                    b3:74:dd:7e:e9:60:a3:78:af:03:14:be:76:83:29:
                    e8:e6:50:5c:3b:3f:8b:a6:48:39:6f:49:c7:5b:2e:
                    a1:7f:6a:36:2b:a3:44:ad:31:82:c0:4f:d2:34:7f:
                    ff:36:a0:8a:a1:fd:aa:e8:8e:58:38:a2:06:f0:27:
                    d2:c2:bc:4e:00:49:1a:14:87:5d:b8:00:c7:f3:b6:
                    fe:71:d3:2b:ab:0c:19:6c:01:87:cf:9d:24:cf:dd:
                    f9:fb:c6:11:22:29:24:c3:52:aa:e5:2e:e6:d4:d4:
                    8a:6e:d9:8f:8e:40:56:37:a6:cb:41:d2:4b:2a:8c:
                    f1:7d:06:bd:cb:ab:ae:86:53:c2:93:75:71:45:0b:
                    df:5a:9d:57:5e:95:47:e9:a7:ed:e7:52:6e:1e:d0:
                    19:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:25:B0:99:F9:5C:5D:9F:8C:A6:2B:64:37:7E:20:DF:7B:A1:7B:31
            X509v3 Authority Key Identifier:
                keyid:56:43:41:5C:22:E1:41:97:2C:0D:7E:76:C2:4E:88:B2:24:27:B0:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/OCWwmflcXZ-MpitkN34g33uhezE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  8265

    Signature Algorithm: sha256WithRSAEncryption
         68:71:c8:79:52:cb:95:61:f6:71:c5:a2:ff:6e:c6:40:bf:1c:
         94:c8:38:4a:c1:ba:05:71:e8:8f:99:3f:4a:05:8e:1c:ef:8c:
         eb:e3:b9:cf:5f:3b:76:3b:c2:d4:c9:e2:ab:07:53:c0:40:c3:
         bc:94:6e:e4:79:01:d1:43:a9:1c:be:30:92:d2:91:94:85:bf:
         47:e2:5a:ab:1c:a6:50:7a:1f:be:be:10:fe:95:ba:71:0c:f2:
         31:94:5b:47:82:05:13:9c:35:9c:06:db:c7:f1:73:4c:5b:90:
         86:cc:ab:eb:ab:52:c9:08:03:9e:b2:12:36:2a:a2:55:ee:93:
         d1:93:d6:1f:d4:fe:fa:1e:6a:bf:eb:e2:a5:d6:ed:e7:c5:46:
         ea:48:21:8f:4e:b7:0d:ba:b8:68:bd:00:03:6a:77:9e:4d:18:
         dd:88:c5:26:3d:48:82:7f:45:1c:4f:d9:fa:09:89:66:1e:ef:
         83:36:37:a8:17:ee:e6:19:b2:bb:10:aa:4b:29:6d:63:c6:7e:
         74:7c:b6:9a:fb:93:61:b1:0c:d7:e9:0f:ea:61:3b:71:28:4a:
         7e:47:ec:ee:ed:fc:92:62:be:be:50:02:03:68:13:02:d3:76:
         c1:38:36:9e:db:21:0a:ab:1c:d1:38:10:e3:75:cd:5f:cb:38:
         55:6b:5d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:38 2026 by rpki-client