Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/yGKmCQjSxTAezYkUefPEIpl-2A4.asa
File:                     yGKmCQjSxTAezYkUefPEIpl-2A4.asa (raw, json)
Hash identifier:          QCwVUrLjfeyHUk6twv0KxQ0njTcdU9mmBG1CLHKGs6Y=
Subject key identifier:   C8:62:A6:09:08:D2:C5:30:1E:CD:89:14:79:F3:C4:22:99:7E:D8:0E
Certificate issuer:       /CN=3b9e008d2a178449f12b6c2275b47f0cfd948385
Certificate serial:       019FC699CA1D1EBDDD9277FA7BD189A1DB8F
Authority key identifier: 3B:9E:00:8D:2A:17:84:49:F1:2B:6C:22:75:B4:7F:0C:FD:94:83:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O54AjSoXhEnxK2widbR_DP2Ug4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/yGKmCQjSxTAezYkUefPEIpl-2A4.asa
Signing time:             Mon 03 Aug 2026 07:49:55 +0000
ASPA not before:          Mon 03 Aug 2026 07:49:55 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            207214
Providers:                AS: 49619
                          AS: 212041
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/O54AjSoXhEnxK2widbR_DP2Ug4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/O54AjSoXhEnxK2widbR_DP2Ug4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O54AjSoXhEnxK2widbR_DP2Ug4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:c6:99:ca:1d:1e:bd:dd:92:77:fa:7b:d1:89:a1:db:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b9e008d2a178449f12b6c2275b47f0cfd948385
        Validity
            Not Before: Aug  3 07:49:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c862a60908d2c5301ecd891479f3c422997ed80e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bb:49:10:11:13:80:8b:1f:0b:80:bf:61:d8:
                    64:17:02:39:8d:be:37:d2:2e:49:c2:1d:7c:c5:fa:
                    ef:e3:9d:56:f9:39:7e:d9:6b:b5:83:f5:6e:ff:9c:
                    58:16:fc:ee:11:59:5f:ae:31:e5:15:6e:b2:f5:8b:
                    1e:f1:ad:21:80:44:dc:27:8b:d0:52:76:21:83:91:
                    99:a9:73:99:87:91:39:42:26:0c:f6:c3:34:43:fb:
                    5c:1c:05:d9:09:2b:a4:8b:63:62:c4:31:4e:31:2f:
                    e8:dc:ab:02:e9:01:a8:01:23:c3:78:09:14:e7:19:
                    ec:55:e6:c6:72:7d:fa:ff:b9:34:16:de:17:f5:44:
                    f0:ef:2e:01:11:c4:ce:5b:47:6e:d3:51:57:1f:16:
                    88:4b:b8:b0:ec:c9:26:31:df:4f:5f:05:df:ef:26:
                    1b:6f:b8:6e:fb:23:b8:c7:c8:48:45:cd:0c:06:b9:
                    0b:86:b8:75:ba:56:26:f2:b5:81:8c:18:cf:a7:af:
                    8f:eb:cd:66:e7:cf:81:54:da:da:30:79:70:cc:9c:
                    39:91:99:71:95:3c:ba:30:45:25:3b:e0:39:94:f1:
                    72:a4:2d:83:62:0a:1b:20:e0:0d:23:6a:36:45:0f:
                    d7:e1:67:91:3e:d4:a7:3f:1a:89:6e:59:f2:e6:fe:
                    88:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:62:A6:09:08:D2:C5:30:1E:CD:89:14:79:F3:C4:22:99:7E:D8:0E
            X509v3 Authority Key Identifier:
                keyid:3B:9E:00:8D:2A:17:84:49:F1:2B:6C:22:75:B4:7F:0C:FD:94:83:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O54AjSoXhEnxK2widbR_DP2Ug4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/yGKmCQjSxTAezYkUefPEIpl-2A4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/O54AjSoXhEnxK2widbR_DP2Ug4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207214

    Signature Algorithm: sha256WithRSAEncryption
         64:01:5a:81:42:a4:3e:21:33:e9:54:f3:c3:0c:1d:9f:08:c8:
         86:cb:d3:5b:21:ed:3c:89:8e:90:b9:fb:f4:8b:c3:20:3b:62:
         13:b6:54:00:59:6e:1c:91:a1:85:e0:04:fc:6f:6c:4d:c6:f4:
         0a:67:ea:91:ee:94:60:c0:25:07:0b:03:29:06:51:7f:8c:09:
         ca:b5:19:86:88:4a:06:58:96:58:ef:d3:dd:d5:e7:39:5a:9f:
         74:97:73:99:0b:de:fd:ba:45:bf:62:99:7c:14:03:95:82:29:
         fa:5f:7c:08:ea:7c:fa:51:7b:e1:51:c9:8e:ac:f8:2d:8b:94:
         cb:cc:d8:40:15:dc:f0:da:ac:30:5d:11:c4:6c:df:c0:a3:f7:
         fd:85:6f:cd:2b:5c:c6:44:84:8c:dd:19:69:6d:49:96:54:d8:
         7b:60:fe:9f:69:90:04:74:72:fe:f3:3e:27:dc:9b:5c:10:df:
         ff:64:34:da:85:19:3a:28:f7:c2:4c:d1:58:44:70:3d:ff:59:
         f3:5f:54:2a:aa:4e:11:9a:74:34:8c:92:9f:a7:dc:11:2d:0f:
         f4:9b:63:4e:6f:2a:aa:df:2d:96:8c:07:79:e2:f1:a4:39:16:
         fc:66:e2:0b:38:9b:16:c2:37:98:12:e1:5a:fe:c9:ff:49:5e:
         2c:e9:7e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:50:38 2026 by rpki-client