Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/VfXPQasJj4AFxPhWN1WSOyUzOyI.asa
File:                     VfXPQasJj4AFxPhWN1WSOyUzOyI.asa (raw, json)
Hash identifier:          zvfirguBB2tgFEnfYrOLxHAMXrIGb3V+ijoN5TJT8+0=
Subject key identifier:   55:F5:CF:41:AB:09:8F:80:05:C4:F8:56:37:55:92:3B:25:33:3B:22
Certificate issuer:       /CN=896d5866c35093352e7b9e0762c591e08e50f967
Certificate serial:       019FBFFFBB1A8B88D9D4894EA99ACB64D772
Authority key identifier: 89:6D:58:66:C3:50:93:35:2E:7B:9E:07:62:C5:91:E0:8E:50:F9:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/VfXPQasJj4AFxPhWN1WSOyUzOyI.asa
Signing time:             Sun 02 Aug 2026 01:03:55 +0000
ASPA not before:          Sun 02 Aug 2026 01:03:55 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            60092
Providers:                AS: 174
                          AS: 2914
                          AS: 3257
                          AS: 3356
                          AS: 6441
                          AS: 7018
                          AS: 8717
                          AS: 31308
                          AS: 60349
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 22:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:bf:ff:bb:1a:8b:88:d9:d4:89:4e:a9:9a:cb:64:d7:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=896d5866c35093352e7b9e0762c591e08e50f967
        Validity
            Not Before: Aug  2 01:03:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=55f5cf41ab098f8005c4f8563755923b25333b22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a7:c4:78:6e:7e:cb:b9:e1:4c:e5:bb:66:be:
                    f2:6a:6c:07:84:91:a5:48:95:04:46:e2:91:2a:0f:
                    d5:00:d8:b0:a8:88:d9:5a:c2:e7:41:25:a4:95:8d:
                    ca:02:e7:3f:0f:32:3d:86:01:35:cc:09:21:e1:99:
                    89:51:9e:12:1a:48:99:87:98:2d:23:e4:25:48:de:
                    99:7d:6b:02:70:f9:2a:95:fb:43:c2:da:f8:08:1c:
                    c8:1c:d3:ea:fb:29:2b:13:15:cb:0a:a0:72:79:4f:
                    1d:cc:f3:46:eb:e2:ca:76:4f:93:01:c4:b2:3b:bb:
                    2b:8c:02:36:5c:f5:ec:25:85:f8:1d:3c:95:cf:c2:
                    68:0c:37:b3:24:34:19:20:6a:af:e0:73:85:90:1a:
                    9e:40:0f:af:43:dc:a8:02:25:af:dd:c4:67:f3:0a:
                    65:c1:62:3b:e1:db:d4:17:15:33:10:87:e7:b0:2c:
                    a7:2b:c6:38:28:70:fc:27:2d:ae:da:bd:4d:f5:05:
                    01:9b:92:6a:d6:f0:b8:cd:9e:07:3e:2c:33:76:3c:
                    c3:fc:c5:fb:19:b0:0a:8e:63:00:ad:c9:4e:5f:d2:
                    b9:b6:60:74:45:01:3b:ca:e0:9e:82:ff:66:9e:8f:
                    fd:0c:57:fa:fd:4e:4f:8c:1e:37:cf:2b:f9:f7:a7:
                    18:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F5:CF:41:AB:09:8F:80:05:C4:F8:56:37:55:92:3B:25:33:3B:22
            X509v3 Authority Key Identifier:
                keyid:89:6D:58:66:C3:50:93:35:2E:7B:9E:07:62:C5:91:E0:8E:50:F9:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/VfXPQasJj4AFxPhWN1WSOyUzOyI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60092

    Signature Algorithm: sha256WithRSAEncryption
         aa:58:21:33:b6:21:44:c8:f4:d3:5d:6d:ac:56:53:63:60:62:
         0b:3e:b6:ce:96:5f:53:74:f9:d2:fb:e9:50:27:55:e1:cd:36:
         4e:59:2a:33:82:20:b8:8b:a3:0b:c3:1a:cb:f0:f5:68:f9:97:
         b4:e4:9e:d7:41:3e:29:b5:07:b5:fd:91:f9:04:19:df:51:de:
         85:7a:29:70:5e:a3:f0:04:05:86:ae:94:ac:13:ac:91:e4:bb:
         b4:82:5f:e4:65:a8:e6:83:94:a5:6a:f4:7e:03:d8:31:04:73:
         54:4f:f3:90:64:17:a3:99:a4:47:7b:d6:5e:ac:cf:e4:44:17:
         47:b8:54:74:15:01:29:54:e8:cc:dd:4c:45:d7:f1:8a:b6:71:
         df:71:cd:58:d7:2a:dd:7b:05:30:88:f8:86:5d:a2:13:5a:ec:
         0f:bf:25:48:6f:c0:71:af:5c:ab:ec:bf:e6:50:33:7f:48:31:
         ec:fe:0d:f8:53:cf:17:19:fe:2c:9c:54:b5:d8:38:92:e3:db:
         5e:a6:13:01:1e:0b:25:af:08:f2:93:eb:15:aa:ed:d6:60:43:
         a0:35:ed:1c:0b:7a:9d:1e:01:1a:95:2e:1c:ec:1a:db:2b:22:
         d8:0a:9d:85:34:78:ff:94:5e:31:e1:70:75:97:0a:b6:fd:50:
         bc:ba:3d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:50:10 2026 by rpki-client