Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/vRM_LGbWv2w9cKQdXqOHlRePDQI.asa
File:                     vRM_LGbWv2w9cKQdXqOHlRePDQI.asa (raw, json)
Hash identifier:          ORLNjodyCGoSATuVjwDrx01Z8NUV9ta4Ef/5NzIWEY8=
Subject key identifier:   BD:13:3F:2C:66:D6:BF:6C:3D:70:A4:1D:5E:A3:87:95:17:8F:0D:02
Certificate issuer:       /CN=66be521093bb89dc76250b227f7f7fba66e228d8
Certificate serial:       019FD9EF1E4D463D91E1FF632595F0551362
Authority key identifier: 66:BE:52:10:93:BB:89:DC:76:25:0B:22:7F:7F:7F:BA:66:E2:28:D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zr5SEJO7idx2JQsif39_umbiKNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/vRM_LGbWv2w9cKQdXqOHlRePDQI.asa
Signing time:             Fri 07 Aug 2026 01:55:54 +0000
ASPA not before:          Fri 07 Aug 2026 01:55:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            215439
Providers:                AS: 9002
                          AS: 20473
                          AS: 30823
                          AS: 49581
                          AS: 52025
                          AS: 58212
                          AS: 62255
                          AS: 62403
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zr5SEJO7idx2JQsif39_umbiKNg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:d9:ef:1e:4d:46:3d:91:e1:ff:63:25:95:f0:55:13:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66be521093bb89dc76250b227f7f7fba66e228d8
        Validity
            Not Before: Aug  7 01:55:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bd133f2c66d6bf6c3d70a41d5ea38795178f0d02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:63:9c:25:ef:30:2e:f0:3e:57:0f:9a:e8:98:
                    02:64:00:66:f4:97:5c:55:9d:1c:5f:ed:46:9d:e8:
                    c5:1c:c9:b1:d5:9e:6b:d4:cd:48:fd:05:de:0d:e9:
                    a1:b3:3b:87:c6:49:2a:c9:0e:a9:09:82:98:43:a0:
                    a7:1f:6c:59:b0:0e:9c:e8:13:78:6a:1a:05:21:7a:
                    a0:fd:60:fe:b1:2c:59:9b:49:fc:72:5e:ea:68:32:
                    5d:81:73:26:8b:e8:97:9e:fa:b8:b6:b4:09:49:90:
                    b5:b5:16:d4:b5:68:3f:23:8a:95:6d:db:0a:0c:cd:
                    17:bc:90:02:3c:45:70:f6:12:8e:99:cd:36:02:6d:
                    b9:7d:b2:cd:4d:f6:9c:6b:88:ad:98:25:e4:9b:46:
                    61:80:d1:66:e6:61:8a:45:7b:4d:12:42:5b:46:3d:
                    48:c3:45:be:41:66:63:c7:3f:5a:9a:06:be:37:ee:
                    c2:90:a9:08:30:c6:a3:94:af:db:16:cd:f2:76:79:
                    10:2d:e1:96:4f:76:f1:42:dd:81:24:17:0a:a8:8c:
                    80:f2:d2:35:45:7d:ce:53:22:ea:3f:26:25:05:2e:
                    11:e2:d2:77:67:b0:1a:8f:ef:fb:f7:f3:a8:07:8b:
                    42:05:a9:0c:4f:f1:0a:2c:46:e0:41:95:c7:f5:06:
                    cc:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:13:3F:2C:66:D6:BF:6C:3D:70:A4:1D:5E:A3:87:95:17:8F:0D:02
            X509v3 Authority Key Identifier:
                keyid:66:BE:52:10:93:BB:89:DC:76:25:0B:22:7F:7F:7F:BA:66:E2:28:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zr5SEJO7idx2JQsif39_umbiKNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/vRM_LGbWv2w9cKQdXqOHlRePDQI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215439

    Signature Algorithm: sha256WithRSAEncryption
         60:d2:9d:16:67:85:31:56:b2:9b:da:ca:2d:12:88:c8:4c:89:
         d4:4a:1a:c4:85:23:0d:da:fd:2e:ba:d7:88:d3:59:a4:6d:1b:
         9f:f3:59:c0:9c:da:75:89:cc:65:34:de:11:5b:bb:3c:45:00:
         e7:97:30:d6:cf:77:59:d1:31:09:da:f1:7a:ef:e3:69:f1:ac:
         f7:cc:84:f8:dd:8e:95:5a:64:fb:1b:d6:df:b6:71:03:de:75:
         f5:57:10:63:00:a0:11:78:b0:37:8f:68:7d:5b:1f:f5:45:d0:
         2f:bb:93:d0:a4:4b:25:79:ed:51:e9:14:21:7e:93:1a:22:03:
         5a:f8:17:83:69:d2:e5:5c:17:d9:7c:26:5e:1c:84:44:ed:a2:
         fe:ce:05:f2:13:7d:c5:3b:96:59:37:37:87:9a:62:d7:d9:01:
         e0:a1:d6:a5:b3:be:80:ed:22:b3:05:a5:bc:f6:d4:1d:ba:da:
         4d:83:5f:9d:17:fc:f2:a8:86:67:ab:5c:26:5e:d9:54:10:01:
         b8:36:a5:ba:ed:8c:e7:62:53:da:3e:a0:34:c7:a3:fb:48:1e:
         93:ff:9f:63:1d:14:69:b2:d1:22:0b:99:a3:34:64:0e:f4:47:
         8a:62:15:08:dd:e3:13:6e:38:2e:bf:67:0c:8c:cc:34:cb:a7:
         41:8e:8f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:49:44 2026 by rpki-client