Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/peQzSQauXfwCnj1XOoxXNpModLw.asa
File:                     peQzSQauXfwCnj1XOoxXNpModLw.asa (raw, json)
Hash identifier:          aU+6Zd5A23QFKgJ/5iTQvPKb5QHkcwusyV0JPmRTkOw=
Subject key identifier:   A5:E4:33:49:06:AE:5D:FC:02:9E:3D:57:3A:8C:57:36:93:28:74:BC
Certificate issuer:       /CN=b63f14dff35485a9959412863037b85dfa9f13d8
Certificate serial:       01A02ED63E693B0B00D89083821E4CAF2ADB
Authority key identifier: B6:3F:14:DF:F3:54:85:A9:95:94:12:86:30:37:B8:5D:FA:9F:13:D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tj8U3_NUhamVlBKGMDe4XfqfE9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/peQzSQauXfwCnj1XOoxXNpModLw.asa
Signing time:             Sun 23 Aug 2026 13:36:27 +0000
ASPA not before:          Sun 23 Aug 2026 13:36:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            215665
Providers:                AS: 6939
                          AS: 41051
                          AS: 44854
                          AS: 56393
                          AS: 56584
                          AS: 203291
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tj8U3_NUhamVlBKGMDe4XfqfE9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 28 Aug 2026 07:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:2e:d6:3e:69:3b:0b:00:d8:90:83:82:1e:4c:af:2a:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b63f14dff35485a9959412863037b85dfa9f13d8
        Validity
            Not Before: Aug 23 13:36:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a5e4334906ae5dfc029e3d573a8c5736932874bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:94:70:00:92:0c:09:3a:8e:de:82:0d:43:2e:
                    85:ec:5d:5e:d0:fa:15:08:b0:4b:fc:41:12:e4:9d:
                    36:17:4f:be:66:04:42:eb:49:f1:23:8a:9d:cc:4c:
                    2f:42:d7:0d:8d:d6:71:1f:93:1f:70:0b:21:e8:3c:
                    6c:1c:8d:52:88:ff:87:04:2e:2b:ac:a8:ea:4e:16:
                    3c:09:06:34:55:c6:56:e1:df:d6:4e:d6:7f:15:ec:
                    6e:6f:43:b6:ba:25:42:92:34:c9:77:62:11:f1:0e:
                    25:09:e3:56:18:82:2c:e7:ce:f7:34:58:97:4c:1e:
                    ca:a8:42:71:95:12:8d:a2:6e:6b:91:3f:6b:4c:60:
                    ba:66:63:31:b7:23:2c:23:81:5d:65:43:90:2f:2b:
                    36:0f:d4:b4:b4:9a:fd:e4:4a:3e:3d:3d:fa:31:cc:
                    a8:d1:d6:56:f4:e6:c9:79:11:11:68:32:b9:bb:8a:
                    1b:b5:d3:1c:a6:b9:4a:bc:82:80:52:ed:66:f3:bb:
                    ff:41:a9:38:31:bc:4c:e9:76:9b:55:f8:be:7d:a2:
                    d0:ca:c4:57:ef:c1:5c:c4:e8:94:6e:97:94:4c:57:
                    15:b8:91:30:eb:3d:54:8d:bb:8a:4f:be:0e:0b:2a:
                    c3:f5:82:4f:57:c3:96:80:23:01:52:d9:43:7a:36:
                    8a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E4:33:49:06:AE:5D:FC:02:9E:3D:57:3A:8C:57:36:93:28:74:BC
            X509v3 Authority Key Identifier:
                keyid:B6:3F:14:DF:F3:54:85:A9:95:94:12:86:30:37:B8:5D:FA:9F:13:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tj8U3_NUhamVlBKGMDe4XfqfE9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/peQzSQauXfwCnj1XOoxXNpModLw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215665

    Signature Algorithm: sha256WithRSAEncryption
         05:42:2b:b8:06:2e:28:c5:0a:bd:cd:f2:85:38:0b:36:de:5f:
         f7:ce:8d:6d:8d:1e:fd:1b:cb:3e:83:95:44:63:64:79:01:e4:
         fa:04:5d:09:cf:31:6f:fe:63:ef:b7:a3:25:d2:60:4e:05:f3:
         70:a9:b7:e8:81:27:8e:8a:72:9f:cc:e6:6b:4d:dc:ce:04:9e:
         af:23:98:87:ed:77:3b:0a:06:a2:42:d6:83:7a:4c:da:35:1a:
         a8:5a:95:56:09:d2:7f:8c:72:33:21:0c:16:39:e7:28:80:9f:
         cf:9c:a6:46:b9:46:25:16:57:0e:42:42:44:ad:a3:5e:de:c9:
         cf:ea:b7:40:3c:6b:53:1f:53:8c:61:a6:2e:0b:99:71:21:d4:
         6d:c8:6d:4b:85:c0:50:8d:9f:54:e1:9c:ee:73:ec:5a:fd:5e:
         3e:36:63:fe:58:d6:11:06:b6:1f:b1:d6:6f:4c:cb:85:75:36:
         ff:d9:8d:63:0f:7b:5c:f7:df:28:d8:fe:11:03:36:f8:6f:4b:
         92:d7:df:e0:81:dd:4d:28:05:f7:72:e3:7e:e9:dc:fe:ee:a6:
         45:d7:0d:22:7f:10:13:7c:9d:03:8b:12:9e:97:ed:7e:0f:10:
         a0:8d:96:49:c8:c3:ad:e5:7a:70:70:96:a7:39:cc:54:1e:5a:
         f6:1f:84:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 16:50:37 2026 by rpki-client