Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/2p3_62cl5NXmu9d0HYuz3u9J2sw.asa
File:                     2p3_62cl5NXmu9d0HYuz3u9J2sw.asa (raw, json)
Hash identifier:          GLNJ6B7CBwOim0s4eBlhao6nAnpiSnUahhOEZS13MwM=
Subject key identifier:   DA:9D:FF:EB:67:25:E4:D5:E6:BB:D7:74:1D:8B:B3:DE:EF:49:DA:CC
Certificate issuer:       /CN=830555f011be5e241eb0b425de5fd86cc6834a54
Certificate serial:       01A060ED501878451FAA29E3CC213921F0E7
Authority key identifier: 83:05:55:F0:11:BE:5E:24:1E:B0:B4:25:DE:5F:D8:6C:C6:83:4A:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gwVV8BG-XiQesLQl3l_YbMaDSlQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/2p3_62cl5NXmu9d0HYuz3u9J2sw.asa
Signing time:             Wed 02 Sep 2026 07:02:40 +0000
ASPA not before:          Wed 02 Sep 2026 07:02:40 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            52130
Providers:                AS: 1299
                          AS: 3356
                          AS: 199803
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gwVV8BG-XiQesLQl3l_YbMaDSlQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 13:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:60:ed:50:18:78:45:1f:aa:29:e3:cc:21:39:21:f0:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=830555f011be5e241eb0b425de5fd86cc6834a54
        Validity
            Not Before: Sep  2 07:02:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=da9dffeb6725e4d5e6bbd7741d8bb3deef49dacc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:71:d2:99:64:a6:b6:c2:a3:33:78:c6:e0:c5:
                    29:54:1f:65:9f:af:0d:e5:23:51:1c:b0:f6:7f:aa:
                    45:8c:a4:59:55:70:6a:26:83:4c:54:cc:60:be:83:
                    8e:50:0f:09:62:d8:02:64:b5:e7:8d:2a:5a:6c:8f:
                    39:ff:26:32:2f:12:2f:20:1c:79:d4:7b:38:e2:74:
                    43:22:a9:2a:2e:73:1b:39:3f:9d:21:c3:0d:f1:15:
                    ad:26:24:e5:7c:10:3f:34:0b:0c:e2:5c:00:84:9c:
                    23:21:2e:15:d1:60:af:29:a3:a3:73:f6:9a:d3:1d:
                    55:68:30:b8:92:97:c8:24:05:eb:8f:40:d5:8a:af:
                    80:f1:fd:f6:aa:16:6e:86:84:d9:a4:a8:6e:95:47:
                    14:26:57:6d:97:27:fe:1c:03:82:7a:d2:b0:4a:17:
                    14:53:0b:cc:24:45:ce:68:ee:ad:d8:7e:3e:ad:ab:
                    5d:3f:27:b7:31:6c:ff:c5:c2:73:28:1c:b2:3b:22:
                    0d:37:d6:a0:08:a8:8c:8c:d7:7f:46:ad:9b:46:82:
                    6f:cb:9e:e4:a9:59:d8:49:67:5b:92:ea:9a:54:5a:
                    29:1b:07:6d:27:9e:1a:82:ef:98:48:b0:a9:83:e8:
                    c0:ef:14:60:4f:ac:58:31:f8:67:0e:09:34:94:3d:
                    7d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:9D:FF:EB:67:25:E4:D5:E6:BB:D7:74:1D:8B:B3:DE:EF:49:DA:CC
            X509v3 Authority Key Identifier:
                keyid:83:05:55:F0:11:BE:5E:24:1E:B0:B4:25:DE:5F:D8:6C:C6:83:4A:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwVV8BG-XiQesLQl3l_YbMaDSlQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/2p3_62cl5NXmu9d0HYuz3u9J2sw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52130

    Signature Algorithm: sha256WithRSAEncryption
         39:53:75:80:44:42:7d:b3:e5:2b:dc:2c:f0:e6:72:d3:7f:49:
         37:1c:56:91:b7:af:b9:c7:f2:23:15:ee:f1:b7:a7:8d:32:f2:
         57:30:4c:94:4e:91:2a:1f:6f:d8:18:6c:94:b8:a9:61:ca:b3:
         7f:dd:61:f2:b6:18:65:34:64:c8:c2:e0:a2:65:01:57:c6:90:
         bf:06:7c:bb:82:f4:76:7f:63:67:28:03:59:2d:8e:4d:dc:df:
         f2:46:c1:48:35:7e:65:b0:cd:cb:95:3c:94:cf:93:0a:7a:c4:
         88:77:a4:46:9b:e4:f4:9e:81:63:02:0f:5e:55:89:fc:bf:41:
         cf:f1:78:37:9c:31:a3:35:e0:61:e7:e0:40:25:e2:b9:bf:28:
         9a:d8:7c:47:ac:de:a0:91:1c:36:3d:04:0f:28:9c:db:f2:7f:
         ea:7e:73:96:44:56:37:a8:49:1c:25:42:c5:45:de:15:a3:5e:
         6c:64:82:44:2e:17:1d:77:33:2e:c4:a4:33:8b:9e:30:a2:d7:
         87:27:83:d4:2d:3a:ce:00:b0:31:0d:12:bc:07:58:c7:26:6e:
         09:8b:6a:82:44:73:24:41:df:b7:ab:dc:c2:cb:9f:f8:4b:9b:
         6e:25:8d:f5:86:27:f6:33:f8:dc:5d:cd:d3:58:2a:12:7f:37:
         0d:41:16:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:58:12 2026 by rpki-client