Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/SnAngvJCVw89Xk2g4LS33E_cZqk.asa
File:                     SnAngvJCVw89Xk2g4LS33E_cZqk.asa (raw, json)
Hash identifier:          FEtOy9BdGUDpBihDpdg42cvdy/bIT+6dlxvJ4W17938=
Subject key identifier:   4A:70:27:82:F2:42:57:0F:3D:5E:4D:A0:E0:B4:B7:DC:4F:DC:66:A9
Certificate issuer:       /CN=e15688497617e8f0a60690afab3ef94c11ab6d72
Certificate serial:       019E822E9497C5936B3B861F8DC2D640FF88
Authority key identifier: E1:56:88:49:76:17:E8:F0:A6:06:90:AF:AB:3E:F9:4C:11:AB:6D:72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/SnAngvJCVw89Xk2g4LS33E_cZqk.asa
Signing time:             Mon 01 Jun 2026 07:55:51 +0000
ASPA not before:          Mon 01 Jun 2026 07:55:51 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            208487
Providers:                AS: 8772
                          AS: 11967
                          AS: 24381
                          AS: 29632
                          AS: 35708
                          AS: 41051
                          AS: 152565
                          AS: 197324
                          AS: 199829
                          AS: 207841
                          AS: 209533
                          AS: 209735
                          AS: 210464
                          AS: 211358
                          AS: 211509
                          AS: 212895
                          AS: 213449
                          AS: 214022
                          AS: 215828
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:82:2e:94:97:c5:93:6b:3b:86:1f:8d:c2:d6:40:ff:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15688497617e8f0a60690afab3ef94c11ab6d72
        Validity
            Not Before: Jun  1 07:55:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4a702782f242570f3d5e4da0e0b4b7dc4fdc66a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:88:54:b3:fa:49:d7:b0:57:92:62:18:9b:76:
                    c3:f1:0a:fb:7c:d3:83:ef:8c:37:3f:a6:b2:52:d6:
                    ab:7b:3c:30:c6:25:52:08:96:b3:21:da:ac:44:0e:
                    35:e6:13:85:53:14:bc:63:4e:37:ba:a1:ac:5b:f6:
                    69:4a:af:e2:fe:22:d7:79:3b:c0:01:c6:4e:ef:71:
                    56:a2:49:13:6f:b0:59:fd:13:e9:d3:e9:ac:8d:f7:
                    02:40:e1:31:8d:f0:c2:e6:90:ca:75:36:e3:3f:3e:
                    89:7b:4a:5f:52:21:02:4f:f1:24:0a:38:ca:31:ef:
                    2b:41:35:56:c5:cb:a3:09:7b:5a:13:2b:61:5c:87:
                    9d:0d:27:d1:fd:82:3c:e0:96:e9:ec:76:d8:41:6f:
                    39:50:02:22:1b:25:ca:f1:52:f6:e1:c2:22:11:a6:
                    ec:3a:c3:55:24:f6:31:14:57:47:88:6f:07:7d:c6:
                    d6:fc:94:92:1f:bb:94:ff:76:3d:82:4d:fb:58:41:
                    06:b6:02:f7:c5:b9:ba:21:b6:e5:2d:89:b7:fa:30:
                    c3:d0:79:43:ba:79:a8:a5:e5:99:2e:1a:16:84:96:
                    3d:1d:6d:7f:1d:a2:37:26:61:a6:e3:21:63:64:a3:
                    19:d9:dd:bf:fc:1a:b8:79:41:f9:a8:7f:d3:95:89:
                    51:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:70:27:82:F2:42:57:0F:3D:5E:4D:A0:E0:B4:B7:DC:4F:DC:66:A9
            X509v3 Authority Key Identifier:
                keyid:E1:56:88:49:76:17:E8:F0:A6:06:90:AF:AB:3E:F9:4C:11:AB:6D:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/SnAngvJCVw89Xk2g4LS33E_cZqk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208487

    Signature Algorithm: sha256WithRSAEncryption
         2c:f1:9b:86:2c:5b:e9:13:1d:64:5e:b9:c2:ee:6a:4e:c1:7d:
         3e:69:7d:81:dc:41:ab:e3:14:65:87:78:17:90:09:3f:05:e7:
         41:e4:5f:69:34:4d:81:04:f4:97:d4:bb:55:25:65:3e:6e:bc:
         50:50:6b:d7:a4:cc:ca:1c:a8:b5:f7:47:11:bf:2f:e7:dd:a3:
         60:67:38:97:90:bc:ab:d7:07:56:87:8c:d6:ae:0b:b4:88:31:
         e4:70:ae:d0:bf:af:ab:97:66:63:fe:55:97:5e:91:fb:55:57:
         a6:77:6d:6c:54:55:db:89:af:07:65:ea:39:fa:99:33:8c:26:
         4f:e1:83:08:60:6f:1d:20:fc:cf:ef:81:3c:4d:4c:c2:df:25:
         b7:fe:1d:ea:a1:2a:aa:b3:32:dd:65:5b:8e:44:88:2a:7a:41:
         15:51:cc:b7:a8:ac:f7:9a:91:a2:71:9d:45:40:d6:8b:94:3c:
         89:ba:6b:7b:c5:68:79:48:3a:2c:4b:0e:67:18:af:c7:17:51:
         86:b1:68:fa:3f:17:95:33:d9:96:0e:19:d9:d4:1d:4e:79:a5:
         98:40:16:46:08:9e:8d:de:60:6a:a3:1c:16:a8:b1:4e:6c:43:
         2b:3a:98:42:aa:cb:4e:48:1a:19:53:c0:d8:d8:f5:6e:85:c4:
         54:da:ca:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 05:40:02 2026 by rpki-client