Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/AQXjWDkHdLcG0AgBM0JmH82YCJ8.asa
File:                     AQXjWDkHdLcG0AgBM0JmH82YCJ8.asa (raw, json)
Hash identifier:          KB2aJQENkpsyC9FBJhTiCS7SCs2ZFa04cjwD/nhBfoA=
Subject key identifier:   01:05:E3:58:39:07:74:B7:06:D0:08:01:33:42:66:1F:CD:98:08:9F
Certificate issuer:       /CN=0776334dc6f70f563e998f6080ad328aab7f8d0e
Certificate serial:       019F36EDB22983A14492007CDCAAF8F53299
Authority key identifier: 07:76:33:4D:C6:F7:0F:56:3E:99:8F:60:80:AD:32:8A:AB:7F:8D:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/AQXjWDkHdLcG0AgBM0JmH82YCJ8.asa
Signing time:             Mon 06 Jul 2026 10:16:15 +0000
ASPA not before:          Mon 06 Jul 2026 10:16:15 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            208755
Providers:                AS: 20473
                          AS: 212683
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 15 Jul 2026 07:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:36:ed:b2:29:83:a1:44:92:00:7c:dc:aa:f8:f5:32:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0776334dc6f70f563e998f6080ad328aab7f8d0e
        Validity
            Not Before: Jul  6 10:16:15 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0105e358390774b706d008013342661fcd98089f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c2:e9:59:ab:76:53:9c:26:be:8b:3d:a5:28:
                    03:f8:13:f4:79:08:81:59:ad:1d:6e:c0:1b:62:85:
                    75:c6:86:71:af:75:e8:58:04:27:41:10:a3:66:e3:
                    74:0e:3f:2e:89:e6:3e:28:12:4b:27:5d:96:cf:65:
                    24:b8:94:3b:d9:03:21:28:45:86:df:88:82:e9:bf:
                    bf:a5:10:20:44:f6:78:53:0a:e3:13:a5:08:25:de:
                    bf:ef:7f:dc:bd:e2:c6:bf:9f:3f:d8:68:65:2e:9e:
                    a9:d5:ba:a3:5d:31:d4:8c:d0:be:93:4c:b4:10:9e:
                    23:ad:39:80:1f:3e:0c:1c:7e:b5:4c:3d:62:a9:be:
                    68:c3:80:b0:a2:71:1f:c9:68:44:98:53:02:1d:cf:
                    dd:6b:d5:62:ab:3f:c0:9a:99:50:2a:32:56:95:1c:
                    3a:a6:b3:a1:f6:9d:c9:de:9d:d1:e2:9a:43:a1:04:
                    78:34:a1:18:b9:65:4f:0d:34:d6:e1:19:17:2f:d9:
                    69:fc:c3:c0:1c:2d:43:3d:a2:3f:bc:fd:47:3d:47:
                    c8:0d:e2:82:98:9c:6d:6f:4e:3b:3c:6c:8e:b9:a6:
                    00:da:fc:14:ce:2b:a4:04:12:15:fa:59:a8:19:c0:
                    a4:15:97:19:10:d7:dd:9c:ee:59:20:20:10:55:1c:
                    ee:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:05:E3:58:39:07:74:B7:06:D0:08:01:33:42:66:1F:CD:98:08:9F
            X509v3 Authority Key Identifier:
                keyid:07:76:33:4D:C6:F7:0F:56:3E:99:8F:60:80:AD:32:8A:AB:7F:8D:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/AQXjWDkHdLcG0AgBM0JmH82YCJ8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208755

    Signature Algorithm: sha256WithRSAEncryption
         79:b2:b6:dc:4d:c5:40:62:b9:f7:82:95:2d:d9:90:0f:60:d7:
         1a:8c:92:f1:42:63:02:c4:4b:11:08:25:3c:26:ee:55:db:df:
         d2:88:79:ba:16:3d:d4:0c:58:73:06:2a:95:bf:ad:2a:5d:81:
         4d:e0:32:ca:af:74:01:6a:cb:b2:0f:f5:98:5e:15:4e:73:a0:
         a5:0f:00:b7:9b:c4:5a:9e:c8:28:10:00:46:5f:e2:6c:07:4f:
         4c:03:40:18:7e:fa:27:54:05:91:ff:86:ba:6b:3d:91:df:2a:
         23:9c:cf:8c:ce:7c:cc:5a:de:6e:9b:02:56:0b:e0:61:bb:ac:
         18:4c:fb:43:19:9f:94:62:01:b4:12:45:23:31:b0:1c:55:b5:
         4a:08:a6:bd:d8:63:dc:94:2a:12:95:c5:41:ae:02:6d:31:d8:
         47:69:c9:3c:63:ff:52:cc:ba:06:f3:03:dc:23:54:e7:57:11:
         d1:e8:99:c6:ee:81:3d:13:ed:59:25:d5:0d:b2:e0:69:c2:3c:
         95:bd:f3:cf:1e:0f:1a:fc:bf:6f:c5:7b:3d:b7:d8:9c:93:30:
         a7:7f:1d:bb:e1:92:f9:ce:06:4b:dc:04:d2:4e:14:95:7c:6c:
         de:a5:63:1a:60:51:35:c7:a0:5d:63:2b:50:db:ad:fb:84:ed:
         8b:da:d4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 11:49:03 2026 by rpki-client