Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/awfIr7XVw3NhHT043xURex8ZUuY.asa
File:                     awfIr7XVw3NhHT043xURex8ZUuY.asa (raw, json)
Hash identifier:          XQFknxnb/HGcMwV+ecPlsAO8PLWHOyzmhEXiWY7xHac=
Subject key identifier:   6B:07:C8:AF:B5:D5:C3:73:61:1D:3D:38:DF:15:11:7B:1F:19:52:E6
Certificate issuer:       /CN=95bdb85b7ea8f1faaf751e76c4147c81b60e994d
Certificate serial:       01A178475D6E17C80170F6C16AFAEC24E353
Authority key identifier: 95:BD:B8:5B:7E:A8:F1:FA:AF:75:1E:76:C4:14:7C:81:B6:0E:99:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lb24W36o8fqvdR52xBR8gbYOmU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/awfIr7XVw3NhHT043xURex8ZUuY.asa
Signing time:             Mon 26 Oct 2026 12:55:05 +0000
ASPA not before:          Mon 26 Oct 2026 12:55:05 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            215652
Providers:                AS: 5617
                          AS: 16342
                          AS: 20804
                          AS: 29535
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/lb24W36o8fqvdR52xBR8gbYOmU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/lb24W36o8fqvdR52xBR8gbYOmU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lb24W36o8fqvdR52xBR8gbYOmU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:78:47:5d:6e:17:c8:01:70:f6:c1:6a:fa:ec:24:e3:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95bdb85b7ea8f1faaf751e76c4147c81b60e994d
        Validity
            Not Before: Oct 26 12:55:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6b07c8afb5d5c373611d3d38df15117b1f1952e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:29:ee:6c:7e:18:ed:37:c7:49:be:e5:dc:d9:
                    54:92:41:95:ac:d4:f8:cf:04:81:94:48:38:b1:4f:
                    08:fe:4b:3c:73:7f:c0:f5:34:25:f1:90:bd:7c:9d:
                    32:89:25:40:57:2b:ad:d2:72:8e:96:f2:1e:94:35:
                    d8:c7:db:82:0b:76:ce:bd:57:dc:92:9b:12:b3:e2:
                    79:90:fb:fa:44:fd:f0:f3:d0:21:b6:85:4a:5f:68:
                    fc:48:53:28:3c:c7:ed:0a:eb:ab:f1:d9:cd:71:65:
                    1c:df:72:55:b9:99:e3:b1:a3:6f:b2:10:dd:db:0c:
                    87:09:76:42:aa:a1:cc:0f:db:3f:36:03:fe:ae:eb:
                    a4:1f:d3:b4:ca:5b:2f:c2:c7:00:38:e8:6c:e7:97:
                    66:18:a3:c7:6a:87:f0:86:75:b6:da:79:44:6b:c6:
                    e5:5c:9c:22:67:3e:67:5b:e0:48:e4:6e:f1:6c:ae:
                    bc:07:d7:0f:c0:21:40:6d:79:ab:31:1c:11:42:66:
                    7d:3a:65:a0:68:68:ee:fa:bd:50:b3:e8:7f:53:20:
                    10:40:bc:fa:a5:cc:d8:eb:54:ad:bc:9b:cf:dd:ec:
                    5c:22:ce:7c:21:fc:39:33:b1:64:a5:6e:fe:0a:ea:
                    77:99:d1:b9:a6:5e:72:fa:67:d3:6f:d5:35:61:d5:
                    ad:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:07:C8:AF:B5:D5:C3:73:61:1D:3D:38:DF:15:11:7B:1F:19:52:E6
            X509v3 Authority Key Identifier:
                keyid:95:BD:B8:5B:7E:A8:F1:FA:AF:75:1E:76:C4:14:7C:81:B6:0E:99:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lb24W36o8fqvdR52xBR8gbYOmU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/awfIr7XVw3NhHT043xURex8ZUuY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/lb24W36o8fqvdR52xBR8gbYOmU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215652

    Signature Algorithm: sha256WithRSAEncryption
         dd:c2:11:cc:08:44:7b:54:66:de:c7:db:d5:03:c6:42:07:98:
         d5:32:b2:43:b2:e4:23:31:1c:72:9f:69:77:9b:1a:7c:ea:40:
         2b:7a:d8:7b:15:50:4d:76:31:24:6b:9f:7f:b0:84:68:c8:6a:
         8b:71:a4:74:02:46:b3:38:46:1a:38:92:60:5f:7a:5f:ff:90:
         47:ce:60:76:3c:ec:1a:d2:86:4d:64:71:64:ca:b1:61:87:63:
         a1:55:e1:41:ec:c8:8f:8e:de:af:e6:a6:94:ab:b9:34:7b:27:
         e6:1c:58:a7:e8:81:e5:d6:c7:e2:a3:39:17:16:08:df:09:3c:
         ed:c7:17:fa:6d:d5:c9:35:33:18:a1:1e:7e:ef:d3:fc:1f:50:
         22:d3:31:94:b1:d3:48:5f:e8:d5:a7:9a:fd:f6:4f:eb:ab:79:
         f0:43:3d:15:00:3d:66:c6:c4:a3:2a:93:31:70:03:7c:e4:d8:
         19:40:f3:10:6c:2d:3c:3b:84:7e:3f:68:94:75:fc:28:f1:84:
         2d:c2:6a:53:03:46:92:88:e4:80:87:3c:30:f3:cd:24:86:f9:
         1b:db:03:fb:5a:4a:b9:71:39:41:57:a3:19:15:97:20:66:9e:
         f1:a9:54:66:9a:64:58:b3:6e:f9:8b:cd:cb:db:e5:96:7e:9f:
         76:77:e8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:15:10 2026 by rpki-client