Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/AP-xXNHU0gsTip0y1Z9Q1Az_oHI.asa
File:                     AP-xXNHU0gsTip0y1Z9Q1Az_oHI.asa (raw, json)
Hash identifier:          mEQ7UyBPxSpqS6xnOjHHOLsuKuVx3u/9H3fQI1OuMmY=
Subject key identifier:   00:FF:B1:5C:D1:D4:D2:0B:13:8A:9D:32:D5:9F:50:D4:0C:FF:A0:72
Certificate issuer:       /CN=295d8586b1dfe6213e0b2c1d2bffc1b2c8d351cf
Certificate serial:       019F190111A451B9856D84442C34F9A07223
Authority key identifier: 29:5D:85:86:B1:DF:E6:21:3E:0B:2C:1D:2B:FF:C1:B2:C8:D3:51:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KV2FhrHf5iE-CywdK__BssjTUc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/AP-xXNHU0gsTip0y1Z9Q1Az_oHI.asa
Signing time:             Tue 30 Jun 2026 14:48:48 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:48 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            215163
Providers:                AS: 200462
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KV2FhrHf5iE-CywdK__BssjTUc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:11:a4:51:b9:85:6d:84:44:2c:34:f9:a0:72:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295d8586b1dfe6213e0b2c1d2bffc1b2c8d351cf
        Validity
            Not Before: Jun 30 14:48:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=00ffb15cd1d4d20b138a9d32d59f50d40cffa072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1f:82:d6:3f:5b:94:8b:e9:e5:c6:5d:f6:99:
                    fe:3a:3e:a2:85:7e:8a:de:85:e2:1e:24:86:ce:e9:
                    6c:e6:66:81:93:5e:59:e4:fd:1c:a5:71:f9:73:b2:
                    91:65:78:73:19:b4:6b:52:1c:17:5e:4a:72:12:e1:
                    53:ee:b8:ea:33:75:88:11:91:aa:4e:67:ee:c4:3a:
                    34:4e:fe:db:bf:1a:a3:f5:31:21:de:67:13:f9:6e:
                    2b:7c:52:a8:10:97:64:97:5f:ee:32:16:b2:7e:59:
                    95:74:7d:84:48:d1:d1:1b:73:c7:5f:28:22:54:55:
                    4a:24:f0:b1:1d:2b:ff:de:f1:90:da:a1:f6:ac:77:
                    85:e8:b9:38:87:ca:14:9d:19:3f:32:ef:57:35:6d:
                    46:3e:2b:9a:31:1b:bd:27:7d:b2:7e:63:25:89:e2:
                    50:98:c5:19:91:5d:63:99:31:35:f4:3d:da:53:55:
                    6f:3a:4a:1a:f8:b9:67:79:6d:d8:cb:da:2d:1f:99:
                    51:e0:d1:48:71:1f:7e:a6:6e:c6:21:48:68:50:2d:
                    ab:a1:39:c7:6f:80:c7:10:4f:11:14:0c:a9:31:b2:
                    08:d9:05:b1:d2:6a:b6:0f:33:67:ee:7e:00:22:4b:
                    34:79:ca:2e:a4:10:66:2f:7a:ec:b6:ae:f8:57:cb:
                    55:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:FF:B1:5C:D1:D4:D2:0B:13:8A:9D:32:D5:9F:50:D4:0C:FF:A0:72
            X509v3 Authority Key Identifier:
                keyid:29:5D:85:86:B1:DF:E6:21:3E:0B:2C:1D:2B:FF:C1:B2:C8:D3:51:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KV2FhrHf5iE-CywdK__BssjTUc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/AP-xXNHU0gsTip0y1Z9Q1Az_oHI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215163

    Signature Algorithm: sha256WithRSAEncryption
         15:74:e3:e7:88:6f:87:4c:f0:0e:dd:0a:1a:e6:a2:95:9c:5b:
         44:6e:01:c3:81:97:a2:f6:6c:7d:b8:04:6f:cb:11:17:8f:ae:
         45:79:1b:e4:16:bd:3c:13:81:0a:cf:65:d3:0a:ef:54:39:cd:
         f2:6c:b7:b9:f4:9e:a3:3e:87:29:60:cf:b6:dc:34:ca:93:a7:
         76:db:9f:3c:6b:a6:6b:c0:a7:e0:f6:41:cd:d3:5d:68:5a:5e:
         40:43:c4:9a:89:5e:48:ed:a8:a8:9a:6b:cb:5a:26:12:9f:fc:
         f6:38:92:5f:a6:b8:66:a3:b7:cc:4b:51:16:b9:b4:0a:57:00:
         d8:f2:18:bc:4e:43:1b:8e:14:8b:68:1c:ae:20:8a:e6:d9:ee:
         ec:74:a3:a3:95:81:28:a8:31:50:ef:e3:bc:c1:ca:ee:69:be:
         54:81:de:46:ab:8b:dd:3d:b6:30:93:8f:c0:36:55:ee:89:b6:
         c6:1e:5e:54:81:63:df:75:76:9b:a7:cb:4e:07:e1:3f:6d:72:
         48:8d:fd:1b:a8:f2:eb:8c:1e:2e:76:cd:d9:94:3f:de:7c:5a:
         76:a3:05:2e:fe:ed:fd:b8:e2:d2:d3:78:70:45:e5:5b:17:c7:
         94:ec:53:26:78:c8:be:d5:f8:01:08:4f:49:fe:67:3a:2d:ab:
         c4:77:cd:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:16:53 2026 by rpki-client