Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/97f970-f725-48e0-b449-4670405a38ea/1/1-oMSmH_AaRKY3PYlcx-TEWXdzbU.asa
File:                     1-oMSmH_AaRKY3PYlcx-TEWXdzbU.asa (raw, json)
Hash identifier:          iEXTilkRCMqep8ohagVKxx8QP/pOQ0cevjMJdBDrx64=
Subject key identifier:   FA:83:12:98:7F:C0:69:12:98:DC:F6:25:73:1F:93:11:65:DD:CD:B5
Certificate issuer:       /CN=cffcb388d15b34201e3f90dc2bbc7129a841492d
Certificate serial:       01A0B7EBEC24E81225CEF2BDEBB0B9CEAC6C
Authority key identifier: CF:FC:B3:88:D1:5B:34:20:1E:3F:90:DC:2B:BC:71:29:A8:41:49:2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z_yziNFbNCAeP5DcK7xxKahBSS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/97f970-f725-48e0-b449-4670405a38ea/1/1-oMSmH_AaRKY3PYlcx-TEWXdzbU.asa
Signing time:             Sat 19 Sep 2026 04:28:06 +0000
ASPA not before:          Sat 19 Sep 2026 04:28:06 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            202831
Providers:                AS: 6939
                          AS: 30823
                          AS: 31500
                          AS: 49581
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/97f970-f725-48e0-b449-4670405a38ea/1/z_yziNFbNCAeP5DcK7xxKahBSS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/97f970-f725-48e0-b449-4670405a38ea/1/z_yziNFbNCAeP5DcK7xxKahBSS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z_yziNFbNCAeP5DcK7xxKahBSS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 04:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b7:eb:ec:24:e8:12:25:ce:f2:bd:eb:b0:b9:ce:ac:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cffcb388d15b34201e3f90dc2bbc7129a841492d
        Validity
            Not Before: Sep 19 04:28:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fa8312987fc0691298dcf625731f931165ddcdb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cc:83:50:ae:80:4c:7a:bf:0f:e0:8c:02:3b:
                    1a:e3:44:4d:03:a5:b6:7a:5d:8c:e6:04:01:59:26:
                    d5:3d:bb:9f:62:ce:b5:1e:73:5f:1b:b3:d4:90:17:
                    88:1a:47:88:4a:a0:94:8c:84:29:1d:03:65:9c:38:
                    ae:3a:70:75:86:9c:96:9d:99:92:4c:2c:7b:55:04:
                    ab:1b:19:66:a9:25:b7:ac:7e:1a:b9:55:f2:ba:fa:
                    5c:33:5b:66:55:89:97:94:58:2d:3d:46:5e:39:b9:
                    1b:78:88:ea:e5:83:1b:0f:49:04:72:a4:da:20:4a:
                    9d:0b:b1:ab:09:fa:90:9e:e0:50:61:81:fc:3c:5b:
                    a0:0b:76:76:76:1c:b3:d6:23:e6:73:e7:9c:69:84:
                    a2:d2:57:d7:0f:86:52:c2:bd:98:c9:66:59:79:0b:
                    68:da:56:46:a4:1e:d5:14:d8:15:76:bc:a4:e8:dd:
                    7b:2f:af:54:31:0a:86:fa:f2:d3:e8:63:56:c5:c0:
                    a9:04:5d:4f:84:89:09:17:16:a1:cc:1b:33:db:7e:
                    75:62:fe:e1:6a:2e:f1:e5:f2:b7:58:f3:4d:d1:e5:
                    a3:4b:78:2e:4b:a0:e2:a2:16:fc:d4:83:71:86:39:
                    63:66:0d:fb:5b:84:da:83:9e:f6:a7:66:99:4c:fd:
                    0a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:83:12:98:7F:C0:69:12:98:DC:F6:25:73:1F:93:11:65:DD:CD:B5
            X509v3 Authority Key Identifier:
                keyid:CF:FC:B3:88:D1:5B:34:20:1E:3F:90:DC:2B:BC:71:29:A8:41:49:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_yziNFbNCAeP5DcK7xxKahBSS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/97f970-f725-48e0-b449-4670405a38ea/1/1-oMSmH_AaRKY3PYlcx-TEWXdzbU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/97f970-f725-48e0-b449-4670405a38ea/1/z_yziNFbNCAeP5DcK7xxKahBSS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202831

    Signature Algorithm: sha256WithRSAEncryption
         60:ba:98:36:71:ef:a0:28:ee:57:fa:ce:bd:84:e6:45:c4:31:
         bf:be:45:3a:50:1f:fb:d1:7c:fb:13:22:b9:40:97:91:e1:1e:
         74:e7:72:07:e8:5a:e3:54:45:7b:59:7d:d8:88:f9:c9:6e:fa:
         31:17:8b:49:84:48:43:21:e5:dd:b6:23:dd:4c:00:e1:0d:fd:
         28:da:62:f7:7d:05:7b:21:5d:c7:68:92:71:93:9f:28:c5:ce:
         32:7f:c8:dd:6a:28:a9:ee:e4:5b:26:d4:3e:17:ce:87:f5:ee:
         b5:ad:0b:af:fc:ed:88:c0:5c:5a:df:45:38:c0:ca:14:4c:f2:
         8e:5e:a3:26:48:54:af:53:9d:d2:d9:76:17:6c:6d:01:69:85:
         60:ca:4a:a6:20:2c:a3:e2:d0:2b:a2:52:b6:ab:74:22:44:2d:
         49:2a:1b:59:39:bf:b4:dd:6d:26:ce:33:37:da:68:b8:ed:32:
         a5:42:2c:04:6c:4b:cc:7e:ad:74:0a:db:4f:3d:09:7e:79:73:
         1e:4c:2f:74:28:04:e2:4e:4c:ff:98:19:e7:df:d7:26:c3:7e:
         02:a9:23:3e:ad:a5:df:c0:29:b4:05:8d:be:0f:02:07:8c:3a:
         60:16:81:9b:87:b2:7e:ea:77:c0:ef:78:c0:65:c0:ff:c6:ec:
         32:dc:06:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 11:23:40 2026 by rpki-client