Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/muClETW590rnAhhdFCIA-PKzx8Q.asa
File:                     muClETW590rnAhhdFCIA-PKzx8Q.asa (raw, json)
Hash identifier:          36o5H1jwMvZNZc8onjj4S28x1eYQDO0IkGOM8Fu+qqc=
Subject key identifier:   9A:E0:A5:11:35:B9:F7:4A:E7:02:18:5D:14:22:00:F8:F2:B3:C7:C4
Certificate issuer:       /CN=8bb9c95ee8f0cb353c1de9920792a34d30244617
Certificate serial:       019FADA3B2C9913368A36A463DD5AF45E031
Authority key identifier: 8B:B9:C9:5E:E8:F0:CB:35:3C:1D:E9:92:07:92:A3:4D:30:24:46:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i7nJXujwyzU8HemSB5KjTTAkRhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/muClETW590rnAhhdFCIA-PKzx8Q.asa
Signing time:             Wed 29 Jul 2026 11:30:14 +0000
ASPA not before:          Wed 29 Jul 2026 11:30:14 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200570
Providers:                AS: 3320
                          AS: 43341
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/i7nJXujwyzU8HemSB5KjTTAkRhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/i7nJXujwyzU8HemSB5KjTTAkRhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i7nJXujwyzU8HemSB5KjTTAkRhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:a3:b2:c9:91:33:68:a3:6a:46:3d:d5:af:45:e0:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bb9c95ee8f0cb353c1de9920792a34d30244617
        Validity
            Not Before: Jul 29 11:30:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9ae0a51135b9f74ae702185d142200f8f2b3c7c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bc:0c:cc:ba:30:b9:74:64:f2:f1:fb:35:13:
                    3b:9b:b6:24:e3:8a:f5:e1:02:2d:af:ed:53:78:ea:
                    cb:c8:df:7f:6b:02:5b:cd:1d:fe:76:a2:b8:6f:95:
                    13:f1:5b:92:bf:b7:b4:0e:67:82:6a:2a:1c:87:a6:
                    51:a0:64:29:cb:87:06:4d:3d:72:ec:5d:76:10:4d:
                    38:04:91:8f:f8:f7:0a:c6:11:bb:31:0e:54:47:98:
                    f5:ee:c4:b7:58:26:44:ba:9e:e1:9b:fb:00:7d:5e:
                    e2:02:c0:ac:5e:5f:69:4e:a8:19:4c:bc:23:6d:4e:
                    f2:d7:76:9d:fc:ac:49:b0:a4:e6:a9:01:f7:85:bd:
                    bb:be:dc:d8:69:bc:f4:fc:64:e6:a0:e0:80:06:f3:
                    57:87:13:0d:af:1e:6d:b2:bd:43:1b:b0:10:6d:3b:
                    62:fd:f8:d0:1d:fa:e3:93:55:60:a7:d4:65:3a:a2:
                    93:25:b4:9c:55:48:48:12:35:37:4d:e1:91:cb:ab:
                    97:d3:8d:82:59:0b:44:eb:7d:88:3e:2e:d0:d3:eb:
                    98:be:ff:32:32:9f:ce:69:60:89:55:06:ef:ae:fc:
                    ec:26:79:e4:ee:86:ae:40:bf:f4:0d:8c:71:f9:89:
                    48:26:c3:42:24:ce:82:0f:56:ff:dd:34:32:16:fb:
                    3e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E0:A5:11:35:B9:F7:4A:E7:02:18:5D:14:22:00:F8:F2:B3:C7:C4
            X509v3 Authority Key Identifier:
                keyid:8B:B9:C9:5E:E8:F0:CB:35:3C:1D:E9:92:07:92:A3:4D:30:24:46:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7nJXujwyzU8HemSB5KjTTAkRhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/muClETW590rnAhhdFCIA-PKzx8Q.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/i7nJXujwyzU8HemSB5KjTTAkRhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200570

    Signature Algorithm: sha256WithRSAEncryption
         07:0b:b2:35:34:2e:bb:f8:a2:3f:de:48:5c:97:ce:1d:7c:e1:
         62:41:2a:42:87:17:52:25:c4:c4:25:d4:54:28:11:c3:22:30:
         d8:f2:49:6e:ed:ea:5d:58:fa:65:e7:5a:db:f5:1d:e2:1e:6b:
         01:e2:37:b1:50:db:20:cf:59:1a:c9:3b:28:58:01:a9:a5:6e:
         ad:7b:e0:eb:f1:dd:4d:ec:d8:e9:24:d7:c0:2a:09:fd:38:bf:
         bc:fd:4f:d2:44:c5:0e:73:b1:7c:57:ed:92:9e:23:b4:0c:12:
         cd:1e:3f:fd:7f:3f:cb:ec:02:6d:4a:4c:86:25:6a:18:01:ef:
         99:58:fe:e0:ce:15:7d:99:69:c3:04:c8:8c:c4:f4:74:9e:a8:
         74:3d:83:c1:00:8f:6e:ad:af:38:d3:32:5b:03:17:0b:60:48:
         33:e1:82:a6:fb:ec:4b:13:90:92:a0:d7:57:86:d9:98:08:7a:
         b8:a7:43:eb:8d:40:f9:b1:4c:a3:51:f9:af:08:64:43:7d:a0:
         8b:01:25:52:c8:4c:9c:46:41:ef:10:73:61:98:80:69:3b:f0:
         c5:2f:02:24:d3:4f:87:88:6d:16:3d:a2:25:ec:3c:87:ac:7b:
         b2:72:6f:16:8b:52:89:4c:58:2e:cc:41:d2:fb:82:31:77:d4:
         4c:9c:85:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:50:40 2026 by rpki-client