Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/zHp1ZBf1TBJccxWbLwH4kBVPgwk.asa
File:                     zHp1ZBf1TBJccxWbLwH4kBVPgwk.asa (raw, json)
Hash identifier:          j4el4j4hNY6/d8j7SE3Aj824x6oSTIEkxrc1Ojv/apo=
Subject key identifier:   CC:7A:75:64:17:F5:4C:12:5C:73:15:9B:2F:01:F8:90:15:4F:83:09
Certificate issuer:       /CN=fa4655aa29cb4c83947f5fa6c68f04c2390b5122
Certificate serial:       019E979561ED352F33369B19297B1A73E5BB
Authority key identifier: FA:46:55:AA:29:CB:4C:83:94:7F:5F:A6:C6:8F:04:C2:39:0B:51:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/zHp1ZBf1TBJccxWbLwH4kBVPgwk.asa
Signing time:             Fri 05 Jun 2026 11:40:09 +0000
ASPA not before:          Fri 05 Jun 2026 11:40:09 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            201541
Providers:                AS: 197324
                          AS: 215828
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:97:95:61:ed:35:2f:33:36:9b:19:29:7b:1a:73:e5:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa4655aa29cb4c83947f5fa6c68f04c2390b5122
        Validity
            Not Before: Jun  5 11:40:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=cc7a756417f54c125c73159b2f01f890154f8309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ad:56:4a:1f:b9:3c:7f:b0:86:98:2d:a3:48:
                    29:71:ed:41:01:5e:42:b8:e6:5e:bb:a9:65:e3:10:
                    1e:19:64:e9:dc:c1:f7:1e:a4:b8:60:23:a5:12:9b:
                    9c:32:ce:15:9e:ef:14:76:b9:a4:b3:d8:e0:ad:84:
                    62:13:bb:20:da:c9:30:2b:f4:bf:6e:e8:93:f9:35:
                    83:9a:59:90:22:6e:00:ff:91:f2:de:8a:d9:d1:9c:
                    16:4f:64:75:3c:ed:23:89:64:2b:fe:38:36:e2:66:
                    d8:85:3b:7a:73:1a:a7:2d:5a:52:c6:7e:dd:4c:df:
                    bd:43:95:42:35:fd:61:8e:6f:6e:f2:96:f4:d8:24:
                    22:36:46:42:35:6d:6a:85:75:70:aa:63:4f:5e:cc:
                    d8:53:6e:f6:4f:67:12:96:1c:1d:3a:49:4a:5c:fa:
                    5a:5b:23:9c:1c:11:00:ce:f0:b7:c7:64:1f:c7:d5:
                    bf:96:fb:f5:e3:f8:33:d1:a7:a7:3c:9c:d8:a7:b5:
                    41:0d:e3:5d:dc:a1:a4:a1:4d:77:4d:65:ee:e3:2a:
                    ac:b1:f5:16:f2:49:e6:62:22:95:13:da:03:c4:15:
                    d4:a1:e9:c8:18:46:88:d4:a5:0a:1e:57:1b:c1:98:
                    75:5c:87:e5:ab:7b:c2:91:7d:17:71:67:de:37:23:
                    35:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:7A:75:64:17:F5:4C:12:5C:73:15:9B:2F:01:F8:90:15:4F:83:09
            X509v3 Authority Key Identifier:
                keyid:FA:46:55:AA:29:CB:4C:83:94:7F:5F:A6:C6:8F:04:C2:39:0B:51:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/zHp1ZBf1TBJccxWbLwH4kBVPgwk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201541

    Signature Algorithm: sha256WithRSAEncryption
         04:00:72:f3:7a:82:a2:c1:bf:98:89:56:92:ab:7b:41:2c:85:
         80:4a:80:cd:98:c7:62:9a:cd:5d:55:54:1e:f2:42:6f:d4:e6:
         c4:9b:e2:f1:b6:42:55:ca:15:c9:3d:90:68:98:54:0a:f0:c9:
         82:fe:95:2b:83:e3:d4:57:b5:4b:f5:4d:9f:35:7c:df:a2:fe:
         e4:b3:37:3a:ff:e0:5f:f9:b1:0e:f3:81:d0:26:42:e8:77:a2:
         f6:f8:5a:0d:5f:68:09:b3:3a:19:81:25:2f:39:19:23:c6:b3:
         5c:d0:10:d9:96:29:bb:ce:75:46:5d:4d:ce:5e:c5:64:b7:16:
         87:86:e9:a9:7e:d4:a0:6a:94:94:e8:8e:14:10:21:af:88:d9:
         10:12:84:7f:e2:34:6f:34:3e:3f:e9:73:1d:6e:8e:9b:c4:ae:
         19:1a:03:8f:f7:30:d8:13:6c:8b:70:30:9b:22:c5:10:c6:94:
         47:42:34:13:3c:ca:cd:9f:d2:44:5c:96:04:b3:46:d5:6e:b2:
         d1:e0:00:34:84:0f:5b:71:1a:7d:92:6f:85:70:f0:0b:15:1e:
         2a:df:89:ba:d1:b9:ff:85:31:b3:ea:a6:45:f7:f2:e8:16:15:
         4e:c9:76:da:51:ad:c1:fd:3d:66:c0:c9:c3:28:81:bd:fe:64:
         28:ea:b4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 05:21:58 2026 by rpki-client