Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/JCczrT4XeuCG3bCzv9cOOlTKMyw.asa
File:                     JCczrT4XeuCG3bCzv9cOOlTKMyw.asa (raw, json)
Hash identifier:          Z04R6pisEKNfYlSvm2euCu4QekE3gDkLZE4OVhmOpmI=
Subject key identifier:   24:27:33:AD:3E:17:7A:E0:86:DD:B0:B3:BF:D7:0E:3A:54:CA:33:2C
Certificate issuer:       /CN=0094c0f7368c047643e91c57d6cfda9f99897362
Certificate serial:       01A125B18C9F960155B54B731703BE92235A
Authority key identifier: 00:94:C0:F7:36:8C:04:76:43:E9:1C:57:D6:CF:DA:9F:99:89:73:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/JCczrT4XeuCG3bCzv9cOOlTKMyw.asa
Signing time:             Sat 10 Oct 2026 12:02:35 +0000
ASPA not before:          Sat 10 Oct 2026 12:02:35 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            202986
Providers:                AS: 20473
                          AS: 56655
                          AS: 152900
                          AS: 200461
                          AS: 215638
                          AS: 394177
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 14:13:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:25:b1:8c:9f:96:01:55:b5:4b:73:17:03:be:92:23:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0094c0f7368c047643e91c57d6cfda9f99897362
        Validity
            Not Before: Oct 10 12:02:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=242733ad3e177ae086ddb0b3bfd70e3a54ca332c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7d:f8:48:22:a0:da:4f:9b:d5:46:65:49:1c:
                    01:2f:92:b0:33:49:d9:53:07:06:e9:52:38:7e:20:
                    5c:ef:bd:cd:19:da:28:63:0e:1c:52:da:0f:e1:ba:
                    0d:9b:c0:37:49:8d:5a:75:81:ce:94:55:d2:90:f7:
                    90:8e:ac:97:51:c9:2e:1b:af:eb:cc:a8:a9:a5:40:
                    ef:3c:e1:fe:e9:b9:75:59:cb:90:5c:4d:8f:12:09:
                    3f:7b:b7:eb:cd:90:79:ca:cd:b3:77:9e:ee:d3:5d:
                    ce:43:ed:c2:02:5e:53:50:29:62:f8:5e:4e:85:93:
                    a9:68:73:6c:6f:75:9f:9a:8e:bc:88:44:ed:71:4e:
                    54:00:09:1b:55:83:43:92:65:06:c3:36:b3:d0:cb:
                    d4:1a:9d:40:52:58:04:7d:6b:f3:bb:ce:d2:3d:e3:
                    5e:95:69:0d:50:bb:77:26:18:83:b0:87:22:f2:2b:
                    b7:d0:83:77:3f:5a:a5:88:d7:e9:c8:f7:c4:b1:dc:
                    16:78:01:99:b0:f6:d4:3f:c8:e9:fb:e7:2b:24:0b:
                    18:b6:3a:12:e1:de:79:69:06:46:52:69:2b:67:5f:
                    c2:82:53:15:6e:1d:7f:a2:1a:25:4d:1b:6b:ed:fc:
                    46:af:47:ff:4e:a0:72:f4:ce:de:96:0f:28:6e:b3:
                    25:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:27:33:AD:3E:17:7A:E0:86:DD:B0:B3:BF:D7:0E:3A:54:CA:33:2C
            X509v3 Authority Key Identifier:
                keyid:00:94:C0:F7:36:8C:04:76:43:E9:1C:57:D6:CF:DA:9F:99:89:73:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/JCczrT4XeuCG3bCzv9cOOlTKMyw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202986

    Signature Algorithm: sha256WithRSAEncryption
         46:16:f7:2f:b1:e5:f7:f4:6e:86:84:35:b5:63:05:37:b7:03:
         24:88:a7:a2:a8:da:7d:03:5c:47:8e:84:36:27:a6:9f:47:46:
         9e:c8:b5:7a:de:e1:5c:ab:e0:3b:f3:fc:35:a8:92:40:22:01:
         a7:bb:9e:48:64:9e:a5:1d:56:d1:81:e4:9b:a2:8d:45:36:f2:
         92:88:72:38:e4:21:58:e3:c8:e3:7f:73:ca:84:27:63:98:d9:
         df:c8:c6:57:aa:1a:5f:b0:18:f9:02:7b:26:df:28:dc:9c:94:
         67:dc:50:e8:58:38:65:4f:6a:fe:c9:2d:41:aa:20:ad:9f:64:
         a1:5d:20:ad:a7:a8:c0:4d:25:14:e7:ba:46:6b:58:c9:7d:ac:
         05:0d:52:92:9f:49:14:2a:ba:d8:37:fe:6d:39:2a:19:26:7b:
         87:6f:84:55:c7:4b:dd:e9:18:a7:63:2f:62:5d:f1:2b:29:26:
         c2:af:94:f9:24:82:3b:c2:1b:09:2d:0f:d7:92:7d:2a:b6:09:
         c6:a5:6d:d8:c2:85:40:97:30:bd:e0:ce:4c:85:17:b7:90:08:
         6a:4c:44:c6:77:42:32:2b:93:f8:3e:a6:0b:13:eb:29:45:56:
         6f:65:db:08:ef:8e:93:cd:0b:4b:5b:54:07:cc:ed:6d:26:17:
         75:1f:78:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:47:06 2026 by rpki-client