Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/ioN4ipylgDa3iGDmJeRaPhdaD2o.asa
File:                     ioN4ipylgDa3iGDmJeRaPhdaD2o.asa (raw, json)
Hash identifier:          xMsBVvvWa3udO/Q4WUPW43K66AwrSGhrXCXCkDb3tkU=
Subject key identifier:   8A:83:78:8A:9C:A5:80:36:B7:88:60:E6:25:E4:5A:3E:17:5A:0F:6A
Certificate issuer:       /CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Certificate serial:       019EE81EB9159FBF2ADA2131031D150E217F
Authority key identifier: 13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/ioN4ipylgDa3iGDmJeRaPhdaD2o.asa
Signing time:             Sun 21 Jun 2026 02:59:48 +0000
ASPA not before:          Sun 21 Jun 2026 02:59:48 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            215172
Providers:                AS: 174
                          AS: 3204
                          AS: 6939
                          AS: 7720
                          AS: 10977
                          AS: 17408
                          AS: 27523
                          AS: 34927
                          AS: 44324
                          AS: 51087
                          AS: 53356
                          AS: 199310
                          AS: 199605
                          AS: 203168
                          AS: 206069
                          AS: 206216
                          AS: 209565
                          AS: 213605
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e8:1e:b9:15:9f:bf:2a:da:21:31:03:1d:15:0e:21:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
        Validity
            Not Before: Jun 21 02:59:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8a83788a9ca58036b78860e625e45a3e175a0f6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:71:1f:dc:e9:e0:6e:96:0b:f6:8f:29:e0:75:
                    8a:a9:e8:3d:0d:82:78:52:fa:cf:80:a4:9f:05:2a:
                    ea:f8:0c:b8:7a:1a:97:09:d7:e9:e9:f0:c8:01:d2:
                    33:56:e8:09:c7:75:53:49:4a:c3:ff:6c:a4:0b:e1:
                    22:98:f6:9d:88:80:8c:c2:7e:58:d9:76:5b:e0:9d:
                    53:2b:d9:cb:92:63:cb:41:4f:32:4a:1f:87:a2:de:
                    d2:64:db:a2:7e:a8:32:52:f5:a5:37:30:21:12:07:
                    67:59:98:65:2f:51:07:6e:a1:89:47:b0:d6:9d:6b:
                    a0:3b:8f:f0:03:11:6f:38:c4:56:dc:f3:72:d3:1b:
                    90:e9:a3:23:4c:08:76:2b:39:14:d9:27:d8:81:02:
                    bc:3f:47:a4:44:52:93:92:ed:06:40:0e:1b:db:6a:
                    8b:e5:4e:cd:d1:74:18:95:d4:e3:d4:24:c4:f2:7d:
                    3c:b1:88:64:6e:1c:24:5c:9b:13:fd:72:45:9b:75:
                    1b:6a:75:be:b4:42:f2:ff:85:2b:ec:1c:10:7c:a5:
                    10:ad:20:a0:0a:dc:ec:a4:5a:42:02:b3:25:c1:c5:
                    8e:45:c3:8e:84:8c:1f:ee:de:c7:02:4d:6d:28:ad:
                    07:99:c8:27:9a:97:63:29:f3:d5:44:e5:7c:24:5a:
                    e6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:83:78:8A:9C:A5:80:36:B7:88:60:E6:25:E4:5A:3E:17:5A:0F:6A
            X509v3 Authority Key Identifier:
                keyid:13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/ioN4ipylgDa3iGDmJeRaPhdaD2o.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215172

    Signature Algorithm: sha256WithRSAEncryption
         5b:44:85:0d:b3:43:d1:cc:56:4c:b8:d9:4a:2f:45:c3:fa:b0:
         49:4b:3b:71:96:30:40:e7:30:d4:0c:85:86:ef:41:c4:76:6b:
         f5:71:e4:d0:23:f5:77:ae:9f:bc:02:fb:98:b4:c2:2a:b0:c8:
         98:a1:52:7c:ed:98:7e:fc:14:a6:96:5b:55:a6:d2:9a:7d:5a:
         7a:a1:af:50:a5:38:35:28:b8:db:aa:bd:99:f8:ab:20:9d:99:
         75:ad:36:7c:1a:3b:59:ed:7e:be:d1:6d:74:49:c4:b1:7f:1d:
         f0:4a:93:b6:92:06:17:1e:6a:ce:49:fd:31:b1:08:a8:bc:26:
         37:9d:6f:c5:b8:9d:bd:11:08:5c:e4:3a:c7:1d:f4:0d:20:d2:
         53:88:ae:39:c8:82:74:ff:b6:48:4f:29:d4:cd:47:40:40:45:
         7c:f1:23:9c:38:98:46:28:c4:8b:95:85:70:d8:ce:9e:02:dd:
         63:1a:e1:8a:ed:b8:0d:1b:a9:38:e6:18:dd:22:dc:1a:44:e3:
         dd:fa:c6:96:23:66:d1:0a:a9:c8:d3:e0:f3:6b:0b:92:8a:86:
         16:43:bc:cb:79:e3:71:50:cd:8a:0d:bb:3f:ba:12:35:27:fc:
         2a:a3:4f:df:c7:dd:c0:1d:a4:2f:9d:e3:3c:62:09:ec:7e:29:
         f7:be:bd:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 09:33:35 2026 by rpki-client