Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/wuz1QAagfMN69_rlLg9E958zLGQ.asa
File:                     wuz1QAagfMN69_rlLg9E958zLGQ.asa (raw, json)
Hash identifier:          NZt+Jao4+sVeZZmP6vgLsJFKf6pmpFQKp6uvDA+ivZ4=
Subject key identifier:   C2:EC:F5:40:06:A0:7C:C3:7A:F7:FA:E5:2E:0F:44:F7:9F:33:2C:64
Certificate issuer:       /CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Certificate serial:       019EACC32908E4B7C184E12D83687F039837
Authority key identifier: 13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/wuz1QAagfMN69_rlLg9E958zLGQ.asa
Signing time:             Tue 09 Jun 2026 14:22:11 +0000
ASPA not before:          Tue 09 Jun 2026 14:22:11 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            209565
Providers:                AS: 17433
                          AS: 153376
                          AS: 199605
                          AS: 201944
                          AS: 203168
                          AS: 215172
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 11:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ac:c3:29:08:e4:b7:c1:84:e1:2d:83:68:7f:03:98:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
        Validity
            Not Before: Jun  9 14:22:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c2ecf54006a07cc37af7fae52e0f44f79f332c64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7c:dc:2b:d7:d6:b8:98:01:50:15:3b:65:b3:
                    99:0d:d8:8c:c3:bc:ad:22:72:8e:15:49:69:35:9e:
                    6d:20:6c:17:17:9c:1f:f7:78:f9:9e:4d:e3:92:cd:
                    db:60:a2:bc:eb:3a:ec:62:fb:ff:30:18:f4:6d:9f:
                    af:16:96:20:13:93:eb:e8:ca:55:31:4c:8b:76:e2:
                    4b:8b:0b:23:38:35:d0:46:fe:3e:ae:e4:7f:cc:db:
                    9a:f6:b6:db:0e:71:f0:fd:bf:d2:5b:44:a7:2e:52:
                    93:31:e0:1a:c5:e5:7f:e7:f6:51:dc:cb:69:07:83:
                    db:f6:62:68:f2:31:31:ea:ec:00:ce:47:d4:42:c4:
                    5f:dc:05:27:89:df:19:89:8d:d1:c6:22:0e:4a:a9:
                    dc:b2:15:1d:48:d0:47:d8:63:6a:60:bb:a0:7b:cb:
                    f9:34:79:19:fc:21:02:38:c0:bf:be:64:6a:71:aa:
                    5c:9a:73:86:36:85:48:5f:a9:88:f0:81:cb:ff:7b:
                    2b:33:04:e7:6d:e1:c3:db:7d:23:fa:eb:02:22:1b:
                    08:ba:db:8c:d2:b9:46:7d:a0:09:d5:b9:1f:ba:60:
                    7a:d7:94:70:d2:33:81:50:30:f2:2b:fa:b5:c4:88:
                    3f:8b:c9:0a:01:19:5c:70:ee:5e:bb:7a:0d:2f:7c:
                    3c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:EC:F5:40:06:A0:7C:C3:7A:F7:FA:E5:2E:0F:44:F7:9F:33:2C:64
            X509v3 Authority Key Identifier:
                keyid:13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/wuz1QAagfMN69_rlLg9E958zLGQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209565

    Signature Algorithm: sha256WithRSAEncryption
         1b:2c:27:63:bc:b9:ed:72:37:cc:55:f4:35:bf:1c:0a:52:0d:
         01:be:e4:8f:bb:4a:72:65:56:8c:3b:88:0d:ad:d6:96:4a:1c:
         0b:cc:47:fd:ed:b3:69:b0:20:43:73:08:ec:23:db:60:8a:e9:
         b5:eb:8f:b9:cd:60:a0:33:3f:30:02:82:be:61:ca:b1:a4:8f:
         c8:03:67:cc:10:38:2c:21:18:a6:f0:8e:93:d5:0b:d7:ce:86:
         eb:2d:6c:55:e2:b3:8c:1d:10:2c:cd:a1:e6:8e:51:a6:af:25:
         7e:29:73:52:de:e8:98:fb:9e:7b:45:0e:c7:be:c0:af:f1:54:
         55:08:1b:89:3e:92:98:c9:1e:00:62:5d:7b:d0:fe:9f:ff:1e:
         f2:59:aa:41:68:a8:1c:a3:4f:9f:86:30:d7:c5:2f:1d:a3:88:
         b0:0c:a0:d1:e8:08:9b:8c:07:ee:07:d1:c8:51:7b:e7:9c:48:
         d0:d6:81:9d:92:1a:a6:b2:dd:e2:b6:20:b5:58:1b:c7:6d:f2:
         8e:88:20:10:0f:e6:17:03:c2:f0:23:b7:32:56:54:71:69:9a:
         0a:75:2c:96:41:b8:0f:4d:27:72:58:27:05:78:26:c2:7c:ac:
         66:8a:74:2d:57:73:65:f7:d7:13:5d:88:37:1c:19:19:eb:8c:
         cd:0f:5e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:37:29 2026 by rpki-client