Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/C66sr3_VHNJE3f-YcVvpxT-78aQ.asa
File:                     C66sr3_VHNJE3f-YcVvpxT-78aQ.asa (raw, json)
Hash identifier:          PCZ7Bcm5u5UbMsN2g6+sImvBbSkI3n6XB9Ceou+QfxI=
Subject key identifier:   0B:AE:AC:AF:7F:D5:1C:D2:44:DD:FF:98:71:5B:E9:C5:3F:BB:F1:A4
Certificate issuer:       /CN=82e635fecef17109e1ac78b2fb722410d8477a9c
Certificate serial:       019FCB942B2406ACCF6B552EBC340F44D426
Authority key identifier: 82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/C66sr3_VHNJE3f-YcVvpxT-78aQ.asa
Signing time:             Tue 04 Aug 2026 07:01:53 +0000
ASPA not before:          Tue 04 Aug 2026 07:01:53 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            201873
Providers:                AS: 174
                          AS: 6939
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 22:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:cb:94:2b:24:06:ac:cf:6b:55:2e:bc:34:0f:44:d4:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82e635fecef17109e1ac78b2fb722410d8477a9c
        Validity
            Not Before: Aug  4 07:01:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0baeacaf7fd51cd244ddff98715be9c53fbbf1a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c6:08:ba:f4:d5:20:fb:ff:50:e2:65:01:2b:
                    42:a6:06:8e:75:31:7c:63:fb:4a:a4:10:31:a7:17:
                    23:51:15:d6:ff:39:34:33:67:e5:10:6d:0e:64:8f:
                    ef:17:80:f6:3e:a8:ba:19:90:84:da:05:33:de:21:
                    ba:1e:b6:e5:b2:89:7d:3e:fc:b5:11:56:f0:df:c9:
                    6e:48:cd:4c:a2:67:e9:86:fb:ec:4a:89:41:88:ce:
                    32:1c:c1:6b:82:62:aa:3a:43:5c:33:e9:21:f8:e8:
                    13:56:e4:28:ad:57:d2:a3:08:ce:c8:89:e8:40:95:
                    70:11:21:fc:34:72:74:d6:c8:f8:9d:40:23:62:b0:
                    20:dc:86:bb:1c:3b:7e:04:e1:00:40:a7:44:22:e7:
                    d8:f2:bf:fa:b5:8d:2f:44:e8:c5:f7:eb:9c:27:d7:
                    34:09:2b:7a:4f:5e:b5:ce:87:8e:ac:51:0f:ec:55:
                    72:2a:67:45:5b:10:3d:8d:60:2c:9b:06:5e:b9:73:
                    dd:b3:24:e7:1f:60:15:41:a7:f7:05:e3:4c:fd:54:
                    55:5c:c8:45:34:bd:ae:44:08:cf:79:57:13:ad:04:
                    89:27:7e:17:33:f7:1f:be:6b:69:40:a1:4a:d4:7d:
                    0c:39:ff:8f:33:63:06:bc:30:e9:12:02:66:71:81:
                    59:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:AE:AC:AF:7F:D5:1C:D2:44:DD:FF:98:71:5B:E9:C5:3F:BB:F1:A4
            X509v3 Authority Key Identifier:
                keyid:82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/C66sr3_VHNJE3f-YcVvpxT-78aQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201873

    Signature Algorithm: sha256WithRSAEncryption
         60:df:2c:d6:fd:4e:f8:76:3c:fd:be:6f:eb:f8:f8:3c:62:47:
         0f:9e:87:9a:ab:63:37:f2:fc:03:9f:6b:cb:a4:7e:3d:ed:c9:
         ad:3e:48:b5:94:60:66:b4:dd:24:70:ab:88:5b:05:3b:52:a2:
         e1:a0:ef:a5:96:f0:d0:7e:3f:9d:e0:06:d0:9c:ac:52:d0:de:
         2a:7d:2e:1a:1b:2c:02:e5:5d:1c:f1:0d:eb:28:5b:e3:98:37:
         77:78:1e:06:43:af:f8:19:51:7c:69:f7:e4:0e:eb:95:c9:41:
         b8:78:b2:53:fb:93:4f:d9:df:a3:69:c5:88:e2:84:fd:16:68:
         e9:b6:5d:19:ff:88:7c:62:fd:17:c8:ef:0c:ae:a1:11:6c:1a:
         4f:73:d6:7a:2f:6c:c3:30:fa:31:18:82:37:54:86:3e:3d:e7:
         6e:0f:e7:81:46:5b:33:7d:8f:fa:fd:96:a5:76:b4:bf:a4:ad:
         66:a5:07:c1:6b:1c:77:d4:59:b2:59:a7:13:f4:c4:b5:08:13:
         d7:88:4e:40:7f:37:39:54:c5:6c:af:1a:5b:72:0f:ad:d3:7f:
         dd:8c:fe:5f:5f:cc:8f:54:b4:50:51:fe:54:13:4b:d9:ac:76:
         b9:e8:e6:b0:b5:dd:8b:21:f7:16:fe:84:26:b9:6e:05:9a:a5:
         8a:fc:34:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:50:00 2026 by rpki-client