Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/c49e22-1de7-4367-993b-4ef4064eb423/1/h999oBc_Ubyy3tWteXIdyux39CE.asa
File:                     h999oBc_Ubyy3tWteXIdyux39CE.asa (raw, json)
Hash identifier:          0WOdwZSGvRd1euU11+hvxV0JRY683wHRvIzcRdjG+ao=
Subject key identifier:   87:DF:7D:A0:17:3F:51:BC:B2:DE:D5:AD:79:72:1D:CA:EC:77:F4:21
Certificate issuer:       /CN=b82beffc4391d5b3bbd5fd4b0fc32af5db2006ca
Certificate serial:       019F64F6CC36186B4CE4CD419A6B57B0DEDC
Authority key identifier: B8:2B:EF:FC:43:91:D5:B3:BB:D5:FD:4B:0F:C3:2A:F5:DB:20:06:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uCvv_EOR1bO71f1LD8Mq9dsgBso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/c49e22-1de7-4367-993b-4ef4064eb423/1/h999oBc_Ubyy3tWteXIdyux39CE.asa
Signing time:             Wed 15 Jul 2026 08:48:43 +0000
ASPA not before:          Wed 15 Jul 2026 08:48:43 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            199180
Providers:                AS: 13335
                          AS: 21859
                          AS: 58212
                          AS: 137409
                          AS: 199529
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/c49e22-1de7-4367-993b-4ef4064eb423/1/uCvv_EOR1bO71f1LD8Mq9dsgBso.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/c49e22-1de7-4367-993b-4ef4064eb423/1/uCvv_EOR1bO71f1LD8Mq9dsgBso.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uCvv_EOR1bO71f1LD8Mq9dsgBso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:64:f6:cc:36:18:6b:4c:e4:cd:41:9a:6b:57:b0:de:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b82beffc4391d5b3bbd5fd4b0fc32af5db2006ca
        Validity
            Not Before: Jul 15 08:48:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=87df7da0173f51bcb2ded5ad79721dcaec77f421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e7:83:19:b8:f9:42:ee:f6:da:b5:5d:6d:46:
                    96:4e:48:57:f5:44:41:f6:7e:e4:d4:1f:6a:1c:e5:
                    e0:95:b7:fa:6b:60:2f:73:b5:ae:00:c5:17:a7:ba:
                    97:7c:f1:a3:8b:d1:ba:21:11:9c:83:93:f2:1b:d0:
                    75:22:65:53:07:8c:ad:3a:3d:c5:f5:30:d1:57:bc:
                    eb:6e:43:71:e5:a4:c1:6e:9e:00:7a:3d:ac:dd:48:
                    93:cd:8d:b6:67:e6:9b:7a:64:d7:1f:e5:02:7f:51:
                    67:3c:f8:60:4c:4a:4b:7e:d1:c4:ee:f3:26:fb:07:
                    da:1c:08:e6:d3:db:d0:96:1b:87:e9:ad:a1:e0:3c:
                    d1:78:29:a2:1a:9d:c7:b1:13:ec:22:94:d0:b8:3e:
                    95:5e:40:59:e5:86:f7:e3:cc:5a:59:0d:ca:6b:10:
                    a3:15:0b:e7:5e:e3:c5:64:84:7b:95:df:b9:f5:cc:
                    c0:76:c3:5a:e4:b0:95:84:1b:83:77:d3:e3:1e:e4:
                    52:61:7f:a1:30:bf:f8:7b:34:b3:82:28:f0:f3:5a:
                    c2:02:6c:a2:3c:be:07:55:91:f2:83:60:d2:1a:74:
                    ad:1b:d9:62:67:79:90:26:2b:3d:67:7f:4a:e1:df:
                    a1:f4:56:03:6a:15:08:3e:d8:91:7f:67:23:47:cf:
                    37:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:DF:7D:A0:17:3F:51:BC:B2:DE:D5:AD:79:72:1D:CA:EC:77:F4:21
            X509v3 Authority Key Identifier:
                keyid:B8:2B:EF:FC:43:91:D5:B3:BB:D5:FD:4B:0F:C3:2A:F5:DB:20:06:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCvv_EOR1bO71f1LD8Mq9dsgBso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c49e22-1de7-4367-993b-4ef4064eb423/1/h999oBc_Ubyy3tWteXIdyux39CE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c49e22-1de7-4367-993b-4ef4064eb423/1/uCvv_EOR1bO71f1LD8Mq9dsgBso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199180

    Signature Algorithm: sha256WithRSAEncryption
         68:ec:94:31:ce:bd:60:8e:05:80:90:fc:36:71:da:5d:a0:ba:
         56:54:54:24:8f:6d:0a:3d:ec:83:2b:07:1f:c2:b0:15:bc:ab:
         4e:5d:a6:23:3b:7a:f0:2f:ca:06:01:4a:e3:8d:1d:4e:ae:4d:
         56:ec:35:83:c5:8d:a9:a1:36:59:65:20:ce:71:b7:df:b4:be:
         08:8b:2a:08:c4:d2:36:23:bb:28:ff:a2:f1:f0:97:8a:37:56:
         69:7c:77:47:f1:8a:0a:18:67:bb:0e:0b:f2:7a:89:76:08:5c:
         33:12:82:66:3b:68:9a:b6:6d:72:4f:5d:27:1e:9a:16:39:68:
         f3:b7:d8:5b:54:92:21:53:df:62:d8:d9:25:c8:ee:c8:80:32:
         8d:a3:8b:c5:a1:52:88:8b:2f:05:37:38:df:1b:c4:54:38:de:
         1e:95:c7:22:f2:30:48:b9:25:39:51:b2:27:8c:37:ab:b4:72:
         55:8c:72:36:ca:a0:ba:fc:86:60:2a:bb:e9:a8:30:c9:f6:14:
         9a:85:84:c9:a4:62:cf:11:a6:33:97:a2:70:76:3f:b3:e5:9f:
         46:68:58:a3:f3:a7:71:ee:89:2d:87:3e:80:17:ee:a4:78:08:
         be:66:65:69:ec:9f:e0:64:e7:fc:f0:ee:24:d3:7b:ec:19:91:
         76:8d:b8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:05:31 2026 by rpki-client