Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/uFbpcpxOgBzckCeqBpe0f1VxLpw.asa
File:                     uFbpcpxOgBzckCeqBpe0f1VxLpw.asa (raw, json)
Hash identifier:          O4ZnTQf3lD21aw5Srb0h7jxe1YX3MHi6Ea8yrm+gujM=
Subject key identifier:   B8:56:E9:72:9C:4E:80:1C:DC:90:27:AA:06:97:B4:7F:55:71:2E:9C
Certificate issuer:       /CN=4cbfd3e72d4a0396f95347336b42678f68c26430
Certificate serial:       019FF5EDD0757B4484BC2B5AD04F813FAE67
Authority key identifier: 4C:BF:D3:E7:2D:4A:03:96:F9:53:47:33:6B:42:67:8F:68:C2:64:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/uFbpcpxOgBzckCeqBpe0f1VxLpw.asa
Signing time:             Wed 12 Aug 2026 12:23:51 +0000
ASPA not before:          Wed 12 Aug 2026 12:23:51 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            3188
Providers:                AS: 9121
                          AS: 12735
                          AS: 43391
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 21:02:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f5:ed:d0:75:7b:44:84:bc:2b:5a:d0:4f:81:3f:ae:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cbfd3e72d4a0396f95347336b42678f68c26430
        Validity
            Not Before: Aug 12 12:23:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b856e9729c4e801cdc9027aa0697b47f55712e9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d3:68:18:f9:58:e2:4f:c3:f6:28:55:40:9a:
                    b3:95:0e:56:2b:c6:83:b5:87:f8:8c:3c:6d:fe:6c:
                    f7:b1:b1:57:e0:c1:04:37:25:6c:8d:15:b6:44:a8:
                    9c:8f:c0:b7:7c:70:c0:f5:96:6f:31:2c:46:ba:d3:
                    4f:5f:d6:39:31:1a:96:0a:6b:7d:28:cc:35:e2:b7:
                    74:f1:77:b1:53:9b:01:0a:57:25:40:02:5f:26:ad:
                    9c:d7:b1:6d:f5:63:76:e8:e5:3d:a7:2a:0a:17:f4:
                    dd:8a:52:53:3a:8b:4d:ee:56:f8:76:32:6c:b7:b6:
                    ff:ce:45:84:c0:7e:fe:39:1e:75:31:bf:e8:d4:33:
                    56:d2:7d:70:39:96:81:54:da:93:fc:30:c8:c4:19:
                    94:40:72:ae:26:45:85:49:57:b9:be:ae:f5:79:b1:
                    71:f1:09:67:69:11:05:01:7c:09:7c:47:8e:51:c1:
                    1d:f1:1d:4d:f7:e7:cd:91:71:7c:fd:5e:bd:68:d7:
                    31:7d:59:39:77:0f:43:d2:3d:60:d5:dd:97:97:36:
                    d6:76:67:cf:0d:e0:77:e5:55:1d:ff:bc:7e:b5:3f:
                    f5:5a:45:e2:42:c8:18:fb:40:63:28:f1:70:e4:8d:
                    2f:d5:e1:95:70:ce:13:18:bd:c9:9a:7f:31:4c:75:
                    ce:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:56:E9:72:9C:4E:80:1C:DC:90:27:AA:06:97:B4:7F:55:71:2E:9C
            X509v3 Authority Key Identifier:
                keyid:4C:BF:D3:E7:2D:4A:03:96:F9:53:47:33:6B:42:67:8F:68:C2:64:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/uFbpcpxOgBzckCeqBpe0f1VxLpw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  3188

    Signature Algorithm: sha256WithRSAEncryption
         6e:55:c1:f0:2f:01:ca:78:90:16:cf:6e:85:10:c8:8e:20:cd:
         04:81:33:0d:50:30:9b:ac:7a:4c:34:14:37:f2:99:40:e9:81:
         5d:2e:6b:c9:80:f3:08:9a:68:5a:2f:c9:61:67:3e:df:28:ed:
         4b:a9:ea:6f:66:d1:c1:39:a0:2f:9c:a3:5b:a9:19:63:93:00:
         e8:85:5f:13:57:6a:af:f7:4b:af:cb:9b:d5:ff:c2:d2:a2:d2:
         f8:46:25:ea:0a:34:58:ee:f0:49:8c:7c:3b:b8:15:4e:fa:82:
         d8:32:78:94:a1:44:8b:50:4e:34:3e:f7:d1:a6:bc:9a:0d:a5:
         57:cb:24:c0:9d:c8:75:5f:8c:cf:5d:d2:44:54:dd:1f:d8:4e:
         c8:be:d5:21:ba:41:2f:31:fb:e8:72:dc:f2:32:5b:8f:34:68:
         6e:79:ca:56:b4:27:2e:90:a8:a4:a8:01:ff:cf:c3:67:b6:9a:
         00:b0:a3:88:18:af:a1:a6:d5:30:f9:f7:23:e6:70:f4:37:c2:
         37:87:e8:00:a6:ed:0f:a3:7c:af:60:e4:c1:50:0e:3a:8d:cf:
         d5:a5:55:85:db:bc:f6:2b:26:9e:4b:0d:46:9a:66:f7:b1:0c:
         12:86:13:9a:37:86:69:70:12:57:35:56:fc:58:9b:aa:31:f7:
         6c:56:4c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:50:20 2026 by rpki-client