Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/6wzIbn6Z7lp5PtbDLTxG-zmILxY.asa
File:                     6wzIbn6Z7lp5PtbDLTxG-zmILxY.asa (raw, json)
Hash identifier:          z38nmLbA27NPlhWOJNNoq+Tpqv3KWZDwtJ61CNlRP7U=
Subject key identifier:   EB:0C:C8:6E:7E:99:EE:5A:79:3E:D6:C3:2D:3C:46:FB:39:88:2F:16
Certificate issuer:       /CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9
Certificate serial:       019E23B1475F43A3D2E84CC70317F8AE4894
Authority key identifier: 51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/6wzIbn6Z7lp5PtbDLTxG-zmILxY.asa
Signing time:             Wed 13 May 2026 23:34:41 +0000
ASPA not before:          Wed 13 May 2026 23:34:41 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            212972
Providers:                AS: 62443
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:23:b1:47:5f:43:a3:d2:e8:4c:c7:03:17:f8:ae:48:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9
        Validity
            Not Before: May 13 23:34:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=eb0cc86e7e99ee5a793ed6c32d3c46fb39882f16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:62:1e:8f:54:4d:75:27:12:60:03:0e:38:10:
                    c5:d9:28:36:01:b1:a8:68:a9:b7:52:65:fd:fc:59:
                    af:75:49:5b:e5:47:35:a7:94:aa:f5:42:1a:38:35:
                    62:51:a4:a0:30:10:08:4f:72:68:ec:e7:69:19:e0:
                    04:0d:28:e5:d3:d8:b8:9c:57:a3:68:1b:0e:e7:08:
                    1e:12:1e:8c:a7:5f:8b:74:f4:5f:b7:a2:21:04:26:
                    66:12:da:c6:9c:89:51:da:30:10:be:34:4b:6b:d7:
                    1d:9d:d5:4c:d7:96:ce:ad:33:e7:9e:c7:a7:68:69:
                    19:ad:b7:0a:3c:ef:71:97:2a:84:6f:2b:79:64:45:
                    5d:9f:08:9a:06:26:b8:55:b2:a4:80:76:01:e0:83:
                    1f:e5:9b:a0:1c:7f:48:51:21:1e:78:f7:29:eb:3d:
                    d9:44:21:ea:73:f6:cb:50:69:c5:9d:84:89:dc:cf:
                    cd:8b:85:e4:e1:62:09:5c:c0:da:30:05:6b:c4:c5:
                    7c:c2:a3:e7:31:8e:10:49:f4:70:27:1d:a4:2f:23:
                    67:5d:7f:10:ce:d3:a2:35:9c:dd:50:6e:25:13:d0:
                    fd:19:42:5f:f4:f1:37:25:40:9f:fd:f5:9e:d7:8f:
                    a6:0f:8f:27:c5:2a:a5:e4:2b:59:7f:fa:62:26:09:
                    13:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:0C:C8:6E:7E:99:EE:5A:79:3E:D6:C3:2D:3C:46:FB:39:88:2F:16
            X509v3 Authority Key Identifier:
                keyid:51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/6wzIbn6Z7lp5PtbDLTxG-zmILxY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212972

    Signature Algorithm: sha256WithRSAEncryption
         39:08:59:8c:db:48:d5:12:1c:fb:3d:eb:bb:ef:90:3a:9e:b7:
         eb:8a:df:f8:7f:08:fe:d6:bd:b5:be:1c:c7:e0:dc:b8:fd:ff:
         66:ff:ae:10:a5:77:9b:c7:e9:a2:ed:73:b4:50:ed:99:52:f0:
         8a:d9:6e:0d:df:dd:82:23:b5:89:bc:d3:41:4d:86:5a:fc:0f:
         0b:d4:4b:3d:92:12:6c:10:0a:f8:da:5d:30:04:01:84:48:df:
         b6:2b:21:76:c6:08:13:36:ea:a9:79:36:2b:c0:ab:a6:91:47:
         e7:68:b7:06:56:76:87:0e:c7:e5:f9:34:91:f8:2d:f3:bd:90:
         c0:28:ce:0e:cb:e5:28:05:51:2e:41:7f:53:c6:97:d6:bf:5c:
         57:cc:c3:fd:79:3d:4a:49:54:d1:36:31:56:a0:05:70:e9:23:
         be:04:f0:a6:b4:84:29:1b:65:91:6a:13:22:5c:b1:06:52:6d:
         98:1e:01:e4:c1:4b:27:4d:80:bb:ab:db:bb:cb:4a:5a:5e:69:
         b4:18:6d:4a:d7:cf:22:21:8d:19:da:d2:21:ec:79:72:bd:4a:
         27:e3:c9:f5:04:b6:9e:29:52:89:34:e5:fa:6b:7c:08:97:36:
         42:f0:69:39:ae:c1:a4:47:4d:9b:1d:17:73:ab:c5:aa:48:65:
         18:e7:91:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 05:36:04 2026 by rpki-client