Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/CnE_z3AWCy97yGhKLvwPyqYQWVU.asa
File:                     CnE_z3AWCy97yGhKLvwPyqYQWVU.asa (raw, json)
Hash identifier:          57p5HzcV2YfmP6Dn9k2t+As/r0x2DJ4LF6ED4E0kk1o=
Subject key identifier:   0A:71:3F:CF:70:16:0B:2F:7B:C8:68:4A:2E:FC:0F:CA:A6:10:59:55
Certificate issuer:       /CN=f8fab50bd22842367f32c4ea6e8dfade015a2377
Certificate serial:       019F236921D40FDC3E97D388E32531F34475
Authority key identifier: F8:FA:B5:0B:D2:28:42:36:7F:32:C4:EA:6E:8D:FA:DE:01:5A:23:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/CnE_z3AWCy97yGhKLvwPyqYQWVU.asa
Signing time:             Thu 02 Jul 2026 15:18:40 +0000
ASPA not before:          Thu 02 Jul 2026 15:18:40 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            213392
Providers:                AS: 34549
                          AS: 34872
                          AS: 34927
                          AS: 200482
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:69:21:d4:0f:dc:3e:97:d3:88:e3:25:31:f3:44:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8fab50bd22842367f32c4ea6e8dfade015a2377
        Validity
            Not Before: Jul  2 15:18:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0a713fcf70160b2f7bc8684a2efc0fcaa6105955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:cc:85:c0:fa:3d:da:0e:6c:1c:75:c9:b1:dd:
                    b2:57:4e:59:ba:9e:6c:3d:2e:50:ff:a5:7f:24:47:
                    60:e0:e5:32:7d:45:ff:a1:b7:5e:33:3b:91:39:93:
                    6c:d7:a8:69:1c:31:1e:f0:16:34:61:4f:74:8f:ad:
                    9a:71:93:8f:30:8a:f6:7c:5f:89:b7:b6:ce:4d:25:
                    df:5c:71:c3:2c:ba:cc:5a:e7:ae:b0:3b:8e:3c:9a:
                    9a:e6:78:a3:ff:94:1d:34:69:22:44:fb:7b:4f:83:
                    70:21:cb:7a:f8:06:dc:64:d8:e1:14:e5:43:07:77:
                    d8:f1:77:d7:33:80:f0:c1:a6:e4:9b:1c:be:42:33:
                    94:66:e3:95:56:5a:78:ed:5b:3a:f7:9a:0b:62:17:
                    61:7b:7d:51:4b:f2:27:32:b0:f6:40:ef:3d:08:3a:
                    92:08:ba:2f:44:f0:67:33:01:58:fd:08:b6:b2:a9:
                    87:bc:05:0b:e0:c3:dc:c8:9e:83:63:2a:7e:de:62:
                    b2:c1:9c:1a:3e:7a:0a:bb:08:80:eb:00:73:80:97:
                    13:bb:e6:a2:48:a8:76:3f:ac:e0:f2:a9:53:7f:e1:
                    64:db:f7:6a:a9:b9:e8:ca:34:68:23:ec:02:d3:42:
                    11:bb:d4:da:7a:cf:12:64:36:4d:82:6b:3f:68:b3:
                    b4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:71:3F:CF:70:16:0B:2F:7B:C8:68:4A:2E:FC:0F:CA:A6:10:59:55
            X509v3 Authority Key Identifier:
                keyid:F8:FA:B5:0B:D2:28:42:36:7F:32:C4:EA:6E:8D:FA:DE:01:5A:23:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/CnE_z3AWCy97yGhKLvwPyqYQWVU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213392

    Signature Algorithm: sha256WithRSAEncryption
         1f:c0:88:de:ca:5c:0b:6c:e3:66:5c:a4:e4:9e:27:e2:96:2b:
         cd:85:21:0b:fd:92:93:ef:21:d3:67:0f:dd:70:d3:4d:ca:54:
         59:2c:12:6b:e5:d9:c8:d6:4a:14:50:40:81:4c:94:8e:73:f6:
         05:53:f2:57:21:3d:23:bd:31:96:b5:99:d2:d3:12:3b:69:43:
         a3:b0:1d:c3:87:ac:d4:c8:da:94:33:02:af:b9:5e:1a:eb:30:
         a8:ea:e6:b9:27:a7:88:e7:da:7e:ba:4b:2d:70:4d:73:64:6c:
         91:d7:07:26:80:0b:be:70:5b:a4:fa:50:7b:0d:6b:dc:cb:6f:
         53:dc:21:78:b9:bf:f1:d0:42:28:b1:9c:ca:93:0c:31:20:f0:
         69:61:ba:fa:d9:13:e8:a1:16:13:c8:f8:fb:55:2a:a9:28:5d:
         29:dc:c6:5b:fa:09:a7:72:8b:a2:c4:73:05:01:3c:a0:ff:77:
         52:86:9f:10:6b:a7:08:d1:40:c9:a7:33:ba:ea:72:b1:15:1e:
         4f:06:17:dd:5c:ea:65:62:a2:cf:58:16:9c:0f:34:c1:6c:19:
         70:4a:b7:76:16:0d:02:7e:b6:63:fd:bf:e7:09:f7:d6:e4:90:
         61:ad:9b:16:28:87:d7:a9:cb:c3:25:14:0e:39:de:bb:80:ba:
         0c:d9:c2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:55:52 2026 by rpki-client