Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/09634a-13b0-47d7-8ffe-3d4989f78ac7/1/p29WWOqywdZEwcDbTEnqNVwGdsc.asa
File:                     p29WWOqywdZEwcDbTEnqNVwGdsc.asa (raw, json)
Hash identifier:          Sho+2gNqiG63dYui6BqvBHj91ltphciQPD5MNT7/8eg=
Subject key identifier:   A7:6F:56:58:EA:B2:C1:D6:44:C1:C0:DB:4C:49:EA:35:5C:06:76:C7
Certificate issuer:       /CN=4b3c79c655c8e2b03a57e03bf2d103e81754cbe2
Certificate serial:       01A17D559FC87E2E6E80F9F61CB2A013C2DB
Authority key identifier: 4B:3C:79:C6:55:C8:E2:B0:3A:57:E0:3B:F2:D1:03:E8:17:54:CB:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Szx5xlXI4rA6V-A78tED6BdUy-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/09634a-13b0-47d7-8ffe-3d4989f78ac7/1/p29WWOqywdZEwcDbTEnqNVwGdsc.asa
Signing time:             Tue 27 Oct 2026 12:28:45 +0000
ASPA not before:          Tue 27 Oct 2026 12:28:45 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            197283
Providers:                AS: 201988
                          AS: 202759
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/09634a-13b0-47d7-8ffe-3d4989f78ac7/1/Szx5xlXI4rA6V-A78tED6BdUy-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/09634a-13b0-47d7-8ffe-3d4989f78ac7/1/Szx5xlXI4rA6V-A78tED6BdUy-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Szx5xlXI4rA6V-A78tED6BdUy-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 17:37:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7d:55:9f:c8:7e:2e:6e:80:f9:f6:1c:b2:a0:13:c2:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3c79c655c8e2b03a57e03bf2d103e81754cbe2
        Validity
            Not Before: Oct 27 12:28:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a76f5658eab2c1d644c1c0db4c49ea355c0676c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:95:c0:77:34:57:ee:ab:2c:09:37:2c:6d:61:
                    5f:30:9c:cd:6a:c1:57:5f:79:7b:57:67:da:73:24:
                    97:06:f4:ec:d9:9e:9e:8c:9f:65:f8:05:4e:79:05:
                    c0:10:46:72:1f:29:b6:a2:45:5e:a8:97:4e:34:a5:
                    ad:91:16:66:d3:47:bf:e2:df:81:d1:65:f4:84:84:
                    44:61:3a:59:e3:d9:fa:c6:47:98:87:9e:d7:17:f3:
                    4a:1a:fa:e4:ec:0e:ae:67:52:e4:78:76:52:92:6e:
                    76:ad:c4:88:43:47:2a:1c:08:61:87:d7:6e:ac:9f:
                    d9:b4:22:78:d9:18:ee:32:e3:be:f7:9c:5a:cd:e4:
                    3b:05:6c:2e:93:12:23:8c:2d:fe:87:1b:db:01:73:
                    85:c5:18:18:31:0c:35:45:48:3a:41:f3:80:bd:d0:
                    e9:3f:50:36:2b:78:15:6b:9c:cf:a5:98:0f:23:44:
                    f7:85:86:00:67:b2:2a:39:c0:9c:b7:5a:35:d2:01:
                    ec:67:2f:c8:ce:93:22:27:c3:86:35:9f:c1:8b:8a:
                    74:fc:09:e5:58:d0:10:df:9d:2a:c0:26:1e:4f:ab:
                    bf:be:10:16:83:c8:3e:19:26:ab:9a:9c:07:39:42:
                    7d:4a:2c:d5:d5:44:bd:3b:78:12:33:56:7d:3a:66:
                    f8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:6F:56:58:EA:B2:C1:D6:44:C1:C0:DB:4C:49:EA:35:5C:06:76:C7
            X509v3 Authority Key Identifier:
                keyid:4B:3C:79:C6:55:C8:E2:B0:3A:57:E0:3B:F2:D1:03:E8:17:54:CB:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Szx5xlXI4rA6V-A78tED6BdUy-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/09634a-13b0-47d7-8ffe-3d4989f78ac7/1/p29WWOqywdZEwcDbTEnqNVwGdsc.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/09634a-13b0-47d7-8ffe-3d4989f78ac7/1/Szx5xlXI4rA6V-A78tED6BdUy-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197283

    Signature Algorithm: sha256WithRSAEncryption
         39:b4:22:dc:a6:ae:ed:33:6f:47:65:42:8c:a1:ac:0c:cf:6a:
         c2:3a:8f:27:cc:6f:35:21:52:6b:fd:b7:36:2b:d7:16:ae:db:
         15:8b:53:d1:14:45:f0:02:04:a0:28:a0:75:fa:75:9f:27:c2:
         4b:8d:15:63:a1:bf:f9:88:9b:cd:a8:44:82:9e:34:ab:91:d0:
         83:fa:3a:b3:f6:56:ef:98:13:42:2b:cf:aa:6f:3e:49:01:8b:
         a2:39:0e:0d:5c:f2:1b:d5:01:a8:f3:1d:55:de:8e:10:7d:2c:
         98:45:96:13:eb:7b:b9:3b:06:35:5b:88:e9:13:9e:99:1c:cd:
         6a:53:04:e2:da:d7:ee:f8:9f:07:05:3a:0d:9d:bd:f8:72:22:
         3a:8a:72:20:c2:0d:ae:45:5a:98:b2:3a:cb:f8:04:21:e3:66:
         04:c5:54:23:0b:a2:5e:50:74:eb:d9:15:ee:03:39:30:13:0c:
         7c:03:be:3c:30:dd:cf:04:a7:d6:af:d4:32:81:42:0c:bf:47:
         04:ff:a5:d6:ee:92:16:47:3c:d4:6d:5e:54:54:a5:c3:76:f1:
         61:c8:82:ac:8b:04:bc:df:65:37:45:f4:be:69:15:7c:de:96:
         8a:dd:12:ab:40:f6:29:e2:a3:a0:37:4e:e6:95:14:5c:bb:46:
         ee:4d:63:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 01:56:10 2026 by rpki-client