Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/e7244a-2c6c-42ee-8e22-fab4c56d3013/1/CjhHfksX_V_SdQUfM0SgRx_hkMs.asa
File:                     CjhHfksX_V_SdQUfM0SgRx_hkMs.asa (raw, json)
Hash identifier:          NOZLcv27XZSi1ZcEGYFc8cYQPVIhU6kNJHUso451mdk=
Subject key identifier:   0A:38:47:7E:4B:17:FD:5F:D2:75:05:1F:33:44:A0:47:1F:E1:90:CB
Certificate issuer:       /CN=9bf76ea8ede093ca7b50d4e1db5e9d41a22a9e17
Certificate serial:       019FAA5216ABA0C3F28CE8CA2432F464332F
Authority key identifier: 9B:F7:6E:A8:ED:E0:93:CA:7B:50:D4:E1:DB:5E:9D:41:A2:2A:9E:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m_duqO3gk8p7UNTh216dQaIqnhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/e7244a-2c6c-42ee-8e22-fab4c56d3013/1/CjhHfksX_V_SdQUfM0SgRx_hkMs.asa
Signing time:             Tue 28 Jul 2026 20:02:14 +0000
ASPA not before:          Tue 28 Jul 2026 20:02:14 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            219414
Providers:                AS: 702
                          AS: 56595
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/e7244a-2c6c-42ee-8e22-fab4c56d3013/1/m_duqO3gk8p7UNTh216dQaIqnhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/e7244a-2c6c-42ee-8e22-fab4c56d3013/1/m_duqO3gk8p7UNTh216dQaIqnhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m_duqO3gk8p7UNTh216dQaIqnhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:52:16:ab:a0:c3:f2:8c:e8:ca:24:32:f4:64:33:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bf76ea8ede093ca7b50d4e1db5e9d41a22a9e17
        Validity
            Not Before: Jul 28 20:02:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0a38477e4b17fd5fd275051f3344a0471fe190cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:8c:3d:e8:0e:6a:42:a3:2e:92:6e:ff:36:21:
                    a4:7a:ee:67:3c:eb:2e:96:63:9f:1a:ad:bd:af:81:
                    dd:29:a0:fb:2d:a7:b5:27:19:09:47:da:e6:33:71:
                    1b:38:cb:32:10:30:bc:83:4f:14:69:cf:dd:db:6f:
                    42:ed:d3:cd:ba:68:8d:93:29:94:9a:9d:55:85:12:
                    e2:a4:7e:c6:9c:44:ff:15:3a:d7:f1:f7:c0:c4:2c:
                    2e:85:ad:88:9f:cc:78:36:2d:ab:37:ad:65:6e:f8:
                    19:6a:39:ba:f0:dc:cb:7c:1c:7a:b6:5f:9d:b9:3b:
                    32:a6:71:a0:0d:03:8f:dc:db:16:8b:17:9f:01:61:
                    ab:06:20:85:ab:20:a3:39:4b:10:c1:30:e7:47:33:
                    9a:5f:dc:17:be:e4:74:b2:06:d0:99:f2:b9:66:9b:
                    c5:1f:c1:e5:e2:f0:53:0f:ec:d1:9c:bb:bc:cf:e7:
                    be:a5:8d:b5:7c:22:bb:47:25:35:ab:d5:d8:a0:32:
                    84:3a:51:2a:4d:dd:09:d5:69:7d:39:6b:7c:31:49:
                    0e:c1:36:53:9f:e4:e2:d9:81:c6:a2:0f:e2:d2:b9:
                    cb:73:00:c5:26:ee:ce:d0:a3:07:9f:d3:3f:74:60:
                    f7:cd:45:41:0c:c4:c1:e5:30:5d:a2:be:27:f9:0b:
                    36:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:38:47:7E:4B:17:FD:5F:D2:75:05:1F:33:44:A0:47:1F:E1:90:CB
            X509v3 Authority Key Identifier:
                keyid:9B:F7:6E:A8:ED:E0:93:CA:7B:50:D4:E1:DB:5E:9D:41:A2:2A:9E:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_duqO3gk8p7UNTh216dQaIqnhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e7244a-2c6c-42ee-8e22-fab4c56d3013/1/CjhHfksX_V_SdQUfM0SgRx_hkMs.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e7244a-2c6c-42ee-8e22-fab4c56d3013/1/m_duqO3gk8p7UNTh216dQaIqnhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  219414

    Signature Algorithm: sha256WithRSAEncryption
         61:f7:a5:29:8e:63:5f:f3:96:36:60:be:21:da:3a:a9:51:79:
         28:d3:eb:14:4d:ea:59:7b:08:47:9d:5e:f0:b5:eb:9d:74:b6:
         1b:9e:a1:e2:a1:1d:bf:dd:88:50:e5:dc:03:df:eb:a6:3e:4b:
         ee:83:55:06:c7:3b:be:a1:09:8a:55:b0:a6:60:f4:30:95:1c:
         aa:55:01:1e:14:4b:f1:ca:80:0c:e1:b0:fe:24:69:48:b4:79:
         54:38:ef:6e:9c:44:2c:e9:1a:b2:5a:aa:e5:53:e1:f7:80:7c:
         48:94:e4:77:63:d0:f0:d6:22:da:e0:c0:48:b4:ea:61:bd:b2:
         8a:24:25:53:34:4a:02:c7:27:52:b7:5e:15:13:cc:fd:0b:47:
         44:cb:9c:48:29:fa:67:ea:f0:ae:79:b5:d8:49:5b:2e:a6:79:
         86:29:8e:a2:da:18:66:76:ca:2c:d1:89:eb:ec:c0:99:ff:b4:
         2b:7d:2e:41:33:d2:c0:05:08:ac:02:d0:c6:a4:f9:4a:43:3e:
         b3:e7:2e:b6:41:68:e4:e7:e7:6c:7a:36:b3:1d:33:24:73:f6:
         b3:fd:c0:7a:ff:cb:ad:60:bd:50:92:3d:7d:64:b9:bf:3b:b2:
         ad:a6:11:16:66:22:12:3f:5a:0e:b3:89:ee:95:5e:aa:46:3f:
         f1:de:33:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:50:07 2026 by rpki-client