Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/eO4OXeTBNdp3Wk5KjPR2B_e07OI.asa
File:                     eO4OXeTBNdp3Wk5KjPR2B_e07OI.asa (raw, json)
Hash identifier:          vSPUOrqLSS1QDlHSmyS6Ip+i1a344wmk09R05jnzxf8=
Subject key identifier:   78:EE:0E:5D:E4:C1:35:DA:77:5A:4E:4A:8C:F4:76:07:F7:B4:EC:E2
Certificate issuer:       /CN=099d3946413dd11161b46c7df6ad362a9938d5d4
Certificate serial:       019DAB1310BB4CEA90415B0009714262291F
Authority key identifier: 09:9D:39:46:41:3D:D1:11:61:B4:6C:7D:F6:AD:36:2A:99:38:D5:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/eO4OXeTBNdp3Wk5KjPR2B_e07OI.asa
Signing time:             Mon 20 Apr 2026 13:27:26 +0000
ASPA not before:          Mon 20 Apr 2026 13:27:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            208777
Providers:                AS: 3216
                          AS: 29226
                          AS: 199599
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ab:13:10:bb:4c:ea:90:41:5b:00:09:71:42:62:29:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=099d3946413dd11161b46c7df6ad362a9938d5d4
        Validity
            Not Before: Apr 20 13:27:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=78ee0e5de4c135da775a4e4a8cf47607f7b4ece2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:da:bd:51:e2:45:d7:a3:4e:6e:fa:1c:77:50:
                    84:d1:d5:56:e0:15:21:ab:f0:b2:c8:ce:65:e0:96:
                    21:cc:6a:f6:37:b9:ad:c7:da:ab:09:05:cc:e2:5f:
                    89:0a:82:0b:33:e6:cf:13:0a:18:5c:c3:3c:27:25:
                    eb:bf:69:d0:64:50:b4:a2:c6:e4:7b:29:21:72:f2:
                    8f:ac:aa:8a:66:85:49:01:70:56:56:f8:67:0b:ab:
                    8b:83:8a:22:81:02:c0:21:ac:df:ce:b9:7d:52:2c:
                    24:f2:e7:2a:a7:ca:37:7f:b4:66:78:f4:5b:3d:5a:
                    3c:79:21:a2:b7:3f:1c:e6:bc:de:33:03:f0:fd:26:
                    88:91:52:f1:89:9d:6a:40:1f:c7:2b:83:92:ed:99:
                    9f:df:30:7d:9f:98:05:79:da:85:ad:bb:bb:32:bc:
                    be:b9:c3:92:72:11:c9:71:1e:0f:9e:f3:33:8c:1c:
                    cb:8a:70:37:1b:ab:33:7c:30:8b:18:68:94:96:db:
                    ad:da:df:40:ab:75:ef:bc:99:3b:1a:2c:aa:e6:1e:
                    58:a0:13:ed:50:dc:76:9e:de:01:ac:e9:df:d6:49:
                    60:1b:06:94:5f:26:3d:82:ce:c9:34:dc:83:2f:50:
                    0d:3c:fe:7b:86:6e:f9:67:8f:11:ff:60:72:e6:d8:
                    86:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:EE:0E:5D:E4:C1:35:DA:77:5A:4E:4A:8C:F4:76:07:F7:B4:EC:E2
            X509v3 Authority Key Identifier:
                keyid:09:9D:39:46:41:3D:D1:11:61:B4:6C:7D:F6:AD:36:2A:99:38:D5:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/eO4OXeTBNdp3Wk5KjPR2B_e07OI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208777

    Signature Algorithm: sha256WithRSAEncryption
         a9:8c:87:4b:59:67:b6:16:75:10:52:07:c6:b8:1c:34:be:b8:
         b3:2c:98:f1:da:5f:87:3b:c6:75:87:f0:27:71:01:39:27:66:
         5f:a6:03:0a:8a:5c:ff:a3:70:d3:cb:fc:d5:54:36:bf:f2:e5:
         c3:f3:76:b5:9e:37:aa:10:de:34:b6:21:14:75:5e:a6:98:94:
         5e:29:a1:4a:4d:8f:d5:4c:6b:20:15:62:c9:f2:de:2f:b5:ee:
         48:73:ce:3f:c9:7c:e4:19:e7:1f:2d:1c:0a:ef:22:3d:24:84:
         65:19:8f:7f:a8:18:12:85:8f:6c:44:e9:1e:3a:d5:88:b5:dc:
         87:99:01:c6:04:0e:48:1f:8f:ac:ff:a8:a2:5b:34:c0:34:bd:
         a2:ea:e4:dd:0c:69:ec:79:2d:01:f6:aa:dd:31:16:7b:a3:30:
         32:70:4e:31:ca:97:7c:06:b6:02:d0:28:55:10:34:db:c6:d3:
         42:93:8a:d0:01:6d:d8:ec:a5:8a:e1:98:04:9d:75:28:49:fd:
         9a:0c:5a:3b:3c:05:88:6c:bd:75:0c:56:cc:e9:81:20:92:c6:
         e2:7d:20:50:95:13:51:5e:f5:38:a3:31:c9:98:0b:76:e5:97:
         87:25:9f:53:fd:c1:56:50:89:8d:b7:d7:25:37:82:f0:16:11:
         2b:36:6b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 11:56:35 2026 by rpki-client