Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/clsOSy-Dv1oPXpGHIfNiA-Lx9Ec.asa
File:                     clsOSy-Dv1oPXpGHIfNiA-Lx9Ec.asa (raw, json)
Hash identifier:          a0NkU9H4yT+xrABg/z7K0VW4zoOJe+M0dWVwxur8Lc8=
Subject key identifier:   72:5B:0E:4B:2F:83:BF:5A:0F:5E:91:87:21:F3:62:03:E2:F1:F4:47
Certificate issuer:       /CN=dee623e2aff7b03afeb94260348c1633b54d9056
Certificate serial:       01A16E835FE42C1AD66690E5C60D51B16499
Authority key identifier: DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/clsOSy-Dv1oPXpGHIfNiA-Lx9Ec.asa
Signing time:             Sat 24 Oct 2026 15:24:25 +0000
ASPA not before:          Sat 24 Oct 2026 15:24:25 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            202354
Providers:                AS: 210021
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 23:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6e:83:5f:e4:2c:1a:d6:66:90:e5:c6:0d:51:b1:64:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dee623e2aff7b03afeb94260348c1633b54d9056
        Validity
            Not Before: Oct 24 15:24:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=725b0e4b2f83bf5a0f5e918721f36203e2f1f447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:05:b8:4f:38:6e:80:cd:5d:92:c8:15:e8:24:
                    dd:a7:67:0e:f7:54:0b:d7:9e:ff:3f:ba:0e:14:b7:
                    7f:c5:cd:9b:fd:3c:d2:95:b6:e8:d0:a4:ea:33:ed:
                    b0:4e:f5:86:23:62:16:fc:f1:0d:4e:4f:8b:19:2d:
                    4d:0f:89:a0:45:b9:f4:c8:43:f5:d4:67:53:2d:0e:
                    18:83:ca:87:64:22:cc:68:9b:aa:6b:29:ee:c6:93:
                    f0:ef:8f:0c:2d:69:a9:d3:a3:78:d4:75:cd:a6:26:
                    c5:af:ca:fc:df:c1:ce:57:05:55:18:3f:6b:bd:f7:
                    67:81:f7:47:ca:68:40:b5:2b:2c:93:f7:72:63:d4:
                    21:9e:2d:7a:84:6b:a0:23:1b:98:6a:44:89:f9:b2:
                    76:2a:94:2d:c4:31:5b:c7:8e:c8:d6:7b:62:a7:e5:
                    68:c4:2d:d1:f8:81:05:69:33:c2:1d:d1:63:82:db:
                    58:b5:24:fa:50:4a:e4:17:64:59:22:bb:09:3c:75:
                    ed:27:e6:12:46:31:57:55:20:cd:0d:28:ab:62:bd:
                    80:3f:db:ec:45:db:b4:09:26:a7:4c:39:dd:10:b5:
                    e1:89:7d:a7:3b:b6:9b:69:01:a8:a9:f3:5f:be:aa:
                    51:9e:22:55:da:93:72:0e:d1:03:a0:fb:f5:1a:f1:
                    0f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:5B:0E:4B:2F:83:BF:5A:0F:5E:91:87:21:F3:62:03:E2:F1:F4:47
            X509v3 Authority Key Identifier:
                keyid:DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/clsOSy-Dv1oPXpGHIfNiA-Lx9Ec.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202354

    Signature Algorithm: sha256WithRSAEncryption
         2c:a9:cf:d7:59:75:b4:60:01:a7:c7:9b:2c:77:68:5c:9d:93:
         40:38:91:08:1d:5f:fc:32:6e:b6:78:e7:f6:ae:60:0a:49:56:
         5a:25:cd:74:20:67:78:c6:42:bb:e4:b3:b3:22:a7:f3:c8:b1:
         ea:86:7c:89:13:af:01:a9:94:54:f9:dc:fa:d5:05:0f:0e:93:
         e1:44:5f:1a:9a:19:fc:dc:4c:01:92:c6:e5:67:e5:f6:97:14:
         a8:53:b9:92:12:00:9e:61:1a:aa:b4:41:10:cf:e7:af:c0:ed:
         7f:f5:8b:94:73:9b:f6:64:03:9e:7b:88:f1:11:72:1a:0c:3a:
         7a:9c:d3:0c:da:6e:c6:1a:8e:a3:44:04:68:2a:11:52:c6:c8:
         36:f2:c9:66:53:a7:e5:9a:7f:70:c6:40:3f:83:be:d7:a5:15:
         ec:b1:b7:40:3d:e2:26:53:10:f3:b1:71:05:ff:02:d9:76:f0:
         d6:a4:d5:a6:ad:d1:04:9b:b7:e3:d9:8c:78:fc:ed:76:e1:33:
         00:db:1e:2c:48:f5:22:3f:75:ec:d4:07:7b:97:20:23:28:0a:
         db:15:fe:31:40:85:fd:45:de:7f:94:55:54:45:38:91:45:2e:
         a9:0d:af:b0:aa:8d:0d:bf:78:6f:60:0c:2b:08:ab:06:69:ca:
         d6:5e:81:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:37:47 2026 by rpki-client