Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/OYzbsj6FLUEHsgwlJJ7heGARRq4.asa
File:                     OYzbsj6FLUEHsgwlJJ7heGARRq4.asa (raw, json)
Hash identifier:          SJgRMlfE3uLi4+sl6GsAWwnlf9PCmW9uTAfxdTwTH/s=
Subject key identifier:   39:8C:DB:B2:3E:85:2D:41:07:B2:0C:25:24:9E:E1:78:60:11:46:AE
Certificate issuer:       /CN=ad109dee6fbdc256df911460ccc915d066a8ff8b
Certificate serial:       01A01E92A29E24FE4184CFE7A8793937C8FE
Authority key identifier: AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/OYzbsj6FLUEHsgwlJJ7heGARRq4.asa
Signing time:             Thu 20 Aug 2026 09:48:41 +0000
ASPA not before:          Thu 20 Aug 2026 09:48:41 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            33924
Providers:                AS: 6939
                          AS: 58137
                          AS: 198890
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Aug 2026 14:02:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:1e:92:a2:9e:24:fe:41:84:cf:e7:a8:79:39:37:c8:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad109dee6fbdc256df911460ccc915d066a8ff8b
        Validity
            Not Before: Aug 20 09:48:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=398cdbb23e852d4107b20c25249ee178601146ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:11:04:18:f0:5e:6d:be:47:dd:ff:50:f8:8a:
                    97:93:1b:a7:58:9c:21:05:6c:ae:70:95:72:e8:e7:
                    e4:58:55:ea:c4:1f:60:ab:67:83:af:48:7e:11:b7:
                    3b:9e:41:9d:4e:f3:70:7a:8e:60:67:d3:38:d3:2a:
                    06:c9:5d:03:b8:06:07:11:a1:98:c7:3d:08:95:d8:
                    58:b9:6a:5f:19:c8:81:e7:1c:7e:29:5d:3e:b3:89:
                    0d:32:91:32:39:b4:4f:26:ac:4f:17:ca:1e:e9:72:
                    b2:2c:7c:02:a7:32:74:3b:55:a0:29:77:64:d3:35:
                    93:d8:5c:bb:f5:5c:1d:06:bf:cd:82:9c:4b:52:bc:
                    16:93:6f:37:46:00:88:84:7d:7b:04:53:84:ea:b0:
                    cf:7e:0c:4e:89:da:d3:b2:de:91:38:b3:4b:41:a4:
                    97:b0:2d:31:ae:d5:f5:30:12:fb:5d:08:3a:fd:1c:
                    59:10:61:71:50:d6:42:06:96:5b:fa:a6:c9:d7:7c:
                    f6:05:30:fb:3a:0c:58:bc:12:f8:85:ab:5b:c6:20:
                    f5:25:d8:ef:a1:48:df:63:22:b8:fb:e4:ec:72:09:
                    27:6b:8e:52:6d:e3:b6:80:40:50:ce:b6:83:ba:bf:
                    b8:4f:73:ee:b6:74:98:65:4d:c5:c8:80:d3:c7:b0:
                    d4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:8C:DB:B2:3E:85:2D:41:07:B2:0C:25:24:9E:E1:78:60:11:46:AE
            X509v3 Authority Key Identifier:
                keyid:AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/OYzbsj6FLUEHsgwlJJ7heGARRq4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  33924

    Signature Algorithm: sha256WithRSAEncryption
         c3:50:1d:28:c0:3e:10:b2:b8:d1:ea:af:c6:39:18:bc:47:42:
         8e:13:8a:af:82:6c:16:92:8a:43:76:76:d2:85:80:ba:24:c9:
         a8:63:31:a7:8c:e4:b9:a9:c3:42:8d:17:61:9d:68:8c:20:b1:
         f7:42:62:17:c4:25:53:27:d3:3a:da:f6:2f:68:f0:bc:26:22:
         b0:68:94:c9:32:4f:10:d3:7f:c9:f9:3e:1d:94:47:33:b4:30:
         fc:3a:29:70:dc:62:a5:52:39:f5:cd:f4:ff:37:cc:59:c6:f9:
         ce:80:e3:80:11:5d:7d:0a:83:0a:c0:78:df:77:13:a2:76:95:
         d7:c9:c7:b7:36:5b:3c:9b:fa:d8:46:35:b2:b6:b8:64:5c:e2:
         0c:2d:3b:38:b1:f8:ff:ef:39:1b:37:a8:6b:a0:e5:e9:f9:13:
         a6:a3:3b:8f:08:17:78:52:55:bf:6c:6c:d7:60:f9:89:b6:a8:
         ba:d2:b6:50:57:7e:13:65:14:a6:6b:f7:0a:6b:ef:d7:e6:af:
         b3:f3:fa:87:f7:43:92:8e:ab:5d:20:2f:2b:cc:f1:83:5d:3d:
         85:33:95:ec:68:7e:2d:ef:25:37:b4:57:7a:42:ef:e8:e0:16:
         a6:75:2a:30:75:dc:41:36:71:10:c3:66:8d:ec:aa:e7:af:66:
         29:4d:5c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 23:34:09 2026 by rpki-client