Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/GUFmBdi0_Y_tG7LWELBPh9QEM9o.asa
File:                     GUFmBdi0_Y_tG7LWELBPh9QEM9o.asa (raw, json)
Hash identifier:          ZMR4mH+eqRB4yaYaBEAA+Z5mr/sJpbjQJrZ/3hcHthA=
Subject key identifier:   19:41:66:05:D8:B4:FD:8F:ED:1B:B2:D6:10:B0:4F:87:D4:04:33:DA
Certificate issuer:       /CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef
Certificate serial:       019E26A1C6915637CC162B06AFEAFAF817DD
Authority key identifier: D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/GUFmBdi0_Y_tG7LWELBPh9QEM9o.asa
Signing time:             Thu 14 May 2026 13:16:36 +0000
ASPA not before:          Thu 14 May 2026 13:16:36 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            2027
Providers:                AS: 6696
                          AS: 35280
                          AS: 35625
                          AS: 47160
                          AS: 49434
                          AS: 62000
                          AS: 209097
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 22:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:26:a1:c6:91:56:37:cc:16:2b:06:af:ea:fa:f8:17:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef
        Validity
            Not Before: May 14 13:16:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=19416605d8b4fd8fed1bb2d610b04f87d40433da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ea:c5:74:91:32:f2:21:06:e4:36:e0:97:8a:
                    34:e4:08:49:12:31:1e:79:d1:53:83:37:4e:98:af:
                    e5:6e:f7:9a:3b:43:f9:34:88:d8:cd:af:75:40:3c:
                    67:32:ad:c4:f1:c1:3c:ab:14:87:c9:b1:21:b4:d1:
                    00:46:2a:3c:8d:e8:08:ea:d8:03:26:1b:fc:23:a0:
                    e6:f9:88:63:3f:6c:88:b6:7e:a3:5e:ea:40:fe:7c:
                    d2:a8:92:d7:3c:a7:87:f5:e3:d1:4c:7a:7c:86:8a:
                    7b:95:92:59:92:08:f7:5a:20:b0:28:94:42:c3:41:
                    c3:2e:cf:48:3d:e1:32:0b:d0:5f:f2:c9:5a:da:bb:
                    f7:d0:29:f9:cb:db:49:28:dd:2c:0d:79:41:62:b4:
                    4c:39:f1:d0:88:e2:7f:99:96:8d:bd:2f:48:df:26:
                    53:27:74:71:91:ab:ee:09:75:f6:c3:1b:78:82:cb:
                    62:8a:69:0c:21:ec:68:b3:de:c6:bb:c5:c3:71:d1:
                    73:b3:02:fa:f1:1f:fe:39:fd:b7:91:3b:58:01:dd:
                    be:19:69:2d:89:33:b2:a8:ca:4a:23:a1:11:7e:7d:
                    f1:61:39:46:06:d5:a7:58:1c:8a:03:3a:e9:c9:31:
                    41:f9:7d:03:a7:97:f6:07:d0:90:60:98:04:6f:76:
                    93:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:41:66:05:D8:B4:FD:8F:ED:1B:B2:D6:10:B0:4F:87:D4:04:33:DA
            X509v3 Authority Key Identifier:
                keyid:D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/GUFmBdi0_Y_tG7LWELBPh9QEM9o.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  2027

    Signature Algorithm: sha256WithRSAEncryption
         91:3d:5f:c2:af:5c:c6:b3:6b:50:9f:80:63:cf:f6:ac:5d:eb:
         43:ab:b6:c1:46:3f:a9:dd:b2:a5:d8:0c:e3:de:f4:aa:88:ba:
         2c:d0:f5:c1:0a:c0:48:5b:27:32:3f:29:aa:31:28:76:98:6c:
         3d:29:5e:5b:65:2d:23:ac:4a:b2:c0:58:c6:56:1b:b9:7a:37:
         a0:18:29:cb:e3:a4:8e:2e:d5:bf:09:3c:fe:bc:11:28:c9:0a:
         1e:b3:a4:bc:74:95:9a:f1:d3:85:61:71:b2:9b:f5:f2:60:20:
         22:07:52:64:01:39:f9:dc:5a:55:93:ad:71:f0:41:a6:26:1a:
         e4:2b:45:65:e9:79:53:50:4f:d4:dd:86:b7:f2:8a:b2:ab:b1:
         f3:08:e1:1c:24:60:6e:c9:4c:0d:6c:0b:d3:0a:5e:a1:71:fb:
         07:07:e8:a7:b1:28:44:82:ff:1a:e6:d9:b6:0d:fb:7f:38:eb:
         9c:5c:07:7d:11:cb:88:30:85:4f:57:1b:67:f0:03:ba:84:c3:
         cd:f8:83:f4:ce:c7:de:39:72:db:14:59:4b:5c:b2:e9:75:32:
         3c:94:4c:4c:72:b0:37:99:c8:63:54:62:20:4a:6c:c0:f5:31:
         22:86:a7:b4:a8:b7:01:c6:dc:20:d7:16:c0:93:77:bb:d6:db:
         95:89:7d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 05:36:03 2026 by rpki-client