Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/10c56e-9549-43c1-a0b0-2ddf496d9162/1/G1OX7ILlgKdKRaEQC3yLAdh68gk.asa
File:                     G1OX7ILlgKdKRaEQC3yLAdh68gk.asa (raw, json)
Hash identifier:          GpQzi3mBSE/QxPJWiPHv4AHtih7tmvna56AV22SxjnE=
Subject key identifier:   1B:53:97:EC:82:E5:80:A7:4A:45:A1:10:0B:7C:8B:01:D8:7A:F2:09
Certificate issuer:       /CN=d2fab64b0168e072bfaa3b24b97040fbfc1b7aaa
Certificate serial:       019FB78F154774FA1106D230320835AEA2EB
Authority key identifier: D2:FA:B6:4B:01:68:E0:72:BF:AA:3B:24:B9:70:40:FB:FC:1B:7A:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0vq2SwFo4HK_qjskuXBA-_wbeqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/10c56e-9549-43c1-a0b0-2ddf496d9162/1/G1OX7ILlgKdKRaEQC3yLAdh68gk.asa
Signing time:             Fri 31 Jul 2026 09:43:55 +0000
ASPA not before:          Fri 31 Jul 2026 09:43:55 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            199597
Providers:                AS: 174
                          AS: 24961
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/10c56e-9549-43c1-a0b0-2ddf496d9162/1/0vq2SwFo4HK_qjskuXBA-_wbeqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/10c56e-9549-43c1-a0b0-2ddf496d9162/1/0vq2SwFo4HK_qjskuXBA-_wbeqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0vq2SwFo4HK_qjskuXBA-_wbeqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:b7:8f:15:47:74:fa:11:06:d2:30:32:08:35:ae:a2:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2fab64b0168e072bfaa3b24b97040fbfc1b7aaa
        Validity
            Not Before: Jul 31 09:43:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1b5397ec82e580a74a45a1100b7c8b01d87af209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:09:ed:8b:bd:31:a1:e9:4a:5a:5b:9f:ec:98:
                    d7:85:5d:fe:f7:85:bb:36:aa:e0:63:7b:94:c1:40:
                    e1:f8:7e:83:f3:3c:62:be:46:cc:11:12:ea:e1:88:
                    2b:0a:b9:e3:94:40:77:9d:fa:93:b8:aa:47:c6:8e:
                    25:1f:27:f2:e7:c0:d9:c4:cc:0a:cf:d4:e6:d8:88:
                    0f:10:cb:a1:b3:fc:28:27:81:81:62:50:9b:a3:4d:
                    80:a0:45:c1:0c:48:9e:3b:b1:b9:ac:81:e0:2b:68:
                    54:39:a2:e8:40:47:9c:4b:cd:ca:cc:ec:05:33:26:
                    61:52:69:8f:ca:b5:12:ac:c1:d5:da:34:0f:02:ae:
                    6e:66:89:20:19:9c:2e:1f:9e:b4:50:3d:9b:04:77:
                    3e:68:1c:90:35:74:38:9b:98:d9:39:97:36:33:78:
                    89:2f:d9:31:00:cb:40:f0:8e:a9:3a:4d:2c:ff:1a:
                    1a:0d:ef:ca:2d:af:93:23:36:c3:21:ef:23:05:b9:
                    4f:d2:87:bd:4c:65:c2:a7:47:48:52:49:98:19:3a:
                    a3:c9:d4:f0:ab:1b:fa:d9:3e:d3:1d:83:7c:23:89:
                    65:c9:e1:51:a4:1e:f6:8c:15:a6:4a:1f:92:de:60:
                    ac:e5:ab:58:63:2c:19:5b:7f:48:cb:61:c1:9b:b9:
                    3c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:53:97:EC:82:E5:80:A7:4A:45:A1:10:0B:7C:8B:01:D8:7A:F2:09
            X509v3 Authority Key Identifier:
                keyid:D2:FA:B6:4B:01:68:E0:72:BF:AA:3B:24:B9:70:40:FB:FC:1B:7A:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vq2SwFo4HK_qjskuXBA-_wbeqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/10c56e-9549-43c1-a0b0-2ddf496d9162/1/G1OX7ILlgKdKRaEQC3yLAdh68gk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/10c56e-9549-43c1-a0b0-2ddf496d9162/1/0vq2SwFo4HK_qjskuXBA-_wbeqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199597

    Signature Algorithm: sha256WithRSAEncryption
         7c:ad:a7:90:f9:6c:f7:a2:74:d9:c0:bb:07:7e:2d:70:f8:7f:
         e8:6a:4f:18:df:1f:9d:f9:6a:83:6f:8f:8a:c9:c4:f6:a3:39:
         2e:5d:53:96:12:4e:4c:bb:1b:e9:f3:ef:22:f0:0b:27:24:2d:
         f0:72:51:f4:cb:a5:f8:ab:cb:09:1d:18:81:18:b5:eb:3c:03:
         3c:6c:91:d3:d9:3a:91:4d:02:3d:39:ef:0d:e8:28:be:18:e1:
         8c:09:a3:3d:c0:b5:1f:fd:74:5d:c0:47:00:30:af:23:6c:4d:
         c0:3e:b2:dc:ac:77:7b:d4:92:df:dd:de:6a:38:1a:7c:c6:0e:
         06:7f:27:de:c1:63:cb:f4:8c:ee:25:2c:92:f1:36:40:5f:dd:
         05:de:b3:4a:ca:0b:58:4a:ed:f8:17:95:8f:bc:4d:b3:b4:6b:
         71:33:cb:60:73:6b:64:54:43:83:2a:2a:4a:41:ad:38:24:2b:
         fa:e7:33:ef:bc:b6:56:3e:48:59:cf:d2:a2:bb:19:bd:9c:3f:
         01:41:1b:e2:25:0b:2c:ec:d5:7b:1b:e4:8a:a7:f4:75:4c:5d:
         a1:0b:bb:c9:e3:62:8a:2c:89:6b:e6:d0:fa:d9:7d:50:75:cc:
         47:bd:ed:e8:fc:f5:bf:c3:ce:bc:e4:72:83:5c:eb:25:99:66:
         36:74:0c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:50:20 2026 by rpki-client