Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/4d7f6e-c6df-41d7-8ffd-5089b602bfc2/1/5nMoTtXtLgnFlucAXgivnNRIQFA.asa
File:                     5nMoTtXtLgnFlucAXgivnNRIQFA.asa (raw, json)
Hash identifier:          3BMjrBI1wsKqx8J3mxZlSg5C1hn0bo6ipDAcD0rXrVo=
Subject key identifier:   E6:73:28:4E:D5:ED:2E:09:C5:96:E7:00:5E:08:AF:9C:D4:48:40:50
Certificate issuer:       /CN=e98dc5e78258e426739bd88c2d4c200aadf3bf13
Certificate serial:       019F19014E917CC2253B6A3EE3CD3E9E0E93
Authority key identifier: E9:8D:C5:E7:82:58:E4:26:73:9B:D8:8C:2D:4C:20:0A:AD:F3:BF:13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Y3F54JY5CZzm9iMLUwgCq3zvxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/4d7f6e-c6df-41d7-8ffd-5089b602bfc2/1/5nMoTtXtLgnFlucAXgivnNRIQFA.asa
Signing time:             Tue 30 Jun 2026 14:49:03 +0000
ASPA not before:          Tue 30 Jun 2026 14:49:03 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            201376
Providers:                AS: 0
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/4d7f6e-c6df-41d7-8ffd-5089b602bfc2/1/6Y3F54JY5CZzm9iMLUwgCq3zvxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/4d7f6e-c6df-41d7-8ffd-5089b602bfc2/1/6Y3F54JY5CZzm9iMLUwgCq3zvxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Y3F54JY5CZzm9iMLUwgCq3zvxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:4e:91:7c:c2:25:3b:6a:3e:e3:cd:3e:9e:0e:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98dc5e78258e426739bd88c2d4c200aadf3bf13
        Validity
            Not Before: Jun 30 14:49:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e673284ed5ed2e09c596e7005e08af9cd4484050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2e:aa:5c:d3:75:36:0d:63:d5:8e:2c:e3:1c:
                    da:67:14:6f:62:3e:94:75:7c:ab:17:87:59:fb:7a:
                    72:bd:29:27:d7:2b:b8:90:25:3a:f1:e7:cf:6d:bd:
                    bd:81:17:ab:83:1f:c7:ce:f5:d2:a8:da:f1:f4:79:
                    a6:31:b1:22:d0:da:8b:50:98:ef:25:a7:84:51:d1:
                    2f:ff:d7:d2:c5:f3:8e:2e:91:88:3d:87:3a:0a:32:
                    2b:12:51:e2:6b:31:25:c4:5c:3f:90:17:8d:ed:95:
                    1e:6f:ec:b5:31:c6:c2:b5:a6:e2:a7:4a:20:05:79:
                    ec:59:9f:56:ba:2b:0a:47:5c:ce:d0:61:05:bc:9e:
                    ed:39:8b:a3:79:ec:ae:0f:3f:23:4e:1a:48:65:bf:
                    e4:01:15:81:74:a6:4d:38:55:b5:35:7e:47:a7:93:
                    12:a6:44:76:47:8f:f3:7d:af:ff:25:42:64:69:48:
                    38:11:7f:fa:ab:9e:15:ef:bc:00:08:b8:a1:03:56:
                    8d:03:2f:bb:33:0d:76:ba:1b:ab:58:e2:11:e6:b9:
                    08:9f:39:b6:d7:32:0e:76:aa:05:b0:c2:a4:53:a4:
                    59:da:b9:77:30:17:0e:ac:34:36:14:7a:69:30:b3:
                    72:7c:4c:77:f2:ec:f8:6d:39:22:4b:16:f7:7a:93:
                    e5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:73:28:4E:D5:ED:2E:09:C5:96:E7:00:5E:08:AF:9C:D4:48:40:50
            X509v3 Authority Key Identifier:
                keyid:E9:8D:C5:E7:82:58:E4:26:73:9B:D8:8C:2D:4C:20:0A:AD:F3:BF:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Y3F54JY5CZzm9iMLUwgCq3zvxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4d7f6e-c6df-41d7-8ffd-5089b602bfc2/1/5nMoTtXtLgnFlucAXgivnNRIQFA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4d7f6e-c6df-41d7-8ffd-5089b602bfc2/1/6Y3F54JY5CZzm9iMLUwgCq3zvxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201376

    Signature Algorithm: sha256WithRSAEncryption
         3a:04:b6:98:79:e9:83:f6:7c:3c:e3:ab:8e:ab:98:77:08:22:
         2e:46:ac:9d:ae:40:93:85:e2:52:62:41:80:51:eb:ce:51:6c:
         c8:b9:32:8b:9a:20:79:40:83:9a:92:bb:30:d3:91:31:30:52:
         4e:ed:80:ac:13:38:77:05:10:9b:32:e0:c7:07:86:16:05:33:
         fd:cd:9e:1d:03:c5:d1:df:1c:42:6e:f9:3b:74:66:67:45:2c:
         1c:1f:1b:29:f5:fc:5f:45:08:27:1e:bf:52:1f:fe:af:10:90:
         61:b3:21:73:1c:31:98:18:8b:bb:f6:d1:fc:92:2d:64:ec:f0:
         a5:94:9b:1d:1e:ca:1b:f9:5c:29:64:16:65:08:53:ec:26:55:
         1f:ed:bd:b2:53:54:ba:3e:94:e7:26:3e:bc:4a:0d:1b:b9:a4:
         44:de:6e:aa:33:86:41:ae:fc:73:60:03:13:aa:20:22:88:99:
         ef:44:f1:6d:b3:41:1b:e8:6b:21:f3:d6:75:bb:72:ec:0c:6d:
         7b:d4:b0:34:42:4b:d2:dc:54:24:d6:4c:16:ba:c4:94:6d:07:
         ea:83:43:ae:b4:fa:d8:c5:92:06:e9:eb:6d:d2:55:7b:e7:37:
         51:4b:55:02:5e:b5:21:40:c0:32:d3:a3:67:6d:df:d4:bd:3c:
         44:a0:e4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:26:53 2026 by rpki-client