Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/h5sz6DNvl1FPVu4uSR_qucRROXo.asa
File:                     h5sz6DNvl1FPVu4uSR_qucRROXo.asa (raw, json)
Hash identifier:          yXcvcySMnwW1PUdZHYbEwSq9M77GxqnBa8KW7FdNi2c=
Subject key identifier:   87:9B:33:E8:33:6F:97:51:4F:56:EE:2E:49:1F:EA:B9:C4:51:39:7A
Certificate issuer:       /CN=7beef5e16c1467da7a02f19237653ae42b109652
Certificate serial:       019EF9F6FEE67C670AE5CCB2FD076FFA8973
Authority key identifier: 7B:EE:F5:E1:6C:14:67:DA:7A:02:F1:92:37:65:3A:E4:2B:10:96:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e-714WwUZ9p6AvGSN2U65CsQllI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/h5sz6DNvl1FPVu4uSR_qucRROXo.asa
Signing time:             Wed 24 Jun 2026 14:09:34 +0000
ASPA not before:          Wed 24 Jun 2026 14:09:34 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            205890
Providers:                AS: 1299
                          AS: 3209
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e-714WwUZ9p6AvGSN2U65CsQllI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:f9:f6:fe:e6:7c:67:0a:e5:cc:b2:fd:07:6f:fa:89:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7beef5e16c1467da7a02f19237653ae42b109652
        Validity
            Not Before: Jun 24 14:09:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=879b33e8336f97514f56ee2e491feab9c451397a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:08:38:51:ec:b9:e6:68:07:42:1b:92:de:fa:
                    93:a9:3e:06:d9:19:6a:0d:b7:c7:93:8d:3a:2f:dc:
                    5f:f5:75:19:5f:99:0a:19:cd:d5:12:34:4b:21:a8:
                    6f:de:8f:b0:66:5b:aa:7a:fb:9f:95:80:62:73:89:
                    fc:26:8f:5b:28:f4:6c:93:83:70:e8:8b:9d:de:7f:
                    34:53:74:24:99:87:ac:94:81:17:46:98:01:89:0c:
                    68:b3:22:ae:b2:78:98:7b:a9:19:83:73:d1:ac:10:
                    81:9f:0f:4d:67:a1:a0:7d:18:13:96:0a:28:a1:d9:
                    47:b7:49:4b:d5:16:33:6e:45:4a:13:2d:ca:85:ea:
                    04:15:89:91:ec:17:26:49:54:fd:4a:9a:79:fd:39:
                    db:ea:16:d2:be:ce:3e:07:15:8b:ab:5b:c6:58:5b:
                    b3:88:e1:14:1b:61:44:28:e3:68:b9:e8:4c:f5:2b:
                    ee:67:35:b9:d7:fa:40:c7:cf:4a:37:c9:32:db:87:
                    f3:f3:db:e1:f6:23:af:ba:13:cb:7d:4b:56:74:23:
                    ad:d3:e9:48:6b:ab:87:41:81:5b:7f:2a:fd:8d:23:
                    c6:a4:0c:40:36:2e:5d:95:a4:af:02:3a:ed:df:ec:
                    ab:00:51:68:3f:82:49:74:f2:3d:f3:da:44:5a:30:
                    be:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:9B:33:E8:33:6F:97:51:4F:56:EE:2E:49:1F:EA:B9:C4:51:39:7A
            X509v3 Authority Key Identifier:
                keyid:7B:EE:F5:E1:6C:14:67:DA:7A:02:F1:92:37:65:3A:E4:2B:10:96:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-714WwUZ9p6AvGSN2U65CsQllI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/h5sz6DNvl1FPVu4uSR_qucRROXo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205890

    Signature Algorithm: sha256WithRSAEncryption
         c4:f2:ae:24:93:59:dc:ae:5b:af:11:98:ac:3a:4f:c1:32:f5:
         a3:5a:60:05:a0:1e:c9:5b:dc:0a:c4:80:c8:c5:46:d9:29:ee:
         81:68:9f:2b:59:6e:04:bd:39:86:87:c4:40:07:e0:f2:da:ab:
         b8:48:db:4e:85:1f:dc:53:0f:20:d6:b4:08:41:8b:17:49:38:
         4a:e0:a5:a6:4a:87:b3:19:65:6f:da:29:09:9f:b1:80:c8:9f:
         06:65:ce:45:f8:34:a5:d0:50:c2:f5:87:bd:eb:c9:76:a0:39:
         cb:c5:b5:bc:e8:5c:18:87:ee:b5:bf:d2:dd:29:4b:4c:de:4c:
         2e:4c:40:c4:63:92:ab:d7:65:1f:33:8b:99:26:73:11:45:06:
         7e:3d:e3:79:6c:88:cd:5d:af:9b:c2:8c:cd:db:a8:a5:31:cd:
         9e:e2:29:20:75:4b:87:02:3a:2b:7f:b3:7c:d9:4f:59:48:99:
         eb:59:c3:9f:b2:8b:dd:43:08:9f:be:f8:ed:1c:7b:cf:e9:0d:
         95:92:86:1f:23:cd:b9:af:fc:51:32:7d:4d:86:8b:60:83:51:
         3f:af:6c:d6:3b:f6:99:c0:08:ed:05:bc:bd:c1:09:3d:3d:0c:
         62:93:94:3c:5a:5e:96:90:7d:d1:e8:0a:ee:b7:ea:5a:ff:ce:
         08:b3:6a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 09:33:31 2026 by rpki-client