Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/9156c5-db10-4ff7-864f-2c08dbd891a9/1/d-7Ne4WZes1wekph0cprs11cW_0.asa
File:                     d-7Ne4WZes1wekph0cprs11cW_0.asa (raw, json)
Hash identifier:          cBpioPZmstqTqXBIyQHOqca+O/OfR+4YIKoBZItPJDU=
Subject key identifier:   77:EE:CD:7B:85:99:7A:CD:70:7A:4A:61:D1:CA:6B:B3:5D:5C:5B:FD
Certificate issuer:       /CN=31c751afcb9e1c966acf76260c903a2bb1af602e
Certificate serial:       019E610018E8A5C4BC0C80C877C6A92D3143
Authority key identifier: 31:C7:51:AF:CB:9E:1C:96:6A:CF:76:26:0C:90:3A:2B:B1:AF:60:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/McdRr8ueHJZqz3YmDJA6K7GvYC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/9156c5-db10-4ff7-864f-2c08dbd891a9/1/d-7Ne4WZes1wekph0cprs11cW_0.asa
Signing time:             Mon 25 May 2026 21:17:36 +0000
ASPA not before:          Mon 25 May 2026 21:17:36 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            201132
Providers:                AS: 212895
                          AS: 214762
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/9156c5-db10-4ff7-864f-2c08dbd891a9/1/McdRr8ueHJZqz3YmDJA6K7GvYC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/9156c5-db10-4ff7-864f-2c08dbd891a9/1/McdRr8ueHJZqz3YmDJA6K7GvYC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/McdRr8ueHJZqz3YmDJA6K7GvYC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:61:00:18:e8:a5:c4:bc:0c:80:c8:77:c6:a9:2d:31:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31c751afcb9e1c966acf76260c903a2bb1af602e
        Validity
            Not Before: May 25 21:17:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=77eecd7b85997acd707a4a61d1ca6bb35d5c5bfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:20:66:b3:f8:b3:4d:e6:0c:da:79:87:b1:55:
                    09:69:83:48:e9:06:5f:91:07:7b:2e:b7:b3:88:8a:
                    69:ee:3d:fd:81:9b:c9:7c:fe:52:08:db:c8:dc:b9:
                    e7:a5:0c:72:ab:27:4f:25:ea:77:2e:32:c3:47:58:
                    72:df:7b:04:fe:2d:04:1c:3a:2b:96:45:f9:c5:44:
                    f0:f6:41:c6:f9:a4:e6:d9:0a:73:54:7d:f5:0c:6e:
                    f8:c6:6f:55:61:ba:46:48:13:95:ad:66:8e:12:3a:
                    a7:d0:04:f8:da:e5:5c:9a:e2:bc:2f:15:9d:c7:a8:
                    98:0c:52:07:4e:d4:41:c7:ab:cd:2c:6a:8a:50:0f:
                    94:b9:41:87:2f:58:1d:f0:35:64:eb:39:86:d5:6e:
                    aa:6d:ff:17:ee:10:fb:d2:86:18:ba:be:b0:46:74:
                    77:ea:07:03:4c:f2:7f:ca:e5:01:32:c4:b3:be:08:
                    9a:c7:f8:d6:7c:80:40:94:8b:49:7b:bd:f5:aa:fd:
                    4c:d1:c8:62:60:ec:bd:09:ed:2c:1f:1c:3f:55:78:
                    a5:2e:18:ab:98:a9:fb:8d:97:1b:4f:a9:75:15:b4:
                    cb:aa:3c:73:9a:25:4c:81:c0:4c:29:e6:7d:60:58:
                    ae:86:66:06:da:1d:b5:52:b1:a3:8d:9b:a8:85:10:
                    c2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:EE:CD:7B:85:99:7A:CD:70:7A:4A:61:D1:CA:6B:B3:5D:5C:5B:FD
            X509v3 Authority Key Identifier:
                keyid:31:C7:51:AF:CB:9E:1C:96:6A:CF:76:26:0C:90:3A:2B:B1:AF:60:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/McdRr8ueHJZqz3YmDJA6K7GvYC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/9156c5-db10-4ff7-864f-2c08dbd891a9/1/d-7Ne4WZes1wekph0cprs11cW_0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/9156c5-db10-4ff7-864f-2c08dbd891a9/1/McdRr8ueHJZqz3YmDJA6K7GvYC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201132

    Signature Algorithm: sha256WithRSAEncryption
         56:73:09:83:e0:4e:68:e8:fe:40:84:f4:38:5b:1b:08:5d:28:
         c9:b3:59:ed:3c:5c:cc:43:99:b3:f2:49:16:b9:43:82:bb:15:
         d2:61:98:d3:70:4e:80:cf:0e:95:a3:2b:39:a9:dc:c8:e4:db:
         e8:dc:f8:fb:8f:81:e1:d3:a7:52:31:dc:24:55:1b:b4:e0:34:
         b1:8f:57:86:f1:b1:d7:de:15:56:d1:f0:62:2d:2b:d1:fe:9a:
         51:c4:01:73:38:c5:7f:08:c4:f3:8c:1a:c8:35:61:55:71:f0:
         0b:38:16:da:8f:dc:a6:29:3d:46:ce:09:e6:f0:f4:be:14:87:
         4e:36:d8:e3:3e:bf:53:30:04:e9:1a:ec:97:a5:7c:8d:a8:a8:
         81:72:df:b4:af:a1:49:58:c5:bb:a1:9f:e1:1b:58:e7:6a:ff:
         a1:f8:6e:a3:44:fa:55:f5:0c:50:5c:eb:64:fc:67:19:0b:e0:
         42:3d:94:c6:2a:be:ed:66:d0:3d:70:fc:f1:05:fa:94:58:8a:
         a4:20:6d:c0:7a:e1:59:5a:24:6e:e9:2d:e7:b3:fc:02:44:e6:
         dc:c1:36:ce:31:15:2f:3c:48:fb:69:61:8e:e5:d1:99:4d:6d:
         4c:a3:f2:9b:91:f9:49:20:0b:c8:fa:ee:36:d6:15:f2:29:41:
         c4:f5:d6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:37:32 2026 by rpki-client