Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/YuNY9pCJ37EFdyTyyQ6e2KA15E0.asa
File:                     YuNY9pCJ37EFdyTyyQ6e2KA15E0.asa (raw, json)
Hash identifier:          srGpwdvJeLpVUuR/dZ5IRJXeVqATKKEFySC416oLi7M=
Subject key identifier:   62:E3:58:F6:90:89:DF:B1:05:77:24:F2:C9:0E:9E:D8:A0:35:E4:4D
Certificate issuer:       /CN=31e9db422b637332528ae628d9da50e40397fb64
Certificate serial:       01A0400C8AE9EE49CB98BC35E6609F374BD9
Authority key identifier: 31:E9:DB:42:2B:63:73:32:52:8A:E6:28:D9:DA:50:E4:03:97:FB:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/YuNY9pCJ37EFdyTyyQ6e2KA15E0.asa
Signing time:             Wed 26 Aug 2026 21:49:18 +0000
ASPA not before:          Wed 26 Aug 2026 21:49:18 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            199183
Providers:                AS: 41051
                          AS: 201398
                          AS: 208753
                          AS: 209533
                          AS: 211509
                          AS: 212895
                          AS: 214757
                          AS: 214809
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 30 Aug 2026 09:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:0c:8a:e9:ee:49:cb:98:bc:35:e6:60:9f:37:4b:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31e9db422b637332528ae628d9da50e40397fb64
        Validity
            Not Before: Aug 26 21:49:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=62e358f69089dfb1057724f2c90e9ed8a035e44d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:92:44:d1:35:5d:6b:e9:2c:1a:d8:de:83:da:
                    4c:2b:d9:fc:82:20:bc:82:dd:54:bc:a3:18:80:21:
                    6a:9a:db:dd:6f:7f:08:23:c0:e8:90:f6:1f:8a:e8:
                    c3:a1:47:93:e2:d6:eb:c1:20:08:ed:a8:66:06:02:
                    25:b9:2b:99:ab:5a:34:13:4e:1c:9c:1b:16:88:8f:
                    cc:0f:97:bd:c1:e4:70:da:3e:2b:18:3f:db:8b:c9:
                    d2:ed:c5:9a:f7:62:35:4d:c8:ec:51:73:43:4e:21:
                    63:d9:a4:b3:57:a8:98:53:a3:e0:fe:97:d7:e1:23:
                    b6:ea:5a:d6:5e:b2:72:4e:f4:37:5a:a8:0f:66:59:
                    66:c4:bd:2e:7c:7e:af:36:4a:b9:5b:7a:ca:16:32:
                    bf:a1:73:ef:9a:38:e2:19:24:86:1c:02:7a:58:e4:
                    29:73:43:54:28:8c:1f:49:23:51:9b:c3:62:37:b0:
                    dd:2b:6f:60:a6:a9:96:f3:68:83:d1:d4:f1:3b:3d:
                    97:54:e3:e1:87:a6:9d:f5:89:c9:2e:f3:d3:ed:45:
                    60:d8:1d:c9:b3:1e:9c:fe:f8:e4:3c:88:66:db:50:
                    57:5b:b6:2a:56:e9:10:b9:7c:43:e9:26:ad:1c:81:
                    b3:a3:7d:b0:08:af:ea:cd:fe:c0:21:87:49:ef:f3:
                    6c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E3:58:F6:90:89:DF:B1:05:77:24:F2:C9:0E:9E:D8:A0:35:E4:4D
            X509v3 Authority Key Identifier:
                keyid:31:E9:DB:42:2B:63:73:32:52:8A:E6:28:D9:DA:50:E4:03:97:FB:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/YuNY9pCJ37EFdyTyyQ6e2KA15E0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199183

    Signature Algorithm: sha256WithRSAEncryption
         66:91:76:a1:70:da:5a:c5:9b:4c:eb:26:a3:5a:f5:2d:95:35:
         ce:03:20:bf:0e:de:09:79:30:ea:a5:4a:22:c6:d0:8a:3d:73:
         70:e9:c9:c7:85:88:ac:1f:fa:b6:15:c0:07:ab:0b:74:84:ec:
         a8:ed:a7:75:bc:72:28:34:16:e5:67:ca:d7:ea:e0:43:9d:b6:
         f4:98:bb:24:b3:3f:2f:d6:1f:d6:8d:5d:16:c6:da:a3:08:7e:
         5a:4a:4a:51:87:47:41:5d:42:19:5c:ed:e4:b4:0c:e4:d3:ff:
         02:94:45:9a:c0:25:bd:50:19:21:5d:29:7d:15:e7:1f:e6:1e:
         0e:b2:89:05:8f:d3:8b:65:83:81:bb:d5:29:b7:31:50:eb:07:
         64:91:be:4c:39:e4:a3:bf:5e:91:7f:d5:f2:da:9d:4a:7e:6f:
         dc:90:94:7e:5a:b0:08:05:1b:d7:55:83:13:28:34:cf:ad:fd:
         a0:71:57:a7:f3:db:7e:ea:a3:8a:54:6a:50:48:6e:36:2a:72:
         11:ce:66:c3:4a:38:02:6d:ae:de:41:6b:7b:fb:39:88:6d:f2:
         b2:5b:5c:68:9f:76:70:b7:22:43:a2:c2:2b:a1:b1:c7:1e:53:
         69:6b:9e:0e:71:44:e0:25:dc:e9:3a:5f:d5:63:e7:94:6b:7b:
         57:66:5c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 13:43:00 2026 by rpki-client