Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/vtPJravREHtAL-HW1RrMZydMrsQ.asa
File:                     vtPJravREHtAL-HW1RrMZydMrsQ.asa (raw, json)
Hash identifier:          uZ2M5vn7HpuWNo5li1pRTLUsl+l+FJg9k+zRcTqXoJM=
Subject key identifier:   BE:D3:C9:AD:AB:D1:10:7B:40:2F:E1:D6:D5:1A:CC:67:27:4C:AE:C4
Certificate issuer:       /CN=57e72ce7f8c494235a084823965b904704bc8240
Certificate serial:       019E1B8C8DAD9545DAC99AE93A4BA778726A
Authority key identifier: 57:E7:2C:E7:F8:C4:94:23:5A:08:48:23:96:5B:90:47:04:BC:82:40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-cs5_jElCNaCEgjlluQRwS8gkA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/vtPJravREHtAL-HW1RrMZydMrsQ.asa
Signing time:             Tue 12 May 2026 09:37:36 +0000
ASPA not before:          Tue 12 May 2026 09:37:36 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214248
Providers:                AS: 3352
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/V-cs5_jElCNaCEgjlluQRwS8gkA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/V-cs5_jElCNaCEgjlluQRwS8gkA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V-cs5_jElCNaCEgjlluQRwS8gkA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1b:8c:8d:ad:95:45:da:c9:9a:e9:3a:4b:a7:78:72:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57e72ce7f8c494235a084823965b904704bc8240
        Validity
            Not Before: May 12 09:37:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bed3c9adabd1107b402fe1d6d51acc67274caec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:05:96:02:6d:a9:ab:e0:89:2b:25:72:cd:2b:
                    3a:dc:d0:c0:64:82:09:89:bf:d3:d5:01:1d:91:09:
                    19:cf:f9:b3:77:29:ae:70:95:fe:92:6e:d0:56:74:
                    fc:0c:ca:3c:4f:d2:7f:d0:34:94:1a:3c:db:fe:b8:
                    90:91:22:40:e0:95:87:6f:36:da:e3:c3:e4:5a:90:
                    29:d7:95:85:4f:be:3e:58:a1:44:2c:04:b5:a7:88:
                    25:f3:2e:49:fb:7f:4f:7d:fa:45:57:64:54:55:c7:
                    a8:3f:05:1a:d9:a5:a9:58:e8:55:3d:70:b9:74:5c:
                    c9:87:35:b3:64:91:db:67:41:f7:73:6d:3e:31:c7:
                    4c:14:50:2b:1b:4e:c1:2e:a8:d3:5d:25:98:25:8b:
                    d7:9c:35:2b:8b:81:fc:5a:97:70:55:99:15:ff:b3:
                    2a:54:f9:64:a4:c7:65:ae:12:91:4d:10:b8:68:f7:
                    74:1a:a5:45:66:ef:2d:f8:6d:ef:5f:86:5a:4e:39:
                    bc:51:af:87:5f:e2:4b:d8:77:ec:48:b5:30:52:bc:
                    05:0a:63:46:3a:f4:d3:88:81:3d:bf:84:ca:9e:bf:
                    42:33:09:bb:35:2a:46:ec:b7:53:fc:f9:1d:f5:27:
                    b6:c3:6e:4f:a4:82:a1:e0:26:28:3d:12:52:ec:a7:
                    0f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D3:C9:AD:AB:D1:10:7B:40:2F:E1:D6:D5:1A:CC:67:27:4C:AE:C4
            X509v3 Authority Key Identifier:
                keyid:57:E7:2C:E7:F8:C4:94:23:5A:08:48:23:96:5B:90:47:04:BC:82:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-cs5_jElCNaCEgjlluQRwS8gkA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/vtPJravREHtAL-HW1RrMZydMrsQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/V-cs5_jElCNaCEgjlluQRwS8gkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214248

    Signature Algorithm: sha256WithRSAEncryption
         89:1c:7e:b9:be:33:62:ed:c5:69:62:29:fa:66:30:88:38:29:
         47:20:e6:f1:97:0a:da:cc:7b:60:66:8e:9f:98:70:67:1e:5d:
         9f:2e:b6:d7:72:59:f7:2c:c6:2b:0b:18:92:6d:ee:a4:97:9a:
         44:0c:9d:b8:9c:c7:21:dd:07:61:75:53:79:6d:4d:8b:88:47:
         cc:c4:7e:5a:96:21:1d:ea:33:c9:81:74:7e:d4:09:c1:d4:80:
         b7:4b:c1:41:0a:35:be:21:ce:39:28:a0:40:b8:95:ac:37:14:
         94:5b:61:bc:a9:17:d1:ba:b4:5b:21:1d:d9:c5:03:0f:88:67:
         2c:70:be:e1:ff:78:ad:cf:1d:56:77:0c:1e:ef:68:fa:08:ed:
         93:d3:23:38:15:65:d0:34:96:10:01:58:07:18:a0:d3:f7:f0:
         6d:47:68:90:2c:76:82:53:1e:cd:6c:97:b0:4f:d3:8f:f9:9a:
         73:3d:03:4b:60:93:41:4f:10:39:fe:30:bf:d0:fa:f1:72:31:
         54:a0:1f:9d:f7:11:f2:88:79:f7:65:60:ca:e6:53:53:73:e2:
         2e:07:27:b9:46:74:21:44:a8:2a:a3:8c:61:24:5e:59:7f:58:
         fd:18:5c:35:34:0a:eb:f2:d1:9e:64:48:f4:33:86:ba:8f:83:
         9b:d0:5e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:24:32 2026 by rpki-client