Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/mctbCwQm4KKjmeToBymcjKVxZA4.asa
File:                     mctbCwQm4KKjmeToBymcjKVxZA4.asa (raw, json)
Hash identifier:          DrGRHy1qtMiaOeuOWdrwLS9l4ACbw4Gg+jvObrN5Pi8=
Subject key identifier:   99:CB:5B:0B:04:26:E0:A2:A3:99:E4:E8:07:29:9C:8C:A5:71:64:0E
Certificate issuer:       /CN=25a9ff1c6f6e2c850c2991179fe521bc11667703
Certificate serial:       019F236878094AECD023F86E51C50EA6AED7
Authority key identifier: 25:A9:FF:1C:6F:6E:2C:85:0C:29:91:17:9F:E5:21:BC:11:66:77:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jan_HG9uLIUMKZEXn-UhvBFmdwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/mctbCwQm4KKjmeToBymcjKVxZA4.asa
Signing time:             Thu 02 Jul 2026 15:17:56 +0000
ASPA not before:          Thu 02 Jul 2026 15:17:56 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214239
Providers:                AS: 196954
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jan_HG9uLIUMKZEXn-UhvBFmdwM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:68:78:09:4a:ec:d0:23:f8:6e:51:c5:0e:a6:ae:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25a9ff1c6f6e2c850c2991179fe521bc11667703
        Validity
            Not Before: Jul  2 15:17:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=99cb5b0b0426e0a2a399e4e807299c8ca571640e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:db:9c:89:11:c3:ca:07:79:52:9b:58:c2:d9:
                    74:f7:67:86:be:47:a7:c6:df:40:d0:c2:fe:77:fe:
                    8a:0d:f3:58:6a:d4:53:f5:3a:2c:09:05:15:9a:46:
                    32:e5:aa:df:d7:19:9f:98:62:d2:7b:38:f0:28:ac:
                    6e:49:19:b2:0a:74:74:65:7d:4e:b1:1d:1e:cd:1f:
                    c3:98:e3:af:f1:8e:6d:27:20:a4:5a:80:b5:f7:7e:
                    b1:0f:67:9b:0b:0f:da:c9:c3:8e:72:ef:24:79:3d:
                    57:0f:e9:78:1f:89:f7:3c:7e:fa:15:42:46:df:32:
                    0c:fa:f3:51:51:f2:9f:12:a1:eb:c0:49:cb:11:13:
                    57:dd:8a:43:59:dc:20:52:08:f1:57:81:44:a2:bf:
                    00:c7:0f:7c:be:63:c8:b8:6a:d6:7f:f1:e6:42:4a:
                    3f:5a:84:2a:14:47:0d:7a:83:83:1a:f8:65:37:f1:
                    b8:2e:3c:26:d0:94:ef:ae:f8:9f:1a:1d:92:03:ca:
                    a2:3a:d4:ba:1b:63:2a:3e:d2:bd:1c:c0:30:43:fb:
                    f9:5a:de:49:b2:66:0c:e8:54:6c:a1:36:2f:71:bb:
                    75:65:01:a5:a2:22:ec:67:2c:11:eb:cc:b2:69:00:
                    5c:20:bd:f4:fb:1a:f8:1d:17:2a:35:c1:77:22:6f:
                    31:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:CB:5B:0B:04:26:E0:A2:A3:99:E4:E8:07:29:9C:8C:A5:71:64:0E
            X509v3 Authority Key Identifier:
                keyid:25:A9:FF:1C:6F:6E:2C:85:0C:29:91:17:9F:E5:21:BC:11:66:77:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jan_HG9uLIUMKZEXn-UhvBFmdwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/mctbCwQm4KKjmeToBymcjKVxZA4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214239

    Signature Algorithm: sha256WithRSAEncryption
         08:5f:7f:6b:13:e6:8d:aa:b4:ac:a4:92:37:ca:7c:bd:c0:d7:
         7c:06:1e:8e:39:12:68:d5:65:7f:98:2a:ed:d9:b8:2b:a5:93:
         26:fc:6e:30:bf:5d:a6:e1:d7:2f:8e:0f:0d:f6:86:c4:01:1d:
         d5:f9:d2:48:68:a7:13:86:7c:02:cc:03:cc:ff:a8:8c:1d:82:
         82:7d:f5:43:92:1b:62:5e:80:f1:1b:cb:27:e9:91:61:af:f9:
         0a:a2:0e:b9:cf:a2:fb:42:9b:ad:87:63:85:a2:a7:d8:5a:c2:
         c7:ab:db:a5:93:09:ba:0f:48:fb:e9:42:bd:bd:67:61:ad:0d:
         39:a7:60:d4:ce:19:07:4f:b5:0a:bd:34:e1:33:0b:7f:99:c0:
         7b:37:fc:5a:56:82:97:ac:9d:e3:da:7c:32:e3:39:c1:3a:cb:
         c4:c1:19:94:e6:68:28:fc:ac:05:65:35:4a:88:55:c2:a6:99:
         d1:15:52:ad:a3:cf:17:59:d9:a5:e9:36:7c:28:d8:9e:49:7d:
         82:2c:09:17:9c:90:a9:40:5c:bf:ed:4b:52:50:30:21:80:57:
         ae:6d:83:0e:73:63:63:d9:be:e8:8d:77:1d:5c:ed:6a:89:dd:
         8c:39:16:71:f4:2c:57:42:ea:4e:24:1d:cd:6a:d7:6f:8d:4d:
         1a:28:bb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:39 2026 by rpki-client