Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/Q7LE3zRyj2PiXfX4DjGUSLJfRWA.asa
File:                     Q7LE3zRyj2PiXfX4DjGUSLJfRWA.asa (raw, json)
Hash identifier:          priQBgblZwQ15I4e2C8JGKkq1VUH3STULgQlzCRtt8A=
Subject key identifier:   43:B2:C4:DF:34:72:8F:63:E2:5D:F5:F8:0E:31:94:48:B2:5F:45:60
Certificate issuer:       /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial:       019F89AA6AD487D1EE3F1C93D3D9A67D9F0D
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/Q7LE3zRyj2PiXfX4DjGUSLJfRWA.asa
Signing time:             Wed 22 Jul 2026 11:51:14 +0000
ASPA not before:          Wed 22 Jul 2026 11:51:14 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            208258
Providers:                AS: 50917
                          AS: 55285
                          AS: 205406
                          AS: 398465
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:89:aa:6a:d4:87:d1:ee:3f:1c:93:d3:d9:a6:7d:9f:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
        Validity
            Not Before: Jul 22 11:51:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=43b2c4df34728f63e25df5f80e319448b25f4560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1b:83:21:83:c8:97:c4:ed:85:1c:11:1a:fe:
                    af:e4:76:8a:63:1c:ad:6b:4a:8d:70:07:95:b2:71:
                    2c:27:f3:74:cc:2d:42:d4:b3:91:b7:c9:36:5a:ae:
                    27:11:df:e9:65:01:8d:22:ac:93:e8:e4:04:88:82:
                    1a:bb:a9:90:14:ee:f1:9c:68:c9:ba:c1:0c:88:f6:
                    06:e3:4f:72:1c:25:ce:73:71:3f:ea:bd:be:8c:65:
                    f1:2f:78:85:59:6e:94:4d:de:c7:d6:84:63:d4:e2:
                    be:54:60:12:a7:31:fe:12:4c:fa:be:ce:9d:5b:f5:
                    f9:7f:10:84:8d:98:9e:40:b6:4e:c3:c5:02:93:18:
                    23:a4:c9:6f:08:2a:4d:23:6f:83:62:b8:f6:69:46:
                    5f:a4:f4:4a:b8:a0:d0:91:95:a0:32:7b:9b:cd:46:
                    31:00:f5:fb:0b:e6:9c:5f:13:72:7e:59:23:91:34:
                    25:a6:a9:4c:0b:cf:6c:24:31:21:20:fb:40:e7:d7:
                    af:41:18:50:93:5d:06:e8:72:d5:c9:40:26:c5:06:
                    13:38:e5:47:8a:ca:7d:34:3a:1c:a7:9c:c8:be:f5:
                    96:33:c3:7e:85:d8:00:7a:99:5a:23:17:90:b3:4a:
                    7e:d0:08:a6:54:58:d0:ee:25:ba:9c:18:6a:56:a4:
                    78:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B2:C4:DF:34:72:8F:63:E2:5D:F5:F8:0E:31:94:48:B2:5F:45:60
            X509v3 Authority Key Identifier:
                keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/Q7LE3zRyj2PiXfX4DjGUSLJfRWA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208258

    Signature Algorithm: sha256WithRSAEncryption
         65:a6:59:29:6a:29:33:21:3a:66:03:e8:88:19:93:fb:7f:d5:
         e5:81:d9:c0:55:3a:a5:ac:28:40:54:2d:0c:b4:8b:52:db:30:
         ae:e4:50:2d:35:f3:82:a1:33:65:e7:d1:f2:82:fb:d1:83:93:
         dc:99:63:7f:1a:0b:34:d6:9f:6f:b1:a4:3a:e9:cc:fd:e0:d6:
         22:6a:c4:24:28:de:4a:0b:29:8b:06:e3:96:56:4f:86:c7:c3:
         d0:96:89:9c:5b:1a:eb:a1:80:a9:d0:e2:35:6e:18:a2:be:11:
         e5:d5:18:3a:4e:0e:49:55:b0:db:ac:20:a7:e8:f3:44:03:fe:
         f2:1a:d8:d8:fa:73:6c:78:1e:09:a6:da:31:72:2e:5f:3f:0a:
         fa:28:03:b1:fe:23:19:ea:d6:68:56:59:e7:c6:c2:70:cd:ac:
         b7:99:c6:5f:49:06:d2:29:a3:f6:fc:04:44:3c:a9:61:d9:ba:
         3a:9e:50:ce:f0:ec:49:53:df:ad:14:3a:d1:ac:11:16:c1:c8:
         20:81:87:23:83:03:63:52:c2:19:48:35:9e:72:78:d4:ff:5a:
         2c:e5:34:d8:c8:e6:c7:7a:76:08:ba:dc:44:c0:ed:35:17:2e:
         3b:c8:cd:59:6f:72:d7:1b:6e:19:4e:58:f8:c1:33:5a:4f:cb:
         cc:ad:bf:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:49:59 2026 by rpki-client