Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/wq3li6w9NTH9jEPkIkLQApS-GU8.asa
File:                     wq3li6w9NTH9jEPkIkLQApS-GU8.asa (raw, json)
Hash identifier:          eMway3dXNh4e7klu5wIDVFWQwP1S/HfrYkiqlIkRWwY=
Subject key identifier:   C2:AD:E5:8B:AC:3D:35:31:FD:8C:43:E4:22:42:D0:02:94:BE:19:4F
Certificate issuer:       /CN=507c770bb6b08dcb4d6ea9b0c96272af3a6f9c71
Certificate serial:       019F19013B30649605F464BC08C91B800F0D
Authority key identifier: 50:7C:77:0B:B6:B0:8D:CB:4D:6E:A9:B0:C9:62:72:AF:3A:6F:9C:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UHx3C7awjctNbqmwyWJyrzpvnHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/wq3li6w9NTH9jEPkIkLQApS-GU8.asa
Signing time:             Tue 30 Jun 2026 14:48:58 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:58 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            215957
Providers:                AS: 13287
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UHx3C7awjctNbqmwyWJyrzpvnHE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:3b:30:64:96:05:f4:64:bc:08:c9:1b:80:0f:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=507c770bb6b08dcb4d6ea9b0c96272af3a6f9c71
        Validity
            Not Before: Jun 30 14:48:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c2ade58bac3d3531fd8c43e42242d00294be194f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:93:a1:53:b0:de:00:25:e2:6d:5f:38:94:dc:
                    d2:61:58:31:ff:6a:67:08:b9:eb:ee:9a:ac:28:54:
                    99:cd:a8:c0:44:0e:4f:ba:e4:9f:ad:d3:c8:40:5c:
                    b2:f6:5e:6d:12:23:95:b6:07:f3:76:7a:6e:1e:52:
                    46:38:e8:d4:09:7d:fe:28:63:83:c2:c5:42:7e:80:
                    e4:b7:8e:ee:dc:7b:e9:60:b3:9d:51:52:55:8f:e9:
                    75:41:40:23:f3:f4:80:2d:ea:7c:03:a6:0d:56:59:
                    ae:cb:32:e1:72:5a:43:f7:28:a3:3e:f6:33:87:ec:
                    b1:44:19:e0:ee:cf:95:b0:35:e6:19:76:05:45:ba:
                    ca:f5:7f:1d:0c:df:ff:dc:8c:56:75:9a:e0:bd:24:
                    c0:e0:61:82:8a:b4:34:0d:3d:cd:33:8e:e8:ae:3e:
                    d1:a7:23:68:49:62:9c:fd:fb:93:76:eb:fd:27:c7:
                    dd:7d:d8:1c:ac:68:29:c7:a4:32:a1:23:71:8d:ab:
                    94:2c:32:e4:58:a1:f1:7c:98:6a:93:b1:15:1c:ed:
                    ed:eb:6f:5d:45:03:fd:9c:20:44:73:02:60:37:e2:
                    82:9d:3c:5e:aa:56:c0:91:ca:af:99:09:a5:99:8e:
                    86:65:41:cb:1f:28:6e:c7:c1:87:97:c1:16:6b:c2:
                    f7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:AD:E5:8B:AC:3D:35:31:FD:8C:43:E4:22:42:D0:02:94:BE:19:4F
            X509v3 Authority Key Identifier:
                keyid:50:7C:77:0B:B6:B0:8D:CB:4D:6E:A9:B0:C9:62:72:AF:3A:6F:9C:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHx3C7awjctNbqmwyWJyrzpvnHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/wq3li6w9NTH9jEPkIkLQApS-GU8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215957

    Signature Algorithm: sha256WithRSAEncryption
         48:f5:70:2f:b6:00:1f:25:f3:05:41:14:1c:50:98:e0:c7:5a:
         5c:5c:c6:81:df:75:fa:22:3c:7a:73:13:81:69:19:92:95:b6:
         08:86:40:59:c0:8c:73:67:bd:2c:9f:83:bc:bc:bb:9a:6d:95:
         99:1e:94:84:04:69:90:b4:7d:89:de:6c:99:a8:d6:2b:ac:ce:
         a8:fd:aa:76:07:22:5f:12:9a:e4:a9:49:73:a8:cf:34:8c:5e:
         0b:7f:a7:be:8e:fd:16:0c:5f:35:3c:9b:fa:45:1f:98:8d:23:
         ff:7e:b4:40:bf:79:1d:70:fb:89:8c:b3:69:f7:f9:dd:27:5d:
         fb:83:b2:80:da:5c:be:3c:b8:20:22:13:0c:72:ab:5c:58:45:
         0c:2d:aa:96:06:23:cf:79:01:85:88:ce:7e:5e:0f:9a:04:86:
         fb:88:9a:9d:27:96:49:9a:e5:7b:7e:04:39:9a:3c:2e:39:cd:
         36:f4:b8:a9:48:dc:8b:b0:47:a1:4d:50:30:0a:4b:d9:89:61:
         50:23:1d:40:37:c2:d1:bd:d8:9f:34:d2:f6:c2:8b:33:0b:fa:
         15:f2:76:07:bf:c0:bc:2f:ef:fa:80:a6:81:eb:d4:81:4f:3f:
         39:92:e9:54:b8:e1:84:68:7b:9d:eb:af:50:e3:f7:ef:17:d4:
         85:ad:55:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:16 2026 by rpki-client