Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/4p-Cm-GajEDg95U2oK6uzfsp0JU.asa
File:                     4p-Cm-GajEDg95U2oK6uzfsp0JU.asa (raw, json)
Hash identifier:          5kxjukz9UrNDQRzs1WDtvD2HHIl/VN2fV1l1vptM11w=
Subject key identifier:   E2:9F:82:9B:E1:9A:8C:40:E0:F7:95:36:A0:AE:AE:CD:FB:29:D0:95
Certificate issuer:       /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Certificate serial:       019F1901492568F7EC56A16C54792ED06B30
Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/4p-Cm-GajEDg95U2oK6uzfsp0JU.asa
Signing time:             Tue 30 Jun 2026 14:49:02 +0000
ASPA not before:          Tue 30 Jun 2026 14:49:02 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            198309
Providers:                AS: 25400
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:49:25:68:f7:ec:56:a1:6c:54:79:2e:d0:6b:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
        Validity
            Not Before: Jun 30 14:49:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e29f829be19a8c40e0f79536a0aeaecdfb29d095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2e:d9:05:02:96:b2:33:f2:75:a6:53:fb:1f:
                    fc:69:de:e2:81:d5:12:09:e7:85:30:d8:22:05:94:
                    74:b9:9a:f6:49:1f:05:60:d6:3d:33:2a:27:e5:1c:
                    0a:82:5d:3a:9e:15:a5:00:f2:ef:d2:35:74:ba:d9:
                    cf:88:be:89:50:4b:f2:5a:6f:a6:ce:c8:c3:5d:86:
                    d4:0c:0f:26:2a:bd:28:15:ed:2c:f8:b2:db:c0:5f:
                    93:c0:86:24:3d:df:f2:10:1c:fe:e4:bd:70:3b:4c:
                    ba:61:22:17:d1:84:3a:5e:ea:81:4a:93:f7:3c:6a:
                    e1:6e:80:79:fe:94:26:4a:ce:1a:2c:fe:67:0f:d0:
                    8c:97:b2:cd:a8:bc:ef:86:66:a4:2b:a3:50:f8:17:
                    59:83:6c:2a:94:b8:1b:33:27:ce:33:34:a4:d7:14:
                    fc:bb:b4:56:f0:d1:16:56:6f:60:1b:ba:88:e2:cc:
                    04:8f:b1:9e:a7:40:db:f3:5b:56:6d:3b:73:23:0a:
                    15:8c:34:43:fb:70:a1:55:57:73:97:c7:5f:92:40:
                    33:02:db:e9:10:70:97:13:00:90:e6:82:1b:ac:2f:
                    59:a2:ad:f4:e0:7e:50:88:9d:79:e1:27:84:2f:73:
                    90:22:4f:ce:f3:a8:1e:07:a0:5c:58:d8:4d:d7:a5:
                    5c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:9F:82:9B:E1:9A:8C:40:E0:F7:95:36:A0:AE:AE:CD:FB:29:D0:95
            X509v3 Authority Key Identifier:
                keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/4p-Cm-GajEDg95U2oK6uzfsp0JU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198309

    Signature Algorithm: sha256WithRSAEncryption
         9f:f3:80:35:bd:c4:b3:06:e8:95:e7:eb:07:08:04:6c:e7:c2:
         2a:b1:39:3f:69:0e:11:67:cd:a3:a4:12:3b:bd:cb:58:a7:d4:
         8a:ba:b8:1e:e8:06:73:4e:04:94:05:14:30:dc:0b:42:b5:cc:
         6b:cf:be:17:8b:b4:b8:71:44:f7:34:3d:ad:76:81:45:3f:27:
         00:56:cc:dd:54:07:58:90:c0:61:5f:f0:4a:d5:b6:ba:24:1b:
         c3:c3:3c:5b:d0:13:e2:5c:a5:45:b4:03:22:78:78:40:1c:99:
         3d:28:09:dc:d9:8a:98:b1:d7:d9:3e:1a:c4:ed:a0:92:2d:bb:
         32:70:86:a5:55:e6:21:d0:e6:a0:5c:cc:7b:ad:d3:44:17:73:
         34:21:37:f7:7e:5d:33:d6:0f:17:5f:3d:f1:a7:d5:82:55:da:
         56:9a:80:dd:87:28:4f:58:25:1e:fa:95:4c:6b:6f:53:ab:21:
         ee:b3:b1:19:92:27:95:b7:d8:f8:23:fb:d2:e6:89:17:a2:ff:
         12:d1:c3:75:2c:a6:7c:ab:f4:bb:3d:e4:33:d8:f3:09:f3:5b:
         ce:ae:14:fd:04:6a:df:f2:a6:aa:51:1a:b1:c5:31:87:2e:9a:
         89:91:fa:9a:ff:c0:81:22:57:aa:9b:da:ef:3b:62:f4:d5:cc:
         3e:34:a1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:15:10 2026 by rpki-client