Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/L2QCsrjPe2KM3zZLG_j-necXdRQ.asa
File:                     L2QCsrjPe2KM3zZLG_j-necXdRQ.asa (raw, json)
Hash identifier:          WdEBpYb6JsNA+UMdvTX09oNiIH0VyRdO15C/0tlTHTA=
Subject key identifier:   2F:64:02:B2:B8:CF:7B:62:8C:DF:36:4B:1B:F8:FE:9D:E7:17:75:14
Certificate issuer:       /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Certificate serial:       019F190144B012EC599C85FF8FF89AB35711
Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/L2QCsrjPe2KM3zZLG_j-necXdRQ.asa
Signing time:             Tue 30 Jun 2026 14:49:01 +0000
ASPA not before:          Tue 30 Jun 2026 14:49:01 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            12929
Providers:                AS: 25400
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:44:b0:12:ec:59:9c:85:ff:8f:f8:9a:b3:57:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
        Validity
            Not Before: Jun 30 14:49:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2f6402b2b8cf7b628cdf364b1bf8fe9de7177514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:83:97:5d:49:39:b4:b4:fd:6b:c6:c6:5d:ec:
                    a1:c8:22:a4:0d:ae:f3:f6:b6:87:f3:6f:31:68:23:
                    6f:d1:49:71:73:05:08:f7:5f:af:f3:f4:4e:11:1b:
                    77:26:d0:57:b0:20:dd:cd:c3:21:4e:fd:2e:f7:f9:
                    e0:62:46:25:27:75:40:10:f9:73:36:d0:93:51:83:
                    bb:49:e6:20:65:c1:77:91:ed:aa:d9:d5:2b:26:e9:
                    d3:de:3a:81:d5:99:04:3a:52:3d:a6:e5:bb:7f:97:
                    e2:97:5d:30:3c:f5:50:f6:a7:3e:92:76:ff:be:c8:
                    3c:be:a7:2e:b9:16:d9:6b:95:26:6a:08:84:79:80:
                    65:23:8b:87:85:d8:9c:44:bb:90:73:4e:1b:62:e1:
                    41:7a:b5:42:37:42:74:9d:9b:9c:48:7b:6e:c5:da:
                    9a:f1:53:b0:0b:34:09:1e:b6:8d:05:f2:df:9a:f6:
                    69:06:b0:16:e7:34:0a:95:53:bd:fc:b2:b4:1f:6f:
                    1e:c6:18:1b:14:16:3f:cb:09:e9:d7:19:b4:e0:f3:
                    ee:99:0f:e3:6f:f9:a5:1f:23:86:91:7a:c6:ac:85:
                    07:07:4b:a8:b6:05:e7:92:cf:0f:2f:d1:f0:68:56:
                    00:ed:35:22:1b:49:fe:77:2c:ef:a9:86:b8:3f:b0:
                    45:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:64:02:B2:B8:CF:7B:62:8C:DF:36:4B:1B:F8:FE:9D:E7:17:75:14
            X509v3 Authority Key Identifier:
                keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/L2QCsrjPe2KM3zZLG_j-necXdRQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  12929

    Signature Algorithm: sha256WithRSAEncryption
         1d:37:fe:d4:b6:41:28:36:62:c0:66:db:33:df:de:a1:ed:0a:
         1c:20:92:20:5b:cc:47:ff:05:7f:07:8a:2f:f1:6f:ed:74:dd:
         8d:9f:c5:84:cb:96:25:6b:92:22:5e:7c:dd:0d:c2:c1:1e:d2:
         10:f8:58:e0:ab:5e:31:b9:43:a7:85:b7:24:ab:5d:06:49:e9:
         1d:01:36:e4:46:8d:e5:de:c2:55:03:ac:f0:0a:8c:4d:e8:22:
         de:5c:58:8d:0d:c7:a9:dd:ce:ba:09:46:cf:f1:45:30:e4:a8:
         0e:fc:95:24:88:1b:97:3a:66:a3:d2:40:1a:c3:df:30:24:fc:
         67:ce:40:53:81:ab:6f:66:e7:23:a1:1c:dc:86:1b:cf:ed:20:
         66:eb:4b:0b:f9:eb:39:43:f7:a1:1d:cb:95:05:4f:4a:6f:80:
         bd:f0:3b:21:30:9d:de:34:bd:d3:ed:d8:70:04:ae:6e:2e:67:
         ce:0e:2a:1e:f9:7d:91:2c:7c:ce:b2:9a:bc:2a:30:29:7e:70:
         d3:84:8d:98:e5:60:49:d5:0e:48:7f:10:1e:54:d1:95:98:ab:
         69:f6:e9:d8:bd:59:ee:86:f0:21:d6:ec:d7:51:23:5f:1a:44:
         8f:17:96:da:8b:44:89:59:23:7b:b8:a2:e3:13:c4:82:30:f5:
         04:2b:52:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:31 2026 by rpki-client