Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ad46a5-f900-4ad1-b229-e18435e432dc/1/rOuGO_1gCYprPD-h4R9GJkpO-pk.asa
File:                     rOuGO_1gCYprPD-h4R9GJkpO-pk.asa (raw, json)
Hash identifier:          ADWTOgtzM/RQEPFl2ei6Z0iZeRpaXawuCLtIGbZ83eg=
Subject key identifier:   AC:EB:86:3B:FD:60:09:8A:6B:3C:3F:A1:E1:1F:46:26:4A:4E:FA:99
Certificate issuer:       /CN=eb091499adc769b0fba9fed3284543a7425c2351
Certificate serial:       019F19011C9C523A4B29AF974EAF6ED75B9E
Authority key identifier: EB:09:14:99:AD:C7:69:B0:FB:A9:FE:D3:28:45:43:A7:42:5C:23:51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6wkUma3HabD7qf7TKEVDp0JcI1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/ad46a5-f900-4ad1-b229-e18435e432dc/1/rOuGO_1gCYprPD-h4R9GJkpO-pk.asa
Signing time:             Tue 30 Jun 2026 14:48:50 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:50 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            207727
Providers:                AS: 42541
                          AS: 205235
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/ad46a5-f900-4ad1-b229-e18435e432dc/1/6wkUma3HabD7qf7TKEVDp0JcI1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/ad46a5-f900-4ad1-b229-e18435e432dc/1/6wkUma3HabD7qf7TKEVDp0JcI1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6wkUma3HabD7qf7TKEVDp0JcI1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:1c:9c:52:3a:4b:29:af:97:4e:af:6e:d7:5b:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb091499adc769b0fba9fed3284543a7425c2351
        Validity
            Not Before: Jun 30 14:48:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=aceb863bfd60098a6b3c3fa1e11f46264a4efa99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0a:b3:e8:5e:be:9c:f3:bc:22:b2:22:f6:27:
                    df:fc:97:cc:d6:3e:58:20:8b:2a:0d:ba:d6:40:7d:
                    79:b7:59:32:d5:c2:38:20:6c:7e:84:37:00:88:f7:
                    b1:d3:ae:bb:73:e2:d3:43:bc:4f:75:9e:f4:ac:e1:
                    65:9f:58:4c:ad:04:7f:c3:0c:db:e6:53:10:51:6f:
                    f0:cc:d6:d1:c9:a3:9d:1a:38:5e:86:d6:4a:80:68:
                    6e:71:58:82:6d:dc:6e:f4:f4:7a:be:43:fb:22:66:
                    cd:cd:ce:ae:a4:f1:f1:4c:a5:4d:b4:a7:59:2f:88:
                    8a:88:87:6b:2f:eb:3a:eb:14:96:84:17:66:74:8e:
                    7a:7d:24:a4:2d:0a:19:4d:11:41:97:da:a6:92:e9:
                    b9:c8:b7:d5:91:e2:cf:81:0e:3b:89:95:ac:c2:6c:
                    da:54:2c:a0:f3:f6:d0:f2:32:73:2f:f8:3e:07:ef:
                    a6:98:e3:e5:fd:e2:ca:4b:b5:ae:b8:77:c2:bf:f8:
                    d4:2e:9e:62:0b:59:a5:8b:e1:4a:dd:fa:ac:fe:8e:
                    f7:8f:32:ce:e9:90:b8:86:7e:02:6a:36:19:d9:6d:
                    e7:07:15:c2:e8:79:de:18:a6:04:50:4e:b9:01:a7:
                    e3:94:5f:b6:66:1d:00:97:a5:2d:d8:62:a0:db:5f:
                    98:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:EB:86:3B:FD:60:09:8A:6B:3C:3F:A1:E1:1F:46:26:4A:4E:FA:99
            X509v3 Authority Key Identifier:
                keyid:EB:09:14:99:AD:C7:69:B0:FB:A9:FE:D3:28:45:43:A7:42:5C:23:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6wkUma3HabD7qf7TKEVDp0JcI1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ad46a5-f900-4ad1-b229-e18435e432dc/1/rOuGO_1gCYprPD-h4R9GJkpO-pk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ad46a5-f900-4ad1-b229-e18435e432dc/1/6wkUma3HabD7qf7TKEVDp0JcI1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207727

    Signature Algorithm: sha256WithRSAEncryption
         65:6b:d7:ad:70:ec:f6:cf:0d:19:b9:35:0b:36:21:a7:58:ed:
         7b:7a:40:a8:95:44:a2:e9:ff:e2:42:3a:31:fa:df:ac:d7:41:
         39:5e:89:d4:c4:3d:6b:4c:88:15:fe:ef:ae:ba:dd:57:c1:5e:
         47:f1:cc:a2:27:88:c6:43:6a:d1:c8:12:2b:88:63:ce:59:53:
         4e:db:ec:c6:6a:04:75:3c:d9:4f:91:d5:3b:69:34:fc:6e:ab:
         45:45:ba:8a:72:20:ec:1b:5c:ea:f8:50:2e:7f:9d:cf:88:9d:
         83:34:2a:97:94:3a:58:42:89:e5:b7:05:08:78:32:31:51:77:
         00:58:b2:b5:42:8a:d7:f1:d2:f7:cf:45:e7:e7:f5:fe:a4:b0:
         45:de:e8:02:31:ca:fd:88:94:9d:71:3f:24:e9:04:a1:ab:c7:
         11:e0:79:c0:22:be:8a:d5:99:79:ec:6a:8b:cd:d8:64:a5:dc:
         85:5c:86:b8:57:3a:24:c0:33:25:27:95:9c:a1:c9:e8:26:b6:
         db:b3:f2:bf:30:9f:18:0e:1f:ed:d0:34:ad:6c:c9:15:a0:b6:
         9f:52:e9:bb:b0:3c:7f:3a:af:ff:a0:51:a0:7f:b0:30:27:63:
         14:27:95:a4:89:a0:ee:5d:80:ce:ec:4c:4b:25:b9:d2:08:54:
         2e:5a:7a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:52:20 2026 by rpki-client