Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/snJ2z_25Wo-WwYHYvg1pLIChayo.asa
File:                     snJ2z_25Wo-WwYHYvg1pLIChayo.asa (raw, json)
Hash identifier:          4vVtZTPez3DREJmEj/Q+ey4Wm1nOywCHZsTKojucDnM=
Subject key identifier:   B2:72:76:CF:FD:B9:5A:8F:96:C1:81:D8:BE:0D:69:2C:80:A1:6B:2A
Certificate issuer:       /CN=f943c02c6f7bf9792aee485a337b4c7852d6ac4c
Certificate serial:       019F2368521850E5E7E4BFBE1538C8B93149
Authority key identifier: F9:43:C0:2C:6F:7B:F9:79:2A:EE:48:5A:33:7B:4C:78:52:D6:AC:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-UPALG97-Xkq7khaM3tMeFLWrEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/snJ2z_25Wo-WwYHYvg1pLIChayo.asa
Signing time:             Thu 02 Jul 2026 15:17:47 +0000
ASPA not before:          Thu 02 Jul 2026 15:17:47 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214380
Providers:                AS: 1101
                          AS: 1103
                          AS: 6939
                          AS: 8283
                          AS: 44854
                          AS: 50869
                          AS: 200132
                          AS: 212635
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/1-UPALG97-Xkq7khaM3tMeFLWrEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/1-UPALG97-Xkq7khaM3tMeFLWrEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-UPALG97-Xkq7khaM3tMeFLWrEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:68:52:18:50:e5:e7:e4:bf:be:15:38:c8:b9:31:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f943c02c6f7bf9792aee485a337b4c7852d6ac4c
        Validity
            Not Before: Jul  2 15:17:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b27276cffdb95a8f96c181d8be0d692c80a16b2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5b:9e:8f:c8:5f:a3:9f:b9:ce:be:b7:30:ff:
                    a0:5b:ea:23:3e:6f:72:59:e1:66:8a:80:8e:47:71:
                    54:14:f0:d6:8e:2d:71:c9:e0:8e:e8:89:8c:67:8c:
                    33:96:ad:68:91:49:a4:dc:37:cf:73:a0:96:a4:e0:
                    57:0a:a0:89:e2:f4:bc:ea:e2:1a:a4:87:a5:01:3f:
                    f2:b4:43:35:83:d2:a6:f7:88:d4:95:2e:1c:be:3f:
                    fe:bf:38:25:72:d5:21:70:a8:73:47:12:43:9e:52:
                    ae:8d:42:7c:50:4d:d3:57:8d:cc:5b:fa:2a:2c:31:
                    74:a2:64:d0:b3:6c:6d:79:88:a7:63:f8:4e:cd:13:
                    f7:c8:81:c4:65:0f:42:07:c0:db:04:79:ac:cd:8b:
                    12:76:10:8f:8b:ff:4b:cb:e3:9b:e4:c5:1d:05:ee:
                    18:29:84:79:fa:1a:bc:c0:03:fe:7e:36:9f:fb:16:
                    24:5e:a9:3f:ce:25:1c:e2:c0:80:b1:de:fd:02:68:
                    e9:95:9c:31:4f:f3:0a:9f:87:f3:a1:f3:59:77:6a:
                    35:1f:fe:b2:68:a6:9b:8a:12:4c:c0:20:a5:80:90:
                    1c:13:88:fb:a9:1a:3d:e0:dd:d4:76:4a:4a:25:67:
                    31:42:3d:17:00:23:76:a6:92:3a:5d:4f:04:85:f8:
                    6e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:72:76:CF:FD:B9:5A:8F:96:C1:81:D8:BE:0D:69:2C:80:A1:6B:2A
            X509v3 Authority Key Identifier:
                keyid:F9:43:C0:2C:6F:7B:F9:79:2A:EE:48:5A:33:7B:4C:78:52:D6:AC:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-UPALG97-Xkq7khaM3tMeFLWrEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/snJ2z_25Wo-WwYHYvg1pLIChayo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/1-UPALG97-Xkq7khaM3tMeFLWrEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214380

    Signature Algorithm: sha256WithRSAEncryption
         6e:fe:ec:f2:22:4b:57:dd:d9:81:df:3d:2e:2c:81:86:b6:b8:
         b8:cf:8d:7c:7d:c6:37:1e:b2:30:f2:dd:b4:36:d7:b1:e9:c3:
         4a:62:4a:37:a0:9c:f3:8a:89:e1:9d:e7:aa:70:83:3c:fa:f6:
         1d:75:7a:52:6f:4f:da:0a:d4:2d:82:de:21:49:79:81:5b:f3:
         7e:0f:88:1b:de:a5:ac:2a:34:66:78:1e:96:bb:83:ac:cb:1d:
         27:8c:8b:f7:ef:72:67:01:76:f4:6a:86:33:c3:97:5f:4b:6f:
         3a:17:bb:4a:d6:5a:27:fa:83:8d:db:20:cb:60:fd:fb:4f:8e:
         71:a6:ab:8b:c7:10:c7:2d:69:51:cc:a2:e2:ed:c6:cf:cc:a7:
         07:b9:15:3e:fc:8c:fa:2d:9d:94:c7:92:d4:90:a5:62:eb:dd:
         28:1d:c9:51:db:bd:49:26:e0:09:e2:09:d9:cf:63:53:1b:27:
         cc:00:ae:61:23:db:ce:b5:9e:c7:90:9d:8b:92:d8:6b:ff:1d:
         d0:9d:03:be:f3:f1:a4:77:4d:b0:90:24:00:0d:3c:f2:b2:80:
         50:a5:d5:63:54:c5:da:ef:a0:c2:8c:d8:cf:f3:ba:ba:91:33:
         72:8a:94:5a:1f:a8:75:c0:ef:55:b6:78:ea:0c:d0:49:00:35:
         9a:cc:90:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:15:12 2026 by rpki-client