Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/HQkCijMV9_xz1pxlMVTKYL1q5Lc.asa
File:                     HQkCijMV9_xz1pxlMVTKYL1q5Lc.asa (raw, json)
Hash identifier:          PxM/0EfV3k77iXpSKK4QS8zmHHDp3CSagYFz+PFhCsg=
Subject key identifier:   1D:09:02:8A:33:15:F7:FC:73:D6:9C:65:31:54:CA:60:BD:6A:E4:B7
Certificate issuer:       /CN=a9b7d8007ef5a8276c4a4e9c4207d0454ff18552
Certificate serial:       019F2368E75CEF460E77F4FDD8560E48E695
Authority key identifier: A9:B7:D8:00:7E:F5:A8:27:6C:4A:4E:9C:42:07:D0:45:4F:F1:85:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qbfYAH71qCdsSk6cQgfQRU_xhVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/HQkCijMV9_xz1pxlMVTKYL1q5Lc.asa
Signing time:             Thu 02 Jul 2026 15:18:25 +0000
ASPA not before:          Thu 02 Jul 2026 15:18:25 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            205081
Providers:                AS: 174
                          AS: 29119
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/qbfYAH71qCdsSk6cQgfQRU_xhVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/qbfYAH71qCdsSk6cQgfQRU_xhVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qbfYAH71qCdsSk6cQgfQRU_xhVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:68:e7:5c:ef:46:0e:77:f4:fd:d8:56:0e:48:e6:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9b7d8007ef5a8276c4a4e9c4207d0454ff18552
        Validity
            Not Before: Jul  2 15:18:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1d09028a3315f7fc73d69c653154ca60bd6ae4b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:53:bb:99:ba:d3:11:7d:4b:77:2c:0f:3f:64:
                    ff:04:95:83:f8:83:41:b4:0a:d2:60:2c:a6:84:9a:
                    be:56:c4:7c:02:ef:a8:8e:76:96:bc:e6:31:d2:ba:
                    09:03:c6:81:a5:c3:a9:ad:e3:19:3b:4c:07:ea:5a:
                    f9:55:94:bc:6a:19:62:10:9f:a4:49:29:c6:7b:62:
                    97:ba:fd:bb:7a:ed:f2:b9:63:83:82:e2:67:b6:fd:
                    67:92:68:a4:37:f1:cf:8c:ac:de:c0:70:11:8a:70:
                    79:81:7a:f2:2b:b1:b0:d0:44:f1:f7:23:b0:32:18:
                    e1:2a:c7:3b:12:39:43:b2:3a:da:a5:5c:8c:d4:10:
                    5d:1a:f1:65:ff:39:ec:4c:bc:42:eb:c8:60:33:a0:
                    70:46:02:b2:6b:2e:62:91:fc:62:ec:44:68:93:79:
                    af:5d:f9:52:40:c1:81:78:03:db:2e:22:25:8e:ca:
                    7c:cc:6d:2c:0a:dc:1c:fd:5c:9d:50:e6:1b:76:a3:
                    2d:47:1b:6f:4b:9b:5e:42:f3:ea:87:bf:b4:05:ea:
                    14:d3:a0:08:84:42:67:65:d5:8b:8a:12:8d:2e:ef:
                    cc:7d:e6:39:32:56:93:68:39:8f:67:b2:6c:66:00:
                    0b:ab:3e:32:be:75:8e:22:e1:52:00:d2:6c:70:9c:
                    f7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:09:02:8A:33:15:F7:FC:73:D6:9C:65:31:54:CA:60:BD:6A:E4:B7
            X509v3 Authority Key Identifier:
                keyid:A9:B7:D8:00:7E:F5:A8:27:6C:4A:4E:9C:42:07:D0:45:4F:F1:85:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbfYAH71qCdsSk6cQgfQRU_xhVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/HQkCijMV9_xz1pxlMVTKYL1q5Lc.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/qbfYAH71qCdsSk6cQgfQRU_xhVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205081

    Signature Algorithm: sha256WithRSAEncryption
         4f:94:42:05:6e:5e:2e:2b:d0:c5:f6:36:7c:6c:3e:6a:48:6a:
         24:2d:a4:43:90:13:02:16:1a:64:84:24:21:89:94:f5:d4:15:
         50:53:ca:82:a2:86:2f:83:30:b0:6b:da:8e:79:80:92:1d:70:
         fd:86:0d:d1:21:db:a9:5e:83:ee:a2:ec:1a:83:d6:31:70:62:
         5b:eb:ef:ff:6b:00:57:96:06:cf:9e:6e:61:64:32:f4:d6:f7:
         ff:68:42:29:19:f3:92:a3:32:c1:bd:78:30:7f:df:5b:68:6a:
         bd:ee:cf:71:af:c6:74:0f:91:5a:29:51:ad:33:5c:e8:cb:f0:
         21:5d:33:6b:dc:6b:b2:39:25:a9:81:6c:60:3e:33:8d:40:aa:
         41:ce:1f:f2:ab:68:27:4c:2f:95:41:79:c0:1a:e5:7c:7c:3a:
         49:10:e4:a4:eb:25:0d:e1:dc:02:97:60:e5:bf:47:95:4f:b2:
         13:ab:d0:c3:7f:22:5d:b8:d3:06:0d:c4:e8:76:88:75:1d:a3:
         f5:03:3a:e6:cf:fa:7e:7b:32:63:fc:16:47:3a:37:bb:7e:5c:
         61:4c:94:0d:a4:5d:dc:b3:95:bc:f6:b1:1f:80:b7:84:06:81:
         5b:75:3c:5c:bd:7c:36:93:09:f5:2c:6f:77:b6:61:94:09:80:
         30:67:7c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:15:14 2026 by rpki-client