Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/ylN60AZhnKa9fysVT9Ct3y5pIEg.asa
File:                     ylN60AZhnKa9fysVT9Ct3y5pIEg.asa (raw, json)
Hash identifier:          vR5tYjzsZcCd1G4IMkymwkD1U1eYDXZY3+cXITuftZ4=
Subject key identifier:   CA:53:7A:D0:06:61:9C:A6:BD:7F:2B:15:4F:D0:AD:DF:2E:69:20:48
Certificate issuer:       /CN=a3a5cbf1c29e0219d0d9ebe1182621cca8993069
Certificate serial:       019F23689B605F9443583D928F6D5898A7A2
Authority key identifier: A3:A5:CB:F1:C2:9E:02:19:D0:D9:EB:E1:18:26:21:CC:A8:99:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o6XL8cKeAhnQ2evhGCYhzKiZMGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/ylN60AZhnKa9fysVT9Ct3y5pIEg.asa
Signing time:             Thu 02 Jul 2026 15:18:05 +0000
ASPA not before:          Thu 02 Jul 2026 15:18:05 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            216333
Providers:                AS: 174
                          AS: 6939
                          AS: 50673
                          AS: 50917
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/o6XL8cKeAhnQ2evhGCYhzKiZMGk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/o6XL8cKeAhnQ2evhGCYhzKiZMGk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o6XL8cKeAhnQ2evhGCYhzKiZMGk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:68:9b:60:5f:94:43:58:3d:92:8f:6d:58:98:a7:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3a5cbf1c29e0219d0d9ebe1182621cca8993069
        Validity
            Not Before: Jul  2 15:18:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ca537ad006619ca6bd7f2b154fd0addf2e692048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:3a:ea:ef:a3:ea:4d:93:f4:03:d4:57:ae:a3:
                    52:9f:78:a1:32:e1:d7:43:d0:a5:b3:97:9e:7c:e2:
                    83:0c:64:88:88:d0:59:f6:5d:18:fd:19:70:7a:af:
                    13:17:c6:cc:5a:96:e4:a4:2a:eb:ab:69:de:42:2a:
                    fb:3d:bc:47:ff:b4:77:a2:95:67:eb:52:03:77:78:
                    c8:be:7a:be:71:cc:de:3e:11:67:d8:be:2a:5c:ec:
                    08:9a:36:f8:b5:14:8d:90:e6:c8:3f:29:cc:75:3d:
                    92:86:e0:b1:b0:e3:02:25:1f:f5:f8:ff:72:55:05:
                    2d:a2:0a:b5:81:0b:ed:45:15:c2:83:d7:51:39:71:
                    0f:7a:e8:a5:8c:ff:e0:da:0a:a0:91:f4:fb:f0:59:
                    de:77:8e:5a:5c:ea:58:b2:d6:64:3b:3d:d6:9b:1a:
                    ca:a0:27:ac:40:de:c7:e9:f9:08:d5:fe:e5:96:89:
                    57:3c:1f:0f:ba:28:e7:30:72:e1:17:23:4e:b2:85:
                    c0:7b:c4:11:15:7c:b4:bc:45:bc:44:ba:99:43:9d:
                    94:fd:5b:2d:9c:8b:6f:81:ab:e8:6a:04:97:df:8d:
                    2e:35:e6:1a:6a:30:96:2b:67:f9:51:32:06:2f:fa:
                    1a:45:a4:1a:46:7d:0b:79:c7:49:fd:13:b2:be:b9:
                    ad:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:53:7A:D0:06:61:9C:A6:BD:7F:2B:15:4F:D0:AD:DF:2E:69:20:48
            X509v3 Authority Key Identifier:
                keyid:A3:A5:CB:F1:C2:9E:02:19:D0:D9:EB:E1:18:26:21:CC:A8:99:30:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6XL8cKeAhnQ2evhGCYhzKiZMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/ylN60AZhnKa9fysVT9Ct3y5pIEg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/o6XL8cKeAhnQ2evhGCYhzKiZMGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216333

    Signature Algorithm: sha256WithRSAEncryption
         19:6c:5d:f6:0b:dc:11:fe:4b:cf:b3:df:00:c8:1e:54:f2:ec:
         cb:3a:26:c7:49:9d:f3:9a:f3:a6:3d:3c:2c:90:c0:37:ec:10:
         d6:fb:a0:67:32:ea:ba:ad:33:85:77:7c:89:59:c6:51:6e:6f:
         d5:23:fc:9d:ae:52:e4:22:cd:f9:6c:2e:61:47:8f:9c:b3:dc:
         cd:50:bb:41:1a:99:b0:e3:73:23:d9:f9:b4:09:f7:22:f1:d2:
         47:da:0c:7a:1b:90:5b:ae:b1:37:7b:59:52:01:1f:f0:af:dd:
         38:06:a0:de:71:7f:88:24:22:13:86:f2:88:10:a2:32:28:ff:
         63:e0:e7:6e:29:ed:b1:09:c8:59:18:53:67:ce:d7:dd:9a:55:
         c4:8a:74:f4:40:98:8f:4e:e2:36:06:5b:a6:20:7e:eb:51:95:
         8d:de:4c:8d:fd:08:62:3d:ce:03:02:d8:9e:b5:e6:0c:c3:1c:
         77:31:bb:db:1a:16:26:0a:e9:0f:14:2b:01:76:59:c3:14:cd:
         bb:68:1a:6a:4f:02:8b:61:03:60:bb:73:85:90:dc:68:c1:60:
         e5:e7:b3:52:3c:a6:c2:1c:c9:a1:09:b2:98:47:e6:42:90:9c:
         83:bd:c0:e9:18:be:f4:55:cb:a3:96:7d:5f:06:94:e9:83:d8:
         c6:27:22:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:15:09 2026 by rpki-client