Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/hFrzrATwthoWhcz0MUU5me2hxsI.asa
File:                     hFrzrATwthoWhcz0MUU5me2hxsI.asa (raw, json)
Hash identifier:          qasjw1PBGin1L+tvp/txSHK72tERURo1h0R6cieBtNM=
Subject key identifier:   84:5A:F3:AC:04:F0:B6:1A:16:85:CC:F4:31:45:39:99:ED:A1:C6:C2
Certificate issuer:       /CN=5d41d330dc8c7293e729451db2646383838e3f8c
Certificate serial:       019E171C632E634F3362A29F22CDD800C67E
Authority key identifier: 5D:41:D3:30:DC:8C:72:93:E7:29:45:1D:B2:64:63:83:83:8E:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XUHTMNyMcpPnKUUdsmRjg4OOP4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/hFrzrATwthoWhcz0MUU5me2hxsI.asa
Signing time:             Mon 11 May 2026 12:56:36 +0000
ASPA not before:          Mon 11 May 2026 12:56:36 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            207994
Providers:                AS: 6830
                          AS: 35133
                          AS: 41441
                          AS: 50263
                          AS: 50629
                          AS: 50952
                          AS: 56393
                          AS: 56584
                          AS: 64289
                          AS: 203323
                          AS: 206221
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XUHTMNyMcpPnKUUdsmRjg4OOP4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:17:1c:63:2e:63:4f:33:62:a2:9f:22:cd:d8:00:c6:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d41d330dc8c7293e729451db2646383838e3f8c
        Validity
            Not Before: May 11 12:56:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=845af3ac04f0b61a1685ccf431453999eda1c6c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:29:cd:22:5c:e8:89:ea:bb:4a:74:b9:8c:2b:
                    b6:29:15:52:4c:86:6c:d2:76:97:0c:2d:6b:22:67:
                    95:3b:ab:09:cd:78:43:85:9a:3b:f7:f9:b7:3f:30:
                    ed:b0:ca:52:1e:84:43:34:34:09:6b:bc:1e:77:43:
                    28:62:2f:83:fa:61:6e:ae:31:26:8e:60:86:7b:8d:
                    05:4d:8f:db:3f:5f:2a:73:26:32:80:4a:e5:c8:9f:
                    a9:90:ae:09:8d:dd:28:23:37:ee:b0:93:0d:01:8c:
                    55:62:75:10:76:9b:57:d2:48:5a:e6:d2:cd:29:3d:
                    5d:83:8a:56:84:ce:23:e9:24:e3:b5:58:1f:54:66:
                    ee:90:2a:20:86:0c:a4:48:6d:71:4a:2e:d0:95:cc:
                    d0:83:64:a1:4e:e4:fc:53:87:c6:47:08:95:66:48:
                    15:f1:37:6a:eb:03:26:a9:13:3b:40:c0:01:14:cd:
                    12:b8:95:f3:20:0e:f2:5a:e7:b7:8a:22:a9:a3:36:
                    36:c6:d4:25:c5:3a:79:2d:a2:85:67:bb:66:e1:2f:
                    e1:5e:98:f5:f7:28:b7:80:41:37:c5:b6:dc:ca:a2:
                    65:56:a9:b8:a5:1c:14:72:9b:b8:2e:39:c1:68:17:
                    1d:60:3b:24:14:b5:97:55:cf:14:98:e1:51:30:09:
                    47:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:5A:F3:AC:04:F0:B6:1A:16:85:CC:F4:31:45:39:99:ED:A1:C6:C2
            X509v3 Authority Key Identifier:
                keyid:5D:41:D3:30:DC:8C:72:93:E7:29:45:1D:B2:64:63:83:83:8E:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XUHTMNyMcpPnKUUdsmRjg4OOP4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/hFrzrATwthoWhcz0MUU5me2hxsI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207994

    Signature Algorithm: sha256WithRSAEncryption
         21:02:49:8d:2d:53:c7:27:83:79:0d:ad:36:6c:64:51:e7:8b:
         ef:d9:ee:eb:88:d5:07:79:52:fa:aa:71:e4:e0:70:02:e3:00:
         ce:bd:8d:b8:3f:c0:7f:29:77:3f:ef:74:ba:20:d0:0e:d0:f6:
         70:5f:41:91:08:9c:43:13:26:3a:34:5f:fc:0d:c4:e8:55:ec:
         c7:93:39:77:1f:e7:33:f7:92:df:7f:74:f2:ed:7b:f7:7d:0a:
         52:bc:09:10:72:eb:6d:2c:8b:eb:1a:a6:44:be:4e:09:9d:9c:
         95:1c:b6:72:33:4b:d2:4d:ee:39:20:bb:56:5f:d2:99:4f:d1:
         dd:52:6c:49:1a:f6:17:ab:d5:5f:df:01:26:4d:07:f5:19:54:
         62:ab:4b:ed:16:bd:93:a6:d0:b3:75:4c:cf:d0:d0:2b:7b:cd:
         b8:21:29:d3:23:15:26:e5:39:38:76:22:2f:60:fe:76:97:d0:
         44:72:ce:d3:2d:1b:12:cf:3c:05:3d:48:af:05:dd:59:1b:d0:
         eb:e0:bb:68:6b:08:19:f5:9b:57:d2:d2:7f:a9:42:42:89:6a:
         f6:3a:6a:5a:eb:f3:e9:5c:f5:88:44:c4:4f:ee:2a:5e:a3:d2:
         50:02:0a:28:63:2a:8a:6c:f2:5f:cb:41:69:00:1d:e8:26:72:
         fe:dc:71:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:24:48 2026 by rpki-client