Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/GZzZT9Sao97NC-Y9TRb9E1u4nW0.asa
File:                     GZzZT9Sao97NC-Y9TRb9E1u4nW0.asa (raw, json)
Hash identifier:          e4oJkH62e7cTFaec3hI6QTODsV/1v2PHL/GsZSwDtcs=
Subject key identifier:   19:9C:D9:4F:D4:9A:A3:DE:CD:0B:E6:3D:4D:16:FD:13:5B:B8:9D:6D
Certificate issuer:       /CN=ef1535978be6b0ad7a9cb70eb0522f8c950982a9
Certificate serial:       019F19012D1732D7C904935BE19E5E7A5AAD
Authority key identifier: EF:15:35:97:8B:E6:B0:AD:7A:9C:B7:0E:B0:52:2F:8C:95:09:82:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7xU1l4vmsK16nLcOsFIvjJUJgqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/GZzZT9Sao97NC-Y9TRb9E1u4nW0.asa
Signing time:             Tue 30 Jun 2026 14:48:55 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:55 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            216426
Providers:                AS: 206276
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7xU1l4vmsK16nLcOsFIvjJUJgqk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:2d:17:32:d7:c9:04:93:5b:e1:9e:5e:7a:5a:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef1535978be6b0ad7a9cb70eb0522f8c950982a9
        Validity
            Not Before: Jun 30 14:48:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=199cd94fd49aa3decd0be63d4d16fd135bb89d6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:27:c2:c4:b7:dc:c5:da:05:3e:ea:e1:8d:c4:
                    8d:15:46:47:a7:54:38:55:6a:74:ed:c2:39:f0:14:
                    c7:5c:9c:75:f6:53:d5:d0:e7:2f:d7:1d:6d:f8:ff:
                    10:7e:70:f9:23:d7:21:09:9f:1a:c6:e3:99:a0:cd:
                    2c:49:1c:8c:a0:2d:ee:a4:b8:99:60:b7:6d:12:d1:
                    be:d2:41:c0:cd:51:0c:e0:cc:97:c1:b2:43:a5:86:
                    17:66:77:ac:ee:ee:2b:84:d8:04:43:27:79:39:ca:
                    64:a0:c3:3d:3a:05:6e:12:62:87:80:fe:73:ad:6c:
                    0d:2b:b3:40:8c:9a:6e:d7:c9:77:40:b4:fb:4f:64:
                    b5:c5:f6:87:62:f6:45:e5:ab:19:ee:cb:f2:a8:82:
                    c2:dc:1f:f9:b8:82:cf:5a:c9:c7:c6:bd:5f:94:4f:
                    0a:fb:38:67:2e:65:ea:61:ea:a3:57:d3:1f:4c:b9:
                    63:84:bf:f7:6f:d6:bb:70:61:b8:da:a9:d0:37:8e:
                    8b:83:25:ba:3d:7e:99:35:ed:92:70:6f:7c:7b:ae:
                    74:24:40:d8:f0:37:cc:f0:c6:c1:90:a4:fd:d8:a1:
                    24:09:d9:ee:e1:fe:cd:e0:d1:09:86:00:52:54:98:
                    92:60:c1:91:46:49:c5:2e:a0:92:0a:5d:cf:76:52:
                    7d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:9C:D9:4F:D4:9A:A3:DE:CD:0B:E6:3D:4D:16:FD:13:5B:B8:9D:6D
            X509v3 Authority Key Identifier:
                keyid:EF:15:35:97:8B:E6:B0:AD:7A:9C:B7:0E:B0:52:2F:8C:95:09:82:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xU1l4vmsK16nLcOsFIvjJUJgqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/GZzZT9Sao97NC-Y9TRb9E1u4nW0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216426

    Signature Algorithm: sha256WithRSAEncryption
         29:16:b8:78:21:f5:23:69:dc:7f:8c:cd:66:a8:7f:98:16:8a:
         4a:83:15:df:5b:dd:9e:71:a8:70:c6:36:68:77:95:6c:e0:7f:
         87:b5:72:94:85:20:5e:3c:46:b0:46:d4:70:31:d8:0f:d0:93:
         a1:e1:fe:9f:35:de:78:b2:a1:11:8a:fa:8f:ad:da:0f:e4:47:
         3a:42:e3:56:af:e0:5e:d7:77:56:f0:be:97:ef:71:a9:f8:1b:
         b6:f0:58:ab:50:26:69:53:66:48:f2:c0:4b:47:05:6d:17:df:
         e2:8b:7a:be:dc:24:1c:2a:7d:99:18:b3:04:65:46:ef:29:6d:
         9c:0a:99:64:00:ab:40:dc:8e:c0:67:92:03:85:d1:82:f6:ec:
         b1:7a:00:b2:42:06:3c:6d:52:08:ce:10:33:0f:36:3f:3b:32:
         5b:d9:9d:9b:75:9d:da:42:0e:62:e1:19:f4:9c:1d:fc:24:25:
         a2:72:f9:a3:da:35:26:32:9c:47:37:a6:0b:8a:e2:29:7e:81:
         82:b5:5c:f3:f6:10:76:8e:20:32:19:e6:75:86:fc:1d:0a:97:
         24:3b:71:c7:e3:5b:58:3a:15:3e:fb:6f:0a:5e:c8:c1:1d:55:
         eb:2b:05:bd:5c:b2:58:61:34:74:2e:6b:65:58:cd:82:f3:63:
         c0:00:7d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:52:06 2026 by rpki-client