Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/sFMMKvCe9CZKKs8XoYoiEAVRrxY.asa
File:                     sFMMKvCe9CZKKs8XoYoiEAVRrxY.asa (raw, json)
Hash identifier:          WxXfQ6M/fqCNSHpmJqIR75Y3bQRv0KhOqG6hp5lzbHM=
Subject key identifier:   B0:53:0C:2A:F0:9E:F4:26:4A:2A:CF:17:A1:8A:22:10:05:51:AF:16
Certificate issuer:       /CN=ff3542b94e088bbf77aee1b339423152daef5e0d
Certificate serial:       019E036A94246567119FF44FA1CDBD217876
Authority key identifier: FF:35:42:B9:4E:08:8B:BF:77:AE:E1:B3:39:42:31:52:DA:EF:5E:0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_zVCuU4Ii793ruGzOUIxUtrvXg0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/sFMMKvCe9CZKKs8XoYoiEAVRrxY.asa
Signing time:             Thu 07 May 2026 17:09:36 +0000
ASPA not before:          Thu 07 May 2026 17:09:36 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            205856
Providers:                AS: 50607
                          AS: 201054
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/_zVCuU4Ii793ruGzOUIxUtrvXg0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/_zVCuU4Ii793ruGzOUIxUtrvXg0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_zVCuU4Ii793ruGzOUIxUtrvXg0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:03:6a:94:24:65:67:11:9f:f4:4f:a1:cd:bd:21:78:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff3542b94e088bbf77aee1b339423152daef5e0d
        Validity
            Not Before: May  7 17:09:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b0530c2af09ef4264a2acf17a18a22100551af16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:59:60:61:9a:66:1a:d9:ca:43:a4:67:53:51:
                    00:37:ed:dd:51:91:84:b5:b7:45:b5:65:19:61:2d:
                    f7:99:ee:7a:44:2d:ac:8d:a1:58:56:db:af:0b:0c:
                    ef:8e:96:89:92:4e:71:e3:5a:20:28:7a:65:03:b8:
                    cc:09:4d:4e:92:7a:7a:af:66:25:14:3e:a0:7e:80:
                    14:3f:57:98:b4:4e:2d:64:9d:3e:9c:b1:67:a0:2e:
                    8e:04:cd:2c:6a:38:45:ed:e4:be:dd:de:9f:c3:12:
                    53:85:50:ec:02:85:0f:14:8c:99:c6:d5:44:15:72:
                    7e:64:a7:4e:4d:36:c8:6f:19:81:aa:a8:9e:d1:45:
                    c0:5a:82:9b:9b:09:18:80:cc:6b:c5:3e:05:b3:35:
                    c9:f6:ef:5c:11:ab:4d:8d:ba:36:03:f5:7f:18:c7:
                    f4:29:85:c9:86:37:b2:e5:09:66:f3:db:a4:01:03:
                    bd:5f:88:ae:c4:67:89:10:f0:21:c8:b2:33:ea:7b:
                    9d:25:ab:b5:8b:5f:c1:be:1e:09:e8:92:f1:6e:42:
                    af:da:81:2b:b3:02:ce:62:c1:dd:9c:49:75:f8:dc:
                    76:fb:d1:b1:87:51:a6:c3:cb:c0:cc:00:45:a3:4d:
                    55:72:11:8f:25:ea:3e:ee:ed:d3:29:4a:bc:a0:e9:
                    a5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:53:0C:2A:F0:9E:F4:26:4A:2A:CF:17:A1:8A:22:10:05:51:AF:16
            X509v3 Authority Key Identifier:
                keyid:FF:35:42:B9:4E:08:8B:BF:77:AE:E1:B3:39:42:31:52:DA:EF:5E:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zVCuU4Ii793ruGzOUIxUtrvXg0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/sFMMKvCe9CZKKs8XoYoiEAVRrxY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/_zVCuU4Ii793ruGzOUIxUtrvXg0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205856

    Signature Algorithm: sha256WithRSAEncryption
         84:17:cf:6d:68:04:f2:c0:7a:e4:4e:86:5c:d9:dc:f0:98:d3:
         bd:96:3c:f1:cb:1c:50:08:da:4a:df:36:fe:cc:67:9b:59:b3:
         61:56:0d:94:d8:b7:c0:f7:68:51:dd:56:94:48:4d:96:4e:8d:
         59:f1:df:cc:94:b2:8a:75:45:28:e5:56:95:68:d8:df:7a:87:
         09:f0:63:cf:c7:e1:f1:bd:f8:72:3c:c7:ee:fe:ec:14:b8:fb:
         1b:c2:ba:58:57:25:7f:db:07:22:21:18:50:4d:c0:8d:c2:77:
         07:36:d3:ec:14:d2:92:85:7f:81:03:53:b3:e8:11:46:69:b0:
         43:99:0a:ce:68:eb:e9:14:b7:3f:9d:f9:eb:38:47:28:5e:56:
         0c:e2:47:20:47:0e:3a:84:d9:38:50:7f:9c:2d:88:24:29:9f:
         fe:54:d6:da:66:db:21:d8:46:f8:86:8c:24:99:53:8b:39:27:
         46:3f:15:1a:b8:32:38:9d:c0:f5:41:b0:06:ac:16:67:3b:a0:
         e6:82:18:30:34:bc:9c:a3:ec:c5:4c:62:d4:ec:3e:f7:cc:99:
         9e:d8:e4:77:c4:1c:95:bf:74:5a:ba:87:18:3d:4f:b8:50:57:
         7c:45:3e:c5:98:2c:8d:97:e0:de:e8:44:4d:03:38:c9:56:67:
         18:a4:10:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:24:49 2026 by rpki-client