Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/rTTsraWoheew-IDtYXYN62ue5ps.asa
File:                     rTTsraWoheew-IDtYXYN62ue5ps.asa (raw, json)
Hash identifier:          3sxga68IrNM7gn+h6yOFJ9xQgDIWB1dSZ9AEKQqw0qY=
Subject key identifier:   AD:34:EC:AD:A5:A8:85:E7:B0:F8:80:ED:61:76:0D:EB:6B:9E:E6:9B
Certificate issuer:       /CN=72202e645f72cd70aa8143b73bcc0ddd93bfe91a
Certificate serial:       01A0BF3305F992A42C13BEACFD1D39F1D46A
Authority key identifier: 72:20:2E:64:5F:72:CD:70:AA:81:43:B7:3B:CC:0D:DD:93:BF:E9:1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/rTTsraWoheew-IDtYXYN62ue5ps.asa
Signing time:             Sun 20 Sep 2026 14:23:07 +0000
ASPA not before:          Sun 20 Sep 2026 14:23:07 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214242
Providers:                AS: 20473
                          AS: 41051
                          AS: 53667
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bf:33:05:f9:92:a4:2c:13:be:ac:fd:1d:39:f1:d4:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72202e645f72cd70aa8143b73bcc0ddd93bfe91a
        Validity
            Not Before: Sep 20 14:23:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ad34ecada5a885e7b0f880ed61760deb6b9ee69b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f2:42:4d:a3:bd:83:d4:66:df:b7:a2:a8:1f:
                    82:99:20:86:46:a9:a6:b9:fe:e0:69:b2:6a:ff:b0:
                    7f:bf:4e:7f:dd:43:3c:cd:06:58:d7:89:aa:2c:4d:
                    50:96:97:44:1e:c7:ed:2a:0c:84:63:e8:ab:99:d4:
                    0b:b6:9f:a9:9b:81:b1:3d:fe:e8:6e:7b:0d:e7:c2:
                    ed:31:a2:ea:91:76:a8:3a:44:72:5f:3b:81:0e:b7:
                    3c:a0:79:f5:72:ba:6b:ac:12:26:96:f3:3f:5c:3e:
                    7b:b7:aa:ef:3b:46:5a:90:29:8f:52:ed:96:31:c4:
                    0c:77:5e:e7:fa:d2:65:3c:d9:b7:39:d9:fc:62:a9:
                    2a:72:07:b6:87:be:e0:47:57:5f:09:51:b7:26:a8:
                    1b:12:71:a0:fe:69:c0:0d:c1:a7:12:62:db:bb:cd:
                    5d:e7:fb:e0:f0:27:b8:d1:23:39:2a:16:82:28:c7:
                    c3:79:3b:2c:f4:c4:27:a4:10:40:15:5e:ca:8f:ff:
                    b1:7e:86:e6:e6:84:a8:aa:b6:30:68:fe:bf:5d:a3:
                    f9:ae:cd:0a:6a:89:14:b7:74:ee:6e:db:2a:2c:6f:
                    74:d9:a5:10:33:f1:25:36:76:30:8d:c6:a4:b1:61:
                    a8:07:98:29:94:50:28:73:fa:aa:d8:1e:82:07:a4:
                    27:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:34:EC:AD:A5:A8:85:E7:B0:F8:80:ED:61:76:0D:EB:6B:9E:E6:9B
            X509v3 Authority Key Identifier:
                keyid:72:20:2E:64:5F:72:CD:70:AA:81:43:B7:3B:CC:0D:DD:93:BF:E9:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/rTTsraWoheew-IDtYXYN62ue5ps.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214242

    Signature Algorithm: sha256WithRSAEncryption
         4a:f3:54:24:e3:2a:49:2b:68:8f:32:00:fb:de:9e:c9:8b:2f:
         a8:ae:69:83:46:c1:dc:9a:f3:2b:3b:d0:6a:c5:83:3b:44:65:
         14:3c:56:a6:db:fc:5f:c8:b9:b8:96:91:3a:a5:3e:66:03:19:
         bd:2a:19:27:94:fd:67:ec:38:26:9d:f4:d8:7d:a6:c0:3f:bb:
         91:53:2b:5e:fc:04:d0:de:37:a9:ca:bf:9a:64:b3:5b:b6:39:
         d7:b0:6a:83:4f:4c:37:36:15:3c:63:84:dc:f8:29:a6:a4:f4:
         92:ff:73:fb:85:9c:91:d0:38:a4:32:f0:f2:3f:59:3e:d5:53:
         d8:6e:74:1b:01:eb:59:92:e4:22:e3:10:4b:fb:d8:72:18:13:
         8b:58:f4:c9:f6:29:14:d1:23:f9:69:13:90:0d:44:af:bc:72:
         9e:a3:6f:4b:2b:92:31:56:1b:a8:ed:86:b3:7b:c1:d9:0a:85:
         d9:3c:ba:78:cd:be:69:51:6b:f6:78:75:80:34:5d:d8:d1:21:
         f3:3f:9b:6c:16:10:16:57:5a:c6:c7:da:c1:24:c3:60:3e:00:
         58:99:08:15:dd:c8:d8:fc:cb:75:d0:2f:a9:24:4b:6a:3c:57:
         13:63:41:65:91:b0:f0:d8:82:49:c4:26:19:66:66:39:dc:d5:
         97:38:a4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:17:20 2026 by rpki-client