Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/5Ne0J2AnsBb3KqrsSaZmYRS_sJ8.asa
File:                     5Ne0J2AnsBb3KqrsSaZmYRS_sJ8.asa (raw, json)
Hash identifier:          tSOxg/159dhYNU00jXQeCM0SgZ81uaakuIVv4gHhNvQ=
Subject key identifier:   E4:D7:B4:27:60:27:B0:16:F7:2A:AA:EC:49:A6:66:61:14:BF:B0:9F
Certificate issuer:       /CN=cfdb4459ef2245ad84911eefe0875a7d9335c5d8
Certificate serial:       019F236912581535078DED7BA1105D72453B
Authority key identifier: CF:DB:44:59:EF:22:45:AD:84:91:1E:EF:E0:87:5A:7D:93:35:C5:D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z9tEWe8iRa2EkR7v4IdafZM1xdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/5Ne0J2AnsBb3KqrsSaZmYRS_sJ8.asa
Signing time:             Thu 02 Jul 2026 15:18:36 +0000
ASPA not before:          Thu 02 Jul 2026 15:18:36 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            213615
Providers:                AS: 9002
                          AS: 50673
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/z9tEWe8iRa2EkR7v4IdafZM1xdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/z9tEWe8iRa2EkR7v4IdafZM1xdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z9tEWe8iRa2EkR7v4IdafZM1xdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:69:12:58:15:35:07:8d:ed:7b:a1:10:5d:72:45:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfdb4459ef2245ad84911eefe0875a7d9335c5d8
        Validity
            Not Before: Jul  2 15:18:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e4d7b4276027b016f72aaaec49a6666114bfb09f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cd:89:ea:4a:08:ae:98:df:8c:21:2b:08:b7:
                    1d:d7:e8:7d:c0:14:a0:6e:b8:6d:72:ba:2d:57:8e:
                    f8:88:d4:2b:c1:ea:f2:85:d3:38:79:0c:cb:db:25:
                    d1:e1:52:53:b7:d5:f6:fd:6b:49:10:03:80:a1:d6:
                    15:ba:c2:76:b1:ae:33:b2:38:a5:8f:5e:25:12:05:
                    ca:20:c0:fa:d2:a5:49:86:a8:12:df:db:4c:00:4a:
                    56:47:39:15:6b:d1:d8:b2:a1:09:d4:75:4d:41:06:
                    24:a7:5c:a7:27:62:cc:a1:4f:0b:9d:ca:76:e4:11:
                    0f:df:6d:2e:c1:cf:f5:4c:d6:16:34:09:53:c8:c9:
                    6c:1b:3e:29:01:d1:90:0e:cb:98:2c:21:45:98:5b:
                    92:a1:b7:59:b6:eb:4c:5c:d1:cc:ed:56:8e:9f:02:
                    49:8d:35:07:a4:02:ed:0c:9f:94:70:0d:f3:86:51:
                    8e:1e:37:53:13:33:86:d4:45:83:bb:12:ae:53:65:
                    3d:ca:50:3d:ee:e1:be:91:38:79:a6:ac:90:de:53:
                    b7:76:3e:c1:63:b9:76:e3:0b:08:6e:9f:0a:99:61:
                    fa:f1:bc:f7:f2:93:1e:98:0e:03:f7:97:a4:42:8a:
                    44:b9:72:e9:53:66:50:c9:b5:39:6b:1a:c1:70:f6:
                    c3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D7:B4:27:60:27:B0:16:F7:2A:AA:EC:49:A6:66:61:14:BF:B0:9F
            X509v3 Authority Key Identifier:
                keyid:CF:DB:44:59:EF:22:45:AD:84:91:1E:EF:E0:87:5A:7D:93:35:C5:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9tEWe8iRa2EkR7v4IdafZM1xdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/5Ne0J2AnsBb3KqrsSaZmYRS_sJ8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/z9tEWe8iRa2EkR7v4IdafZM1xdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213615

    Signature Algorithm: sha256WithRSAEncryption
         17:dc:d8:28:ea:18:03:3c:2f:1f:b6:4b:dc:36:a7:28:1f:b9:
         54:32:88:24:84:eb:a5:da:51:26:c5:e0:d8:fb:cd:0a:bf:75:
         17:ee:ea:78:ad:d6:dc:37:4a:42:b1:41:e2:7b:5d:da:74:df:
         82:9b:e0:e4:fa:ae:d8:3d:7d:72:f9:f6:06:ae:a5:54:81:c5:
         1c:27:87:47:b9:66:a0:e5:0c:ea:1f:94:9a:c5:fd:65:2e:4c:
         e6:81:27:1e:0d:a2:73:6a:fb:ea:08:14:09:2b:a1:b1:a5:6d:
         76:1b:fe:e8:c7:ea:65:6d:f7:31:e7:b8:65:82:f7:a2:89:00:
         a2:29:33:cf:f7:f1:78:2d:13:06:a5:e7:34:17:76:5a:44:68:
         26:9d:69:f2:9e:af:ca:56:3d:59:73:c9:05:08:de:cb:22:93:
         0c:71:33:4e:90:17:92:d4:fc:db:05:58:4f:20:55:e3:ce:ed:
         1d:0a:ca:e0:d0:fd:c7:cf:6c:f2:4c:1c:0c:36:92:e4:af:42:
         a3:2a:ff:ce:c2:c1:5b:ab:0e:91:11:10:69:d0:57:ba:89:ab:
         1f:e9:cb:aa:51:29:fe:84:ff:59:3e:6a:0b:98:74:32:33:d8:
         5c:d5:30:22:06:5a:2c:23:98:9d:80:3a:7d:d3:81:33:a3:01:
         b9:37:93:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:34 2026 by rpki-client