Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/n7trU9OazAsFuOKX3rIVdXGInW0.asa
File:                     n7trU9OazAsFuOKX3rIVdXGInW0.asa (raw, json)
Hash identifier:          We6vzeYPi/1x/iR8jtyyjqTwtIxiEVhlLLiF6qP7xTg=
Subject key identifier:   9F:BB:6B:53:D3:9A:CC:0B:05:B8:E2:97:DE:B2:15:75:71:88:9D:6D
Certificate issuer:       /CN=54b48731e29f27d687576d6863adbda080709bfe
Certificate serial:       019F902902C955ECF5EA6E522BED612B6EBE
Authority key identifier: 54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/n7trU9OazAsFuOKX3rIVdXGInW0.asa
Signing time:             Thu 23 Jul 2026 18:07:14 +0000
ASPA not before:          Thu 23 Jul 2026 18:07:14 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            201115
Providers:                AS: 42330
                          AS: 209505
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:29:02:c9:55:ec:f5:ea:6e:52:2b:ed:61:2b:6e:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54b48731e29f27d687576d6863adbda080709bfe
        Validity
            Not Before: Jul 23 18:07:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9fbb6b53d39acc0b05b8e297deb2157571889d6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7a:85:a8:b7:cf:36:1d:80:85:d8:4e:18:27:
                    27:eb:bf:75:00:d0:67:45:5d:cf:d0:e5:2b:fe:b6:
                    0c:09:6e:30:9f:15:59:62:95:27:23:75:bb:4c:88:
                    2a:a2:a4:5f:04:ee:5d:d2:c1:52:5b:a1:cf:90:1e:
                    fe:07:5f:48:92:df:67:db:71:7c:1c:61:1b:84:6e:
                    51:61:33:cf:c6:02:b8:4f:1a:5c:94:3c:79:38:f8:
                    f2:5b:a0:74:0d:a0:13:ac:4b:7c:bd:8d:b7:93:57:
                    d4:6a:b4:26:3e:1c:3b:fe:d6:ab:b6:82:ac:fc:50:
                    04:5f:5e:64:50:b5:9e:ae:2c:a5:cf:0e:72:e6:ce:
                    a2:50:05:65:8a:da:cd:93:75:2c:2e:1d:b9:43:25:
                    6d:86:6c:50:94:97:f7:cd:fc:74:18:61:2d:fb:e2:
                    e6:33:07:1b:50:cb:83:cf:e1:1f:d9:50:e2:d1:35:
                    c6:f7:5a:11:40:45:22:1d:d3:e6:60:57:1a:7a:4e:
                    b2:82:55:23:3d:7e:9a:da:51:2a:16:0f:2b:a2:ff:
                    af:e4:fa:c8:ab:52:1b:7c:ff:4d:c2:99:d4:7f:fd:
                    62:57:7d:d0:38:1c:46:06:60:15:b5:3d:20:84:0d:
                    3f:59:16:8e:c6:56:2f:9f:37:e1:3a:d3:1d:a1:36:
                    15:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:BB:6B:53:D3:9A:CC:0B:05:B8:E2:97:DE:B2:15:75:71:88:9D:6D
            X509v3 Authority Key Identifier:
                keyid:54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/n7trU9OazAsFuOKX3rIVdXGInW0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201115

    Signature Algorithm: sha256WithRSAEncryption
         64:43:1c:53:89:2e:63:04:ec:54:3b:be:2e:bb:91:e2:01:aa:
         13:64:26:e2:d7:d6:2b:e8:77:c7:7e:ba:1a:a7:4d:a8:48:be:
         aa:18:d1:b6:eb:54:2a:ee:19:8d:2c:76:6f:61:c9:b6:ef:81:
         a7:a7:49:e7:a6:3b:13:4b:24:29:02:49:4e:4c:74:09:31:b1:
         84:60:7d:91:43:47:3f:02:13:5f:3c:58:e0:3e:25:3f:3d:39:
         04:29:1e:cd:7b:28:18:2a:60:aa:4d:b9:24:48:b6:bb:d6:00:
         d8:e3:f9:cf:7e:69:2e:6e:f4:7a:ee:1e:07:16:48:06:bb:cb:
         38:39:a8:e0:ac:5d:3f:fd:8a:50:12:5c:16:50:3e:b5:26:0c:
         7e:63:06:b9:05:d3:e6:5f:b5:ea:34:00:e7:2d:72:53:2e:95:
         bf:a4:48:63:06:da:4b:92:2c:c2:c1:dc:b8:f0:a2:34:bb:f1:
         20:92:ad:f7:2b:2a:5e:5e:32:00:a9:f8:1c:78:4a:7c:a7:4d:
         cd:3a:3e:9c:4f:4d:b8:3f:70:53:05:04:1c:d6:de:a3:5e:dd:
         14:e2:ad:dd:99:67:f3:47:40:f7:2b:53:b2:fb:20:3b:78:51:
         69:fc:a1:bc:60:f7:b9:3f:f5:7d:be:85:bb:1c:38:65:bc:38:
         8b:95:a1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:14:42 2026 by rpki-client