Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/od9igj5v7V0Kfnev8-CMqhUCNRc.asa
File:                     od9igj5v7V0Kfnev8-CMqhUCNRc.asa (raw, json)
Hash identifier:          LUunZpdTWKkS/76jaN+s9ShSo+KcgfzlH3gElWjZ7CQ=
Subject key identifier:   A1:DF:62:82:3E:6F:ED:5D:0A:7E:77:AF:F3:E0:8C:AA:15:02:35:17
Certificate issuer:       /CN=ee5b0d36a374ab35c436ee00c2ecaefbb2a35448
Certificate serial:       019F393293BE7F30BB530B3D2E8E19E5172E
Authority key identifier: EE:5B:0D:36:A3:74:AB:35:C4:36:EE:00:C2:EC:AE:FB:B2:A3:54:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7lsNNqN0qzXENu4Awuyu-7KjVEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/od9igj5v7V0Kfnev8-CMqhUCNRc.asa
Signing time:             Mon 06 Jul 2026 20:50:43 +0000
ASPA not before:          Mon 06 Jul 2026 20:50:43 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            206586
Providers:                AS: 20473
                          AS: 41051
                          AS: 204464
                          AS: 209533
                          AS: 213409
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7lsNNqN0qzXENu4Awuyu-7KjVEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:39:32:93:be:7f:30:bb:53:0b:3d:2e:8e:19:e5:17:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee5b0d36a374ab35c436ee00c2ecaefbb2a35448
        Validity
            Not Before: Jul  6 20:50:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a1df62823e6fed5d0a7e77aff3e08caa15023517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:72:68:af:8e:50:42:be:05:39:3c:40:5b:87:
                    78:cb:4a:1b:71:26:28:5d:ba:8a:3c:c4:d7:c6:f4:
                    22:10:16:b2:ed:b9:a5:11:4f:54:78:20:25:e6:27:
                    85:60:68:2f:8c:72:10:c8:c0:57:a6:b7:aa:59:fa:
                    21:8e:8b:7a:db:19:b0:f8:4c:50:a9:05:82:08:e5:
                    97:aa:34:e5:75:2e:aa:94:0c:6b:f8:ed:f8:eb:6a:
                    c1:b3:5e:c3:bd:34:ba:ee:0a:58:29:a2:a1:09:11:
                    b5:f1:8e:7d:40:fa:d7:3e:8f:50:34:72:0f:88:e4:
                    a0:6a:d8:61:52:f6:68:89:bb:f8:58:59:10:ac:0f:
                    db:e9:13:36:82:81:04:f3:ab:e5:e3:76:81:86:c4:
                    45:6e:88:53:44:21:ed:83:f1:98:c7:c0:6e:a1:f6:
                    5d:d1:68:28:50:b7:d4:ad:b6:72:ce:51:58:e5:20:
                    0f:89:71:ea:c4:4b:dc:f4:81:b1:3f:6e:71:58:ac:
                    94:ad:cc:7e:6c:2b:0f:6c:81:bb:bd:69:a7:cd:03:
                    0e:52:80:30:22:9f:1d:2c:b9:3b:e6:13:fa:7d:a2:
                    a7:66:dc:f9:f0:4a:e5:28:62:da:cd:8d:f2:8f:d9:
                    4e:b1:c7:cf:bd:ed:cc:99:32:ed:eb:6b:16:8e:bf:
                    d1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:DF:62:82:3E:6F:ED:5D:0A:7E:77:AF:F3:E0:8C:AA:15:02:35:17
            X509v3 Authority Key Identifier:
                keyid:EE:5B:0D:36:A3:74:AB:35:C4:36:EE:00:C2:EC:AE:FB:B2:A3:54:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7lsNNqN0qzXENu4Awuyu-7KjVEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/od9igj5v7V0Kfnev8-CMqhUCNRc.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206586

    Signature Algorithm: sha256WithRSAEncryption
         31:38:20:43:95:5a:db:1c:26:d1:dd:11:eb:f2:69:43:02:48:
         2b:45:76:a7:4b:41:fb:40:7e:ca:8b:eb:40:a4:47:18:05:bd:
         18:12:d8:e3:86:6b:7f:82:47:6a:27:1a:7b:d1:26:ce:d8:39:
         d0:2c:65:66:6a:04:93:ba:aa:d0:93:0a:80:89:8f:a2:21:b6:
         8e:86:f1:e2:d5:e3:32:92:86:aa:7a:04:c2:5b:71:da:4c:f5:
         c3:18:5c:43:68:a2:39:f8:78:fd:a9:63:71:bb:c7:3e:01:6d:
         65:2f:48:30:4b:21:3b:04:43:d1:05:12:d7:cd:aa:71:30:0a:
         c1:36:49:53:f9:3c:9a:c5:ae:6b:b3:e0:46:48:aa:ac:b3:56:
         15:55:fa:d6:18:1a:4a:0e:d7:ac:e2:8a:c2:7a:3c:59:aa:67:
         9b:28:1c:98:1b:d0:c9:00:60:02:64:e0:fb:97:3e:04:3e:c3:
         b9:44:4d:48:63:95:c7:c0:c9:fb:5b:c5:81:c7:bc:e7:cb:ff:
         10:ff:59:cf:b1:b0:7c:91:a0:e0:fe:c5:8f:d8:59:42:f6:5f:
         5a:37:59:08:40:cd:e3:ae:cd:d7:ad:eb:fb:75:fc:5b:ad:e3:
         f9:82:ec:f1:e7:b3:19:f4:d3:79:e4:8f:ab:22:10:3c:18:e1:
         04:8f:0a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:14:52 2026 by rpki-client