Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/IhYNTZJgx4so4FpKD-81FjTRwo4.asa
File:                     IhYNTZJgx4so4FpKD-81FjTRwo4.asa (raw, json)
Hash identifier:          vZua4msDl0h1MxiF8H+5zAJBnwaqTE2G0oh9vNDYJ9w=
Subject key identifier:   22:16:0D:4D:92:60:C7:8B:28:E0:5A:4A:0F:EF:35:16:34:D1:C2:8E
Certificate issuer:       /CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Certificate serial:       019F1901153CEA303D728B4520647BD7E58B
Authority key identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/IhYNTZJgx4so4FpKD-81FjTRwo4.asa
Signing time:             Tue 30 Jun 2026 14:48:49 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:49 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            215250
Providers:                AS: 59645
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:15:3c:ea:30:3d:72:8b:45:20:64:7b:d7:e5:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
        Validity
            Not Before: Jun 30 14:48:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=22160d4d9260c78b28e05a4a0fef351634d1c28e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6e:22:ee:01:89:cf:3c:6a:e7:5d:e2:9d:25:
                    8c:23:20:53:6d:15:20:ce:b7:63:7a:4a:5d:34:a5:
                    e1:3f:c4:ed:0b:40:4f:2a:81:d3:dd:a0:c0:9d:97:
                    56:87:b5:2c:7e:5d:28:9c:e4:e5:a7:d0:0d:15:50:
                    8e:55:78:d4:47:7c:e1:77:b9:f7:6e:ee:a6:8f:a3:
                    68:81:58:d8:07:58:d3:2d:20:ac:23:e9:a4:8b:4d:
                    a4:16:15:86:c9:92:49:c0:d0:2d:2b:f9:ef:78:88:
                    e0:4e:fc:9a:7e:14:92:15:7b:9a:95:ad:c5:88:ef:
                    ff:0d:8d:41:97:8b:91:82:9a:a0:60:7f:db:8e:de:
                    48:a5:9f:9d:cd:56:47:fe:5e:3e:98:fc:48:c2:94:
                    ef:b1:e0:9a:82:cd:4e:b4:3d:4b:a4:84:b9:eb:9e:
                    12:40:a0:51:fe:f0:fb:ac:3c:93:22:3c:71:5e:27:
                    b4:de:f0:a8:b9:6f:26:5d:37:3b:d8:c8:ba:b0:5e:
                    15:ab:fb:b9:20:7a:ad:61:f2:01:0f:fb:10:7a:9a:
                    8e:6a:a9:24:eb:21:dd:46:2a:c8:6e:b2:b9:53:5f:
                    b9:3d:27:a6:f8:f4:18:a5:f6:6c:48:74:74:b3:dd:
                    6e:34:be:57:90:d4:53:27:60:6f:5b:3e:2a:9a:9e:
                    2a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:16:0D:4D:92:60:C7:8B:28:E0:5A:4A:0F:EF:35:16:34:D1:C2:8E
            X509v3 Authority Key Identifier:
                keyid:C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/IhYNTZJgx4so4FpKD-81FjTRwo4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215250

    Signature Algorithm: sha256WithRSAEncryption
         1d:f1:3d:36:30:5b:94:08:be:e8:86:fd:0f:fc:94:3c:37:4e:
         54:66:0b:38:94:e8:32:08:cb:bb:3b:42:72:b7:ce:8e:0a:84:
         65:d6:30:4f:a3:40:2f:49:16:09:47:0e:ad:6b:7a:b3:57:e8:
         ab:11:b5:6d:3e:50:59:0c:cf:95:45:d2:bd:ea:b1:c2:74:1e:
         a2:eb:f6:14:5e:5e:5b:bd:47:ea:ce:03:cb:7f:7d:f2:30:8f:
         c4:44:7b:8c:ed:ed:db:56:66:76:01:d6:94:15:02:38:76:c0:
         ee:be:ba:24:90:f1:13:d2:c3:d7:df:42:66:9d:93:fc:37:75:
         4b:9e:60:be:79:54:a4:83:0f:1e:c0:33:d6:70:57:c5:3a:fd:
         80:7c:c7:fe:cf:ed:e1:99:20:82:8e:96:7b:c6:94:3b:36:da:
         57:ff:44:f1:74:b0:bc:6a:52:0d:f6:66:bb:36:12:bb:0f:b7:
         f3:f2:62:96:6f:ef:1a:b6:0a:5b:a6:9f:15:4b:d8:2c:fb:f5:
         7c:cd:16:aa:a4:a1:63:5d:a9:a1:fc:9c:d9:c4:bd:4c:b4:bd:
         60:4f:1e:56:38:5e:23:e7:8a:3f:13:24:c6:21:a4:f1:99:fc:
         82:29:50:9c:52:9e:0e:81:3c:6d:cf:51:73:8b:47:2d:38:f2:
         33:ec:81:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:15:14 2026 by rpki-client