Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/1-RS3CAUjad02YIbiVU1F5-819y0.asa
File:                     1-RS3CAUjad02YIbiVU1F5-819y0.asa (raw, json)
Hash identifier:          1BubvCrQ2zsMtupe0NwYXlBK8aNp/ATG1ilUxTldYBs=
Subject key identifier:   F9:14:B7:08:05:23:69:DD:36:60:86:E2:55:4D:45:E7:EF:35:F7:2D
Certificate issuer:       /CN=4614ee344190197f543e71cd6f4e4f0e27515d5d
Certificate serial:       019F236922135C00A25EA23E709529E7DD41
Authority key identifier: 46:14:EE:34:41:90:19:7F:54:3E:71:CD:6F:4E:4F:0E:27:51:5D:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RhTuNEGQGX9UPnHNb05PDidRXV0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/1-RS3CAUjad02YIbiVU1F5-819y0.asa
Signing time:             Thu 02 Jul 2026 15:18:40 +0000
ASPA not before:          Thu 02 Jul 2026 15:18:40 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            205122
Providers:                AS: 1299
                          AS: 2914
                          AS: 33185
                          AS: 35280
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/RhTuNEGQGX9UPnHNb05PDidRXV0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/RhTuNEGQGX9UPnHNb05PDidRXV0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RhTuNEGQGX9UPnHNb05PDidRXV0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:69:22:13:5c:00:a2:5e:a2:3e:70:95:29:e7:dd:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4614ee344190197f543e71cd6f4e4f0e27515d5d
        Validity
            Not Before: Jul  2 15:18:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f914b708052369dd366086e2554d45e7ef35f72d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fd:f2:5f:70:32:f9:74:4f:12:05:d2:96:75:
                    3b:a7:8a:e0:74:91:a1:3e:0e:25:ab:8f:ed:73:c8:
                    d8:cf:6e:73:9c:f1:2d:63:c7:e2:c2:8e:f3:40:03:
                    46:e3:af:5c:91:40:23:f6:91:a5:62:77:8a:22:a3:
                    70:92:7b:08:cd:70:f7:16:cc:69:94:68:5b:06:d5:
                    9d:02:c4:a8:0c:37:0e:b7:27:b7:73:4e:d1:fe:61:
                    25:93:6a:b6:04:af:f8:2c:13:27:98:a1:94:b2:79:
                    74:71:f9:a1:89:0d:82:e9:89:18:6a:34:07:8d:f5:
                    41:c8:c0:33:f6:03:43:3b:13:9c:4e:b6:1e:04:84:
                    a8:a3:56:31:c0:1b:2f:87:ab:8e:ad:29:20:01:d6:
                    49:27:86:15:96:59:d2:47:d5:c2:2f:b4:31:ab:b3:
                    0d:84:d2:dc:24:47:ee:c6:e3:df:86:42:34:15:9e:
                    cf:8d:45:88:bd:0b:39:2b:11:38:ed:0b:b4:ba:af:
                    d3:aa:61:9c:41:de:a5:5d:9f:e8:c8:95:af:1b:09:
                    43:6e:de:e6:a0:9a:ac:c9:0d:2b:eb:db:4f:dd:c8:
                    c6:84:cb:22:fc:6c:43:75:c0:2e:22:22:cc:b2:c7:
                    91:99:b5:ab:d6:9f:ea:a8:4f:2f:dc:78:a2:6e:91:
                    ab:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:14:B7:08:05:23:69:DD:36:60:86:E2:55:4D:45:E7:EF:35:F7:2D
            X509v3 Authority Key Identifier:
                keyid:46:14:EE:34:41:90:19:7F:54:3E:71:CD:6F:4E:4F:0E:27:51:5D:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhTuNEGQGX9UPnHNb05PDidRXV0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/1-RS3CAUjad02YIbiVU1F5-819y0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/RhTuNEGQGX9UPnHNb05PDidRXV0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205122

    Signature Algorithm: sha256WithRSAEncryption
         c3:19:67:a7:f0:f5:2e:0d:27:bb:1a:88:10:09:70:e7:34:18:
         7c:b8:fe:bd:a8:8c:ce:06:27:8d:0e:ce:55:48:26:76:4e:e1:
         a0:d6:ce:3f:ff:ee:7d:19:b3:a5:e5:9e:a3:52:1d:b8:80:6a:
         26:1a:36:aa:c7:35:60:57:b3:6c:dd:7d:21:8f:9d:60:08:72:
         56:da:c5:d6:c3:6d:eb:a2:da:b5:54:e8:12:85:c7:06:7f:23:
         58:73:97:86:d8:7c:59:61:82:66:71:6f:c4:46:40:cb:9f:99:
         ac:c2:b0:ad:82:a7:0f:5f:09:81:c0:3f:48:cf:77:d3:fb:c0:
         34:e0:97:d2:1e:31:0d:dc:8e:04:c0:2a:a6:90:08:80:a9:e2:
         98:48:6b:73:47:3b:25:13:ab:94:16:5b:dc:a7:92:d3:42:8c:
         ad:63:e5:9b:ed:56:a7:3d:5d:b9:c5:8d:80:45:17:b0:5f:e3:
         8d:ec:1d:23:c8:f6:04:05:81:8d:9a:57:6c:66:92:76:7e:4c:
         67:29:cb:cf:ba:ad:3d:ff:3b:62:f1:16:19:67:a1:b5:b8:90:
         f8:5b:00:fe:4a:83:be:1a:1d:90:f0:1d:a2:f1:7e:1c:2f:ea:
         7d:89:37:2c:43:17:fe:db:81:d3:10:9a:e2:ca:59:cc:be:e5:
         cb:68:3d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:37 2026 by rpki-client