Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/gELtUXmcMpXkfU-ruzwBQq4A7Jw.asa
File:                     gELtUXmcMpXkfU-ruzwBQq4A7Jw.asa (raw, json)
Hash identifier:          24wkmPQWoqZNRgCVS5rExhMXF8yP0+BcQiBXM5iYW9Q=
Subject key identifier:   80:42:ED:51:79:9C:32:95:E4:7D:4F:AB:BB:3C:01:42:AE:00:EC:9C
Certificate issuer:       /CN=0285ecfe882a02a1950014524833326c9ed5d03d
Certificate serial:       019F2368AF786A8DB475271F4FFDAE705536
Authority key identifier: 02:85:EC:FE:88:2A:02:A1:95:00:14:52:48:33:32:6C:9E:D5:D0:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AoXs_ogqAqGVABRSSDMybJ7V0D0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/gELtUXmcMpXkfU-ruzwBQq4A7Jw.asa
Signing time:             Thu 02 Jul 2026 15:18:11 +0000
ASPA not before:          Thu 02 Jul 2026 15:18:11 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            202562
Providers:                AS: 6939
                          AS: 12186
                          AS: 42615
                          AS: 51088
                          AS: 58299
                          AS: 200365
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/AoXs_ogqAqGVABRSSDMybJ7V0D0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/AoXs_ogqAqGVABRSSDMybJ7V0D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AoXs_ogqAqGVABRSSDMybJ7V0D0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:68:af:78:6a:8d:b4:75:27:1f:4f:fd:ae:70:55:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0285ecfe882a02a1950014524833326c9ed5d03d
        Validity
            Not Before: Jul  2 15:18:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8042ed51799c3295e47d4fabbb3c0142ae00ec9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a0:a1:bb:f4:66:9b:28:dc:a2:15:fc:88:ad:
                    3c:77:f4:1c:2a:d6:bb:74:81:1c:69:ad:d2:31:5a:
                    54:a7:d6:b9:4b:11:a4:1a:84:75:ef:48:33:2b:b2:
                    33:10:d0:90:1f:c2:82:25:f5:9b:8a:8f:31:ff:b0:
                    a4:5e:56:98:32:00:47:a6:70:77:4c:7e:24:43:bc:
                    3e:c9:98:6e:e5:67:8a:51:47:be:5b:2b:7e:b9:85:
                    44:38:9e:d4:c2:b1:f4:47:89:2c:c9:9b:8a:d6:4d:
                    35:46:e2:8f:3f:3f:95:78:ea:a6:ce:88:aa:94:6d:
                    00:00:e8:72:20:5d:ad:fb:79:78:71:03:42:9b:3f:
                    43:28:db:43:56:ee:e4:d4:32:ce:8a:a3:fe:ac:7f:
                    04:03:66:a3:66:5a:5b:ef:a7:89:7f:e0:17:fc:9a:
                    9f:0e:67:5a:aa:c4:4e:60:22:84:ed:2d:49:27:32:
                    95:bd:15:b6:4a:30:9b:be:4a:da:bc:9a:8b:fc:f9:
                    df:45:c2:cf:79:70:cf:49:5a:a5:2b:86:6c:d7:e0:
                    ff:36:b0:62:bc:05:86:ce:da:79:e1:df:85:ce:00:
                    27:5b:81:9e:58:a3:4b:0e:0c:64:5f:d7:01:cd:b3:
                    e0:ab:6f:b0:8b:9c:46:05:d1:d2:d9:2e:87:5d:10:
                    c2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:42:ED:51:79:9C:32:95:E4:7D:4F:AB:BB:3C:01:42:AE:00:EC:9C
            X509v3 Authority Key Identifier:
                keyid:02:85:EC:FE:88:2A:02:A1:95:00:14:52:48:33:32:6C:9E:D5:D0:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoXs_ogqAqGVABRSSDMybJ7V0D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/gELtUXmcMpXkfU-ruzwBQq4A7Jw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/AoXs_ogqAqGVABRSSDMybJ7V0D0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202562

    Signature Algorithm: sha256WithRSAEncryption
         1b:06:05:dd:95:24:bc:15:fc:e0:cc:a0:b9:b4:af:14:31:d0:
         2f:53:b7:b0:29:50:65:b4:09:af:c3:29:86:60:6d:df:16:4b:
         ee:59:83:6d:96:0f:85:ea:fa:52:b3:d8:b7:34:5e:29:37:3e:
         56:ac:2c:3f:af:47:22:ac:84:e0:cd:b2:f0:73:10:eb:ce:f3:
         f6:6e:0a:52:31:49:e0:e2:d2:5f:45:97:76:02:60:ab:d9:5e:
         ef:ea:d2:f8:3f:6d:55:25:6c:d9:af:58:69:c1:98:2e:02:0a:
         c7:2f:22:c6:e0:68:2a:bf:8f:50:4c:94:59:f5:8a:2f:6d:e2:
         4d:c6:e6:8f:4c:16:60:2b:4d:b9:d7:3f:ec:94:d6:dc:91:b0:
         ad:f3:95:e0:87:4b:f1:2a:a2:ee:dc:d4:23:b1:c8:9a:1d:e0:
         7c:65:4c:52:14:af:89:bb:60:7f:b5:ec:c7:e2:15:db:00:50:
         e1:bd:ce:b9:dc:4e:12:6a:13:b9:30:58:ad:d3:5f:c5:ca:4b:
         ed:eb:fb:c3:71:ff:52:a6:63:b8:8d:56:d1:87:9f:2c:06:dc:
         6f:fc:6c:11:bf:e9:aa:03:c4:d2:a8:9c:e4:9f:da:94:89:ef:
         1e:80:77:1f:86:f5:7a:12:a1:6e:2d:5d:46:22:f2:99:33:3d:
         51:54:12:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:15:04 2026 by rpki-client