Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/57092c-9de8-46e1-aa43-91cd8c936924/1/BG9Hu9jLmCjA4BBi3hGmd-3DS2w.asa
File:                     BG9Hu9jLmCjA4BBi3hGmd-3DS2w.asa (raw, json)
Hash identifier:          uSyPZI0IqhvZuKQPYBOk/ziXElw5bf8paV7OKILbWQo=
Subject key identifier:   04:6F:47:BB:D8:CB:98:28:C0:E0:10:62:DE:11:A6:77:ED:C3:4B:6C
Certificate issuer:       /CN=03caf113192187a4485f2e2dc0ecc8b76642494f
Certificate serial:       019F198AB3285B1388D6A4FDFB8607706584
Authority key identifier: 03:CA:F1:13:19:21:87:A4:48:5F:2E:2D:C0:EC:C8:B7:66:42:49:4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8rxExkhh6RIXy4twOzIt2ZCSU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/57092c-9de8-46e1-aa43-91cd8c936924/1/BG9Hu9jLmCjA4BBi3hGmd-3DS2w.asa
Signing time:             Tue 30 Jun 2026 17:19:07 +0000
ASPA not before:          Tue 30 Jun 2026 17:19:07 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            219308
Providers:                AS: 6517
                          AS: 401833
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/57092c-9de8-46e1-aa43-91cd8c936924/1/A8rxExkhh6RIXy4twOzIt2ZCSU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/57092c-9de8-46e1-aa43-91cd8c936924/1/A8rxExkhh6RIXy4twOzIt2ZCSU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A8rxExkhh6RIXy4twOzIt2ZCSU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:8a:b3:28:5b:13:88:d6:a4:fd:fb:86:07:70:65:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03caf113192187a4485f2e2dc0ecc8b76642494f
        Validity
            Not Before: Jun 30 17:19:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=046f47bbd8cb9828c0e01062de11a677edc34b6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b0:20:b9:11:4c:f8:2a:d8:c6:69:aa:e5:9b:
                    3c:9b:73:8a:de:8e:ca:4b:78:e4:78:27:61:62:ef:
                    aa:36:a2:74:80:9a:b1:8a:3c:b1:69:01:95:2a:a9:
                    7f:a9:a6:6a:cc:6a:5c:af:c8:1c:8c:75:05:05:1f:
                    7c:3d:d0:21:9b:a0:a4:4a:65:2a:43:54:82:5c:1a:
                    b7:06:88:91:be:28:6c:11:d8:bf:32:b6:ef:bc:8c:
                    10:fb:e2:df:73:e9:11:26:99:48:13:35:00:66:86:
                    a6:49:f8:25:f7:f3:d7:0e:a3:4b:f4:c5:95:cc:16:
                    f8:2a:91:ea:b2:9b:10:67:27:87:c4:d2:85:08:7b:
                    dc:56:00:e3:58:53:67:cb:a6:a9:1e:88:5c:db:ee:
                    70:18:df:d0:73:74:be:89:0a:40:b6:14:57:50:7c:
                    eb:a1:a3:03:23:7e:e6:13:39:20:2f:f6:55:a7:b9:
                    a1:37:c0:86:06:6b:5e:14:f9:d8:bd:4b:d1:75:30:
                    b1:02:0a:de:50:04:46:10:bf:26:a7:1a:f0:93:f8:
                    c6:ff:2b:7e:bf:32:ba:9e:72:0b:f8:8b:b9:c3:47:
                    4c:ac:51:35:ea:97:87:e7:c4:3d:fc:47:6b:1f:cf:
                    b4:f0:0b:cf:83:6b:aa:41:50:96:7e:39:c2:23:fa:
                    51:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:6F:47:BB:D8:CB:98:28:C0:E0:10:62:DE:11:A6:77:ED:C3:4B:6C
            X509v3 Authority Key Identifier:
                keyid:03:CA:F1:13:19:21:87:A4:48:5F:2E:2D:C0:EC:C8:B7:66:42:49:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8rxExkhh6RIXy4twOzIt2ZCSU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/57092c-9de8-46e1-aa43-91cd8c936924/1/BG9Hu9jLmCjA4BBi3hGmd-3DS2w.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/57092c-9de8-46e1-aa43-91cd8c936924/1/A8rxExkhh6RIXy4twOzIt2ZCSU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  219308

    Signature Algorithm: sha256WithRSAEncryption
         74:19:ea:48:e0:3a:59:62:ed:8c:38:67:9d:6d:bd:be:00:11:
         45:51:84:6e:3a:5c:23:ca:04:1a:d3:44:61:d7:81:28:b1:86:
         dc:f6:0e:ad:74:67:27:8d:5a:0c:d5:bd:3d:ae:38:0e:be:15:
         0d:cd:fa:a3:51:6b:d6:1f:5d:03:e8:13:a1:b7:48:7e:2e:7e:
         9e:99:79:04:7c:25:35:d7:1c:7a:56:f4:67:d8:df:fc:c2:18:
         49:e4:57:28:d4:e5:44:ae:e3:8e:89:b4:43:67:59:d4:a3:ad:
         9f:fc:49:c9:44:05:2d:46:95:f8:dc:1a:d1:1f:0a:b2:63:19:
         dd:0d:ce:37:ee:f0:57:9c:99:1e:46:a0:bf:32:0a:67:33:b5:
         65:60:1f:75:29:8a:02:a6:2c:f8:80:92:07:1e:b8:92:f6:c2:
         7e:55:a2:f7:64:29:ba:31:df:c0:a6:66:24:36:5c:8e:82:31:
         93:cd:ae:f2:2d:d5:1f:23:33:6a:99:71:39:05:fe:8e:58:22:
         96:7a:23:e8:de:2b:b9:03:10:78:75:d9:f0:66:c7:8b:fb:de:
         5a:f6:4b:a7:99:49:b0:de:d2:a9:cd:db:cb:d6:11:7b:ec:eb:
         85:17:5f:90:3b:3b:17:c3:b3:29:2d:f6:7d:a1:10:5d:a3:cc:
         16:c6:b8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:00:08 2026 by rpki-client