Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/g2nNQ5VhHao4Apal56-pguzsiBg.asa
File:                     g2nNQ5VhHao4Apal56-pguzsiBg.asa (raw, json)
Hash identifier:          gNuWJZ3S7x7XLK2/IgqTwexYiw/r4lDYIjTdNxVRqcE=
Subject key identifier:   83:69:CD:43:95:61:1D:AA:38:02:96:A5:E7:AF:A9:82:EC:EC:88:18
Certificate issuer:       /CN=edb926f8c603aab79cb46a883bf632564a3faabf
Certificate serial:       019F190132D66D60064842C618B9E6474048
Authority key identifier: ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/g2nNQ5VhHao4Apal56-pguzsiBg.asa
Signing time:             Tue 30 Jun 2026 14:48:56 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:56 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            52011
Providers:                AS: 42695
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:32:d6:6d:60:06:48:42:c6:18:b9:e6:47:40:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edb926f8c603aab79cb46a883bf632564a3faabf
        Validity
            Not Before: Jun 30 14:48:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8369cd4395611daa380296a5e7afa982ecec8818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:01:9d:49:a4:ab:b9:0e:09:44:c6:59:fa:2e:
                    62:f6:09:97:96:d1:b3:00:22:f7:0b:d9:fc:05:9b:
                    3e:11:7a:53:f8:67:ad:9e:be:a7:ab:1d:a6:b8:d4:
                    b7:02:b3:a0:89:12:fb:42:e1:e2:f8:4b:fe:55:c4:
                    06:52:38:64:5e:90:95:2e:bc:0e:00:55:32:b7:ac:
                    30:d1:7e:37:b9:24:02:92:7e:39:21:89:ec:0c:0f:
                    af:7b:8e:d8:d6:8f:3e:63:8e:35:ce:84:4c:28:d3:
                    e2:76:4b:c2:65:b5:b3:a1:8b:fb:bd:2c:5b:75:36:
                    b4:5c:f2:09:c4:86:cf:cd:e6:16:a6:19:b6:56:df:
                    b9:aa:cd:6a:79:30:a2:0c:15:dc:c3:57:f6:99:51:
                    9c:07:2d:3f:b2:8c:66:75:d6:f2:52:c6:9f:81:b4:
                    04:a0:45:ea:bf:20:fd:8f:e5:f4:a9:02:d0:6f:ff:
                    7d:18:11:33:b4:fc:0a:8e:33:4a:88:a8:80:51:3c:
                    68:6e:cb:d8:56:f9:d9:7b:2d:84:22:32:5c:d9:db:
                    bd:7a:e3:00:04:c7:65:22:62:6a:56:75:09:5d:89:
                    ae:ee:2f:1e:dd:ff:c9:85:75:5c:8d:6e:b0:2e:f6:
                    2d:23:47:ca:44:d0:be:59:94:8e:ea:d7:52:07:ac:
                    1a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:69:CD:43:95:61:1D:AA:38:02:96:A5:E7:AF:A9:82:EC:EC:88:18
            X509v3 Authority Key Identifier:
                keyid:ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/g2nNQ5VhHao4Apal56-pguzsiBg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52011

    Signature Algorithm: sha256WithRSAEncryption
         7a:09:fe:28:1c:2b:00:17:1a:d2:6c:22:fb:eb:54:c6:ac:f9:
         1c:1e:a1:df:d5:84:bc:0e:5e:1d:8d:fa:d8:38:13:7e:35:12:
         bc:d4:44:91:b6:f6:49:a2:f8:77:ea:c6:0e:20:15:66:95:c4:
         c1:e8:ce:5c:53:0c:41:91:ab:16:1f:44:bd:be:d0:71:fd:46:
         c1:07:33:cf:5c:cf:d5:d2:45:5a:4a:54:9a:12:f1:37:ca:92:
         6c:13:e5:fe:5e:7c:d4:4f:aa:e0:a7:37:60:ec:5c:ce:48:1c:
         e3:a1:90:df:fb:bd:7b:72:cf:d6:32:08:28:50:39:bd:4d:28:
         1a:e2:8b:d8:09:20:a4:c5:31:ba:56:ec:0c:00:03:28:33:39:
         70:77:f6:b5:5a:2f:6f:a5:62:02:00:ce:b9:bb:2e:ad:c8:3a:
         c3:8d:2b:03:13:0c:82:4a:38:28:30:8d:0b:20:94:a5:fb:8b:
         e4:63:66:b5:2c:98:43:7b:a5:55:8a:bc:9c:88:60:2b:64:08:
         95:ea:84:da:e9:b4:b3:4e:59:d4:f2:7b:d3:47:38:46:23:0e:
         17:b7:6a:6d:78:a7:8a:db:57:b3:9c:7a:c1:a4:a6:de:4c:55:
         98:7f:cc:ea:b7:e5:6f:53:f3:60:90:cf:e6:56:56:3d:72:7a:
         89:3a:83:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:14:59 2026 by rpki-client