Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/91q60wwCACPLxzl7znvLX0BSGEA.asa
File:                     91q60wwCACPLxzl7znvLX0BSGEA.asa (raw, json)
Hash identifier:          iRTNLqZ5nQm9dIpVsbb2+nwe5a7JsQ+j5M/LXHBcYYk=
Subject key identifier:   F7:5A:BA:D3:0C:02:00:23:CB:C7:39:7B:CE:7B:CB:5F:40:52:18:40
Certificate issuer:       /CN=27df042824273fcff3f093d0f9b1dec6960bae6a
Certificate serial:       019F19014BF73A45B127A0464F99B3595631
Authority key identifier: 27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/91q60wwCACPLxzl7znvLX0BSGEA.asa
Signing time:             Tue 30 Jun 2026 14:49:03 +0000
ASPA not before:          Tue 30 Jun 2026 14:49:03 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            2605
Providers:                AS: 2852
                          AS: 6762
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:4b:f7:3a:45:b1:27:a0:46:4f:99:b3:59:56:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27df042824273fcff3f093d0f9b1dec6960bae6a
        Validity
            Not Before: Jun 30 14:49:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f75abad30c020023cbc7397bce7bcb5f40521840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ce:3d:e0:f0:bb:c2:0d:3c:47:11:ea:7f:bf:
                    ba:6b:cf:cb:a6:bf:06:2b:f2:96:5a:4f:c5:5a:8a:
                    ef:33:31:b3:11:44:06:a2:44:f2:f0:93:6f:b2:54:
                    9c:51:d5:43:13:90:9b:8f:9d:fd:5d:03:fa:75:86:
                    c4:bd:7d:35:b0:a3:62:a3:db:b5:11:2d:26:37:64:
                    34:72:9c:09:0f:04:ee:50:f7:7d:27:6a:35:c6:4e:
                    72:6b:2d:15:3d:23:35:ed:b6:d6:bc:10:63:e8:07:
                    87:d6:64:59:f0:17:71:86:4e:73:bf:74:8f:42:5a:
                    e5:2f:1d:43:59:51:28:ec:f2:b4:96:c2:a8:5b:89:
                    5d:ca:38:e3:b0:a6:8e:ef:e1:cd:82:29:23:43:f0:
                    df:aa:88:39:7a:03:f9:0b:b5:6e:a5:1e:3c:c6:2a:
                    a2:8c:87:1e:1d:44:9c:61:e0:c5:aa:8d:29:a9:ba:
                    3a:19:69:46:80:60:ce:dc:3a:2e:0c:9a:a3:84:67:
                    f0:bf:7a:a1:54:e0:ac:eb:6d:b6:54:15:75:7a:9e:
                    41:c3:e1:86:2d:e6:a7:e8:95:ac:a2:72:cc:2b:7e:
                    ce:e0:32:2f:cf:41:a3:52:67:72:82:a4:40:33:59:
                    58:e4:ad:f3:15:20:f4:4e:99:f6:f5:b8:22:6a:a3:
                    30:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:5A:BA:D3:0C:02:00:23:CB:C7:39:7B:CE:7B:CB:5F:40:52:18:40
            X509v3 Authority Key Identifier:
                keyid:27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/91q60wwCACPLxzl7znvLX0BSGEA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  2605

    Signature Algorithm: sha256WithRSAEncryption
         9b:2d:11:8f:0b:3e:df:30:95:aa:c8:e4:eb:a8:d9:8d:ef:a3:
         09:78:d5:15:f6:75:19:d6:c5:1d:b0:ec:fa:bb:d6:10:b5:2a:
         65:65:c1:25:70:84:3b:46:28:93:bf:c4:bb:61:08:bb:9e:d1:
         bd:63:6b:2c:28:7a:53:9e:3a:d0:66:4b:e1:c5:f9:46:73:23:
         f1:f9:11:a5:5f:fe:1d:51:e9:75:ce:b7:d1:13:20:b5:50:74:
         e7:34:68:13:2b:96:dc:59:e0:49:21:2c:eb:bc:40:ef:ae:27:
         4a:6b:3f:42:cc:bc:1e:9e:15:94:f2:73:1c:83:34:07:0b:70:
         ae:f6:65:9b:cc:c3:35:f8:84:8c:8b:6d:dd:7a:04:96:08:8d:
         8b:e4:98:32:e0:60:d2:77:ae:51:5f:d8:15:4a:63:d3:77:8c:
         c4:6a:3f:0a:4f:80:fd:d3:47:ca:e8:04:10:d9:dc:ee:72:e9:
         8a:88:e1:34:58:d4:69:43:a2:b1:ce:83:5e:d0:3e:ca:64:cc:
         4c:aa:63:73:38:d7:ef:62:31:1c:87:0d:8f:d6:78:3b:5d:79:
         c5:1f:d3:43:a3:64:0e:b2:38:5c:c5:42:77:47:fc:dd:37:ff:
         52:a4:dd:94:ee:aa:e1:10:e1:ee:aa:aa:6a:bb:cf:67:ac:20:
         07:3d:dd:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:04 2026 by rpki-client