Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/9U2gzAHMQAtRK1gQNHxjr09eebA.asa
File:                     9U2gzAHMQAtRK1gQNHxjr09eebA.asa (raw, json)
Hash identifier:          AXuT5FLBEMvZmsQmdwNr+acvh8DbWZJW923I5JZgo+o=
Subject key identifier:   F5:4D:A0:CC:01:CC:40:0B:51:2B:58:10:34:7C:63:AF:4F:5E:79:B0
Certificate issuer:       /CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Certificate serial:       019F190107ECBB27F836FBEF9D16CC4279B2
Authority key identifier: 6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/9U2gzAHMQAtRK1gQNHxjr09eebA.asa
Signing time:             Tue 30 Jun 2026 14:48:45 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:45 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            47527
Providers:                AS: 3223
                          AS: 3292
                          AS: 3308
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:07:ec:bb:27:f8:36:fb:ef:9d:16:cc:42:79:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
        Validity
            Not Before: Jun 30 14:48:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f54da0cc01cc400b512b5810347c63af4f5e79b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a9:a6:3b:23:01:73:24:4e:5a:c2:75:98:df:
                    70:70:e4:65:b5:02:b6:cf:da:98:9a:5b:a0:a4:2a:
                    4e:92:2a:0a:7c:33:f6:ee:99:07:59:d5:c0:5d:f2:
                    b1:8f:f1:1a:95:2e:15:14:dd:07:59:85:49:cd:c5:
                    e9:fb:c8:3b:15:5b:f9:85:7e:d6:d5:6d:40:6c:0d:
                    eb:26:3c:66:65:ca:ac:de:84:4d:7e:5f:fe:76:32:
                    f1:fd:c4:7a:22:35:25:ca:6f:e7:22:7d:2e:59:78:
                    84:12:27:b8:6f:7d:16:6c:12:ff:4e:0b:35:39:14:
                    ac:42:c3:75:8a:8f:5b:e9:27:26:f6:a8:2a:0a:0e:
                    e2:b0:3f:ab:32:13:3b:94:cd:96:2b:bb:cc:63:46:
                    84:11:e6:44:39:fc:6f:cf:59:f9:f9:d3:cb:5b:e9:
                    61:80:d3:fb:9f:a6:68:09:de:ff:00:d0:0c:54:b3:
                    e8:ad:9f:48:ce:39:87:a1:75:4c:5f:07:53:86:1f:
                    7c:63:02:33:90:9e:2c:a8:f5:90:f7:d3:a1:bf:a5:
                    28:dd:e9:fe:b9:ac:86:c8:93:0f:8e:c3:b5:eb:46:
                    f4:9e:cd:55:72:11:4a:c6:4a:08:64:5f:d9:a9:f3:
                    cb:62:36:05:b3:7f:b0:9b:75:70:a5:a0:4b:56:c2:
                    6b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:4D:A0:CC:01:CC:40:0B:51:2B:58:10:34:7C:63:AF:4F:5E:79:B0
            X509v3 Authority Key Identifier:
                keyid:6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/9U2gzAHMQAtRK1gQNHxjr09eebA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47527

    Signature Algorithm: sha256WithRSAEncryption
         10:e8:02:6c:00:69:c0:a9:73:5a:a5:e5:0b:ac:65:71:87:27:
         ae:a2:19:99:3b:3f:5d:8d:4c:83:ca:7c:9f:f5:04:d9:21:91:
         d2:fa:a3:bc:3e:7b:8d:e8:6b:9f:05:a8:10:e0:32:a2:f4:c8:
         d4:27:0f:d0:f4:18:ba:aa:7e:ef:96:f5:4c:8e:f1:d5:6f:8d:
         2a:98:6d:3f:af:cb:23:11:48:42:63:50:71:e5:f0:4a:74:14:
         aa:4b:19:71:33:b0:00:8f:34:07:c1:1e:c1:10:1b:37:00:b0:
         b2:d1:25:47:4f:49:b3:ce:28:35:9b:cd:fb:ee:19:9c:7b:86:
         9f:3a:3e:d8:97:49:61:ec:05:ca:38:8d:c9:a0:8a:3c:05:b5:
         b7:c6:cd:fe:62:4b:2f:ee:5e:94:0d:75:25:8b:f8:3d:ea:04:
         97:44:64:42:0b:ce:45:09:09:d0:0d:25:ed:24:27:01:12:82:
         e1:65:5e:75:bf:fe:87:1c:cf:53:d4:51:a4:92:b9:a3:45:af:
         47:fa:b5:a5:95:c7:39:a4:67:4b:27:64:50:a4:d8:b4:dd:3d:
         be:76:6a:4e:f1:7f:eb:ef:37:be:03:4a:24:bf:5d:dd:ad:ea:
         35:b0:69:06:c1:04:d1:d8:4e:73:1f:2a:59:d5:80:17:82:a6:
         90:5e:47:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:49:47 2026 by rpki-client