Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/7clbtE8xwhadRQ3A3fwwc0B7Xx8.asa
File:                     7clbtE8xwhadRQ3A3fwwc0B7Xx8.asa (raw, json)
Hash identifier:          NSE+naftLaacIKnlx//uMGVJTg2CXO0d6h3CTsIyW90=
Subject key identifier:   ED:C9:5B:B4:4F:31:C2:16:9D:45:0D:C0:DD:FC:30:73:40:7B:5F:1F
Certificate issuer:       /CN=ae800ede833b86c48ce3705567068eb90724b08d
Certificate serial:       019D0627916D68E5DF1576EF562193EBFC32
Authority key identifier: AE:80:0E:DE:83:3B:86:C4:8C:E3:70:55:67:06:8E:B9:07:24:B0:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/roAO3oM7hsSM43BVZwaOuQcksI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/7clbtE8xwhadRQ3A3fwwc0B7Xx8.asa
Signing time:             Thu 19 Mar 2026 12:52:29 +0000
ASPA not before:          Thu 19 Mar 2026 12:52:29 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            201616
Providers:                AS: 8283
                          AS: 39351
                          AS: 41051
                          AS: 44684
                          AS: 48070
                          AS: 212396
                          AS: 212635
                          AS: 215638
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/roAO3oM7hsSM43BVZwaOuQcksI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 12:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:06:27:91:6d:68:e5:df:15:76:ef:56:21:93:eb:fc:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae800ede833b86c48ce3705567068eb90724b08d
        Validity
            Not Before: Mar 19 12:52:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=edc95bb44f31c2169d450dc0ddfc3073407b5f1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6b:8d:c1:96:47:f4:48:54:84:34:94:9b:95:
                    b1:8c:f8:54:3a:e0:8d:cc:18:34:c7:d8:66:7e:26:
                    05:05:d7:e9:3e:f6:a1:db:98:9d:0c:2d:d8:da:31:
                    28:0f:77:fc:e7:ba:52:df:e9:f8:56:8c:8e:c8:14:
                    4e:de:bd:79:7d:ac:6f:8d:2b:4b:d7:75:02:65:77:
                    0e:53:f0:d3:0d:32:e3:b9:01:5b:d0:e2:30:51:ff:
                    8a:39:db:af:b5:ad:d7:e1:71:5d:ee:b6:50:83:76:
                    17:1e:f7:94:a3:72:11:36:af:8f:b5:05:ef:1f:c2:
                    5c:e1:93:d6:6f:36:77:28:43:b1:a5:d8:1a:b5:8f:
                    c3:c4:22:a7:ac:6f:aa:8d:2e:57:bb:97:99:8d:f0:
                    eb:36:ca:8d:cf:bc:08:3d:87:8a:5b:5d:27:33:56:
                    01:3e:bd:8b:1d:d2:0b:6a:f3:c6:3f:7d:95:ce:d7:
                    0a:9d:68:8c:09:fe:d3:ec:ae:20:bc:87:da:f8:b6:
                    3d:dd:9c:8b:ab:ab:c7:da:97:68:58:3f:66:8e:c6:
                    6c:cf:e8:5b:f3:5d:ce:3d:8b:dd:77:32:2a:ea:52:
                    16:f3:42:6b:9d:b1:94:1f:6e:cf:92:f4:6b:1b:a2:
                    32:e2:8f:08:5a:e8:0d:62:2f:2e:87:c1:7b:b2:69:
                    a6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C9:5B:B4:4F:31:C2:16:9D:45:0D:C0:DD:FC:30:73:40:7B:5F:1F
            X509v3 Authority Key Identifier:
                keyid:AE:80:0E:DE:83:3B:86:C4:8C:E3:70:55:67:06:8E:B9:07:24:B0:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roAO3oM7hsSM43BVZwaOuQcksI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/7clbtE8xwhadRQ3A3fwwc0B7Xx8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201616

    Signature Algorithm: sha256WithRSAEncryption
         25:46:3b:db:c0:6b:6a:b7:bd:ea:cb:30:cd:11:42:5d:d3:56:
         10:39:35:ff:b1:6f:96:a5:12:92:1b:f9:e7:42:af:76:6e:95:
         3c:a4:83:dd:80:fc:46:2d:34:5f:e1:01:7d:f5:7a:d5:51:2e:
         9e:95:dd:d2:fa:7d:59:e3:4e:65:53:68:c8:a1:79:5d:a6:cc:
         50:16:99:8f:07:2e:80:f0:b1:d0:25:15:1f:4e:c0:a6:fa:e3:
         d7:66:28:0b:60:22:fc:8d:d7:81:b8:4a:bc:a1:1d:78:88:fd:
         9a:e0:96:3a:45:30:51:70:2d:b8:91:cd:cf:7b:e0:85:ed:9a:
         05:22:2c:30:d5:76:15:aa:cb:0b:c1:8b:8e:8b:39:6d:92:75:
         95:31:1f:45:31:6e:9f:c3:7d:2a:39:7c:4e:ff:57:2a:d6:0c:
         3c:95:d7:6e:c8:8d:19:ab:a2:2f:e6:6b:ce:5c:e8:fe:e9:03:
         e3:59:34:56:cb:16:37:48:3d:9c:de:62:05:02:73:0a:10:02:
         c9:86:61:d5:6c:69:55:2f:e9:05:de:e2:8e:9d:94:55:77:04:
         4a:90:e1:eb:ff:92:13:6d:c7:42:78:fa:e5:50:d2:45:22:67:
         3f:8b:c5:9f:6e:de:62:90:59:30:30:49:a3:dc:63:8e:d4:30:
         a9:92:ca:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 20:06:51 2026 by rpki-client