Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/c7-vm7ayWM43onBxMirp6xh4ses.asa
File:                     c7-vm7ayWM43onBxMirp6xh4ses.asa (raw, json)
Hash identifier:          Yn9xC9hv7PLljqa8pOnthNeGkVr/8TT8ccV2WmSMABI=
Subject key identifier:   73:BF:AF:9B:B6:B2:58:CE:37:A2:70:71:32:2A:E9:EB:18:78:B1:EB
Certificate issuer:       /CN=f5d6b1d90ed4bf1651aa2270e6ecbac2d87922ac
Certificate serial:       019DFDF0FE5A633D685FC06B79E9BCBE6A7F
Authority key identifier: F5:D6:B1:D9:0E:D4:BF:16:51:AA:22:70:E6:EC:BA:C2:D8:79:22:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9dax2Q7UvxZRqiJw5uy6wth5Iqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/c7-vm7ayWM43onBxMirp6xh4ses.asa
Signing time:             Wed 06 May 2026 15:38:42 +0000
ASPA not before:          Wed 06 May 2026 15:38:42 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            216041
Providers:                AS: 8881
                          AS: 47277
                          AS: 50629
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9dax2Q7UvxZRqiJw5uy6wth5Iqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:fd:f0:fe:5a:63:3d:68:5f:c0:6b:79:e9:bc:be:6a:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5d6b1d90ed4bf1651aa2270e6ecbac2d87922ac
        Validity
            Not Before: May  6 15:38:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=73bfaf9bb6b258ce37a27071322ae9eb1878b1eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7d:89:2f:3a:b5:bd:c3:ea:10:9c:ba:c4:ed:
                    5d:3f:95:38:1e:45:56:2b:d7:88:b2:6c:e5:b5:c1:
                    e8:8a:a3:57:be:1c:12:97:2f:40:c8:4e:3d:1a:18:
                    3d:10:1d:fa:76:08:af:3a:ab:ed:4a:5f:f4:9a:6f:
                    4c:04:6d:74:e0:d5:b8:6b:3d:22:00:7c:1e:4c:42:
                    3c:1a:09:92:da:49:d7:a9:b7:94:1f:09:55:41:f2:
                    19:c1:61:27:90:38:f8:a7:d2:35:f8:77:a7:fe:e2:
                    bf:32:23:b1:92:80:af:ab:e3:ab:9c:3a:a7:9a:5c:
                    9e:ad:bc:15:a2:ca:61:c5:ca:b0:04:67:96:c0:05:
                    3d:dc:a1:bb:8e:9e:f1:e7:0a:d3:43:b4:7f:18:4f:
                    25:05:e2:3c:7d:3b:b0:ee:b6:6a:2b:76:2c:30:7e:
                    68:d7:cd:7a:6c:11:fb:bc:a2:b8:23:01:85:b9:89:
                    6f:5d:f3:af:55:93:51:de:be:06:58:1f:2e:f6:bb:
                    59:b8:e1:0c:a7:59:6c:d6:0e:dc:71:6a:73:8e:9b:
                    97:79:b9:81:bf:b7:52:0a:14:76:21:8b:b6:87:6e:
                    1d:a0:7e:ec:ee:54:c4:e6:f6:24:1c:a8:7a:80:07:
                    45:af:b6:b5:a2:e8:db:30:2b:74:46:d9:3c:0b:8d:
                    1a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:BF:AF:9B:B6:B2:58:CE:37:A2:70:71:32:2A:E9:EB:18:78:B1:EB
            X509v3 Authority Key Identifier:
                keyid:F5:D6:B1:D9:0E:D4:BF:16:51:AA:22:70:E6:EC:BA:C2:D8:79:22:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dax2Q7UvxZRqiJw5uy6wth5Iqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/c7-vm7ayWM43onBxMirp6xh4ses.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216041

    Signature Algorithm: sha256WithRSAEncryption
         6d:ae:99:6e:4e:16:08:52:76:af:62:03:93:22:09:92:95:e4:
         3a:e6:e7:a5:2a:14:2b:2f:01:ac:02:a5:a7:c4:f8:07:bd:21:
         82:f2:2b:b6:cb:fd:7e:22:ba:9a:5b:dd:fe:ab:d4:b6:22:ae:
         45:3c:82:cd:10:c8:5e:0b:53:1b:22:39:57:36:73:e6:b8:38:
         4e:60:b9:97:cf:da:17:54:46:f5:15:ae:90:7a:f5:5e:61:5f:
         fb:7c:a1:27:84:90:71:b3:f1:45:e6:43:6b:d7:28:be:c8:fa:
         6f:b4:7b:13:86:d0:d6:6b:65:9d:07:03:cd:fb:d5:fd:92:63:
         63:22:cb:b1:f0:1d:0f:57:4c:62:bf:bc:4f:d7:89:8c:21:bc:
         eb:4a:25:7b:f0:d4:2e:00:17:11:4b:84:90:41:d8:fe:ee:41:
         ff:72:22:45:26:29:c5:f2:11:a6:a0:1f:ef:14:7d:72:56:4c:
         1f:b8:b4:99:72:ca:87:b9:f7:e2:3a:ad:45:dc:8a:62:44:e2:
         b5:b8:7e:68:dc:c0:12:40:c0:94:ae:1f:66:89:f8:a8:11:0d:
         39:22:fd:88:cf:b8:1d:c8:67:97:49:0e:23:bb:ef:6b:e9:22:
         c7:bb:fb:04:f5:23:8f:c7:26:46:02:55:54:6e:cd:6c:2a:97:
         2f:58:fc:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:24:18 2026 by rpki-client