Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/rBXpLoVrhiXy-JREV2NzjR2UY38.asa
File:                     rBXpLoVrhiXy-JREV2NzjR2UY38.asa (raw, json)
Hash identifier:          GsaRbQpDhXgltgozlo4qGNxDK4tm/0jB1zECh/53A7w=
Subject key identifier:   AC:15:E9:2E:85:6B:86:25:F2:F8:94:44:57:63:73:8D:1D:94:63:7F
Certificate issuer:       /CN=2588b1b560f998eccd3a6eff40543b59204d67b8
Certificate serial:       019CF7F317BEAF67937977BBA69977BA8288
Authority key identifier: 25:88:B1:B5:60:F9:98:EC:CD:3A:6E:FF:40:54:3B:59:20:4D:67:B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/rBXpLoVrhiXy-JREV2NzjR2UY38.asa
Signing time:             Mon 16 Mar 2026 18:40:29 +0000
ASPA not before:          Mon 16 Mar 2026 18:40:29 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            198013
Providers:                AS: 174
                          AS: 3269
                          AS: 3302
                          AS: 30848
                          AS: 41327
                          AS: 197589
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 09:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:f7:f3:17:be:af:67:93:79:77:bb:a6:99:77:ba:82:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2588b1b560f998eccd3a6eff40543b59204d67b8
        Validity
            Not Before: Mar 16 18:40:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ac15e92e856b8625f2f894445763738d1d94637f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e7:ae:85:47:24:48:4b:67:39:b6:d8:1e:73:
                    09:2d:d1:a8:ab:a2:15:8b:45:3b:82:31:e6:78:25:
                    b4:bd:2d:ff:b6:2a:19:f5:d4:ea:18:7a:6e:66:51:
                    3e:ea:75:47:ae:c1:be:fc:87:97:f9:ff:b7:da:f0:
                    dc:09:f7:00:d7:f2:9b:55:8a:d0:c2:1a:bf:63:fb:
                    35:fa:70:79:3d:fd:d2:4b:87:ee:35:90:aa:98:fa:
                    ee:b1:e4:89:7f:fd:d2:ac:9f:ba:7d:67:20:03:7c:
                    95:17:c6:11:c7:b7:c2:b2:ad:2c:1f:28:63:66:26:
                    b3:dc:44:5b:f8:4a:4b:09:c2:60:5e:d5:74:59:20:
                    6d:8a:ae:6f:b3:78:ab:00:be:4f:f6:0e:d3:0a:9b:
                    0f:bd:5e:be:d7:e4:bf:7c:be:81:e9:a9:8b:3a:b6:
                    64:d0:ba:bd:09:aa:58:60:34:d2:ca:49:9f:4a:cf:
                    ce:75:f8:8f:b9:dd:a7:ab:61:19:26:1e:21:39:96:
                    11:0b:d1:50:17:b0:33:e6:09:61:74:4e:42:52:7d:
                    75:70:1f:6a:80:9e:78:79:43:55:ca:a9:c1:ef:a6:
                    8c:df:1b:a3:0e:47:4b:1c:49:34:c9:0b:8f:39:03:
                    81:e2:57:4c:a2:ca:db:53:de:b3:2f:01:00:f5:81:
                    54:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:15:E9:2E:85:6B:86:25:F2:F8:94:44:57:63:73:8D:1D:94:63:7F
            X509v3 Authority Key Identifier:
                keyid:25:88:B1:B5:60:F9:98:EC:CD:3A:6E:FF:40:54:3B:59:20:4D:67:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/rBXpLoVrhiXy-JREV2NzjR2UY38.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198013

    Signature Algorithm: sha256WithRSAEncryption
         ac:4e:a7:42:92:03:3c:ef:33:c6:c1:69:ce:22:a9:eb:2c:b7:
         d7:ab:30:f5:ee:06:ef:e6:5c:4f:dc:f9:76:c1:40:2f:1c:bf:
         e3:8d:c1:fe:a3:7d:a0:e5:c1:8e:0b:03:08:76:01:98:a2:fa:
         b4:12:3e:c7:f2:f7:bd:23:70:0c:33:a3:6d:df:8d:31:cb:ce:
         17:cf:e0:6b:72:3f:c4:d9:5b:b6:c9:62:70:a4:b9:d5:4c:8e:
         8e:01:e8:37:39:5c:74:1f:64:8c:92:67:a2:a2:b4:e0:46:42:
         05:eb:28:f1:91:26:6b:1c:b7:83:35:58:b6:a7:e6:49:b4:f6:
         7d:18:9c:99:23:ac:d9:0c:3b:2c:33:5b:61:81:4e:b6:0d:16:
         5e:2a:bb:28:cc:81:53:64:5c:4c:9f:b6:c3:3a:b4:dd:bc:ea:
         02:42:e9:dd:6d:a3:53:66:c0:8b:7a:37:57:ee:51:be:bb:de:
         f5:45:13:17:83:cd:ed:db:c6:8a:14:3a:86:6f:84:ad:79:c2:
         56:03:7e:b8:1d:95:8d:55:4b:c9:2e:a9:18:2f:ef:3b:e9:5d:
         f8:09:9a:e3:76:19:e6:07:5d:d6:56:17:8f:63:f0:43:db:0b:
         b4:b6:0c:7a:25:29:7c:4a:8a:48:6e:a4:ec:d7:6c:8e:c4:74:
         e6:24:48:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 20:06:44 2026 by rpki-client