Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/b370c2-d46b-47b5-af28-645680e92fd4/1/g3EmADklwdN8SKQpyrRDpqOQn-A.asa
File:                     g3EmADklwdN8SKQpyrRDpqOQn-A.asa (raw, json)
Hash identifier:          XhAeshwtF1WxC0VdPxr/7VnAsSO7+obprfhUQB/R5ms=
Subject key identifier:   83:71:26:00:39:25:C1:D3:7C:48:A4:29:CA:B4:43:A6:A3:90:9F:E0
Certificate issuer:       /CN=028b020773713b2c53d068e342e93fc7aadfaee2
Certificate serial:       01A0246228C40A9D320005BBE6B689F3C5CE
Authority key identifier: 02:8B:02:07:73:71:3B:2C:53:D0:68:E3:42:E9:3F:C7:AA:DF:AE:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AosCB3NxOyxT0GjjQuk_x6rfruI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/b370c2-d46b-47b5-af28-645680e92fd4/1/g3EmADklwdN8SKQpyrRDpqOQn-A.asa
Signing time:             Fri 21 Aug 2026 12:53:27 +0000
ASPA not before:          Fri 21 Aug 2026 12:53:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            208051
Providers:                AS: 983
                          AS: 34872
                          AS: 207841
                          AS: 209735
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/b370c2-d46b-47b5-af28-645680e92fd4/1/AosCB3NxOyxT0GjjQuk_x6rfruI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/b370c2-d46b-47b5-af28-645680e92fd4/1/AosCB3NxOyxT0GjjQuk_x6rfruI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AosCB3NxOyxT0GjjQuk_x6rfruI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:24:62:28:c4:0a:9d:32:00:05:bb:e6:b6:89:f3:c5:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=028b020773713b2c53d068e342e93fc7aadfaee2
        Validity
            Not Before: Aug 21 12:53:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=837126003925c1d37c48a429cab443a6a3909fe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7b:10:75:a7:9c:8d:31:c5:64:02:44:34:27:
                    f3:15:54:d1:9e:57:85:47:40:10:d7:5e:8d:b5:6c:
                    58:c2:34:65:3f:d9:4b:5c:96:78:28:26:ca:c3:e4:
                    46:cb:3f:73:21:17:2e:bd:08:68:38:f5:05:77:6b:
                    20:9f:b5:ab:2c:a6:af:f8:b7:06:e0:38:73:f2:b1:
                    60:37:cf:48:12:83:0d:e6:96:ed:00:29:af:df:5f:
                    f4:1f:77:89:39:03:2f:3e:5f:56:53:75:4d:e4:a7:
                    0f:d1:cb:65:87:d7:d1:ef:55:a2:1e:98:70:ae:55:
                    64:b4:8f:06:27:7f:94:9c:e8:a6:87:30:a5:13:00:
                    cc:47:2d:ae:5d:f8:df:21:69:29:89:42:8c:8f:cb:
                    78:71:aa:83:6b:d4:95:e5:a1:14:ff:a3:ac:57:66:
                    af:d1:15:56:96:84:5b:87:ec:a0:21:aa:72:81:d0:
                    6a:17:7f:20:c9:49:73:7a:48:b0:15:c7:86:ef:49:
                    11:c1:b9:c3:9e:c7:17:b4:f3:df:39:b1:a3:55:db:
                    2a:32:2e:ec:7f:72:27:91:73:80:db:de:af:9b:dd:
                    08:cd:5c:fa:0e:c9:d6:bb:6b:b1:cd:77:e5:5c:2c:
                    93:ec:ae:06:38:51:ee:aa:1d:f2:9c:7e:c8:ce:3d:
                    58:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:71:26:00:39:25:C1:D3:7C:48:A4:29:CA:B4:43:A6:A3:90:9F:E0
            X509v3 Authority Key Identifier:
                keyid:02:8B:02:07:73:71:3B:2C:53:D0:68:E3:42:E9:3F:C7:AA:DF:AE:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AosCB3NxOyxT0GjjQuk_x6rfruI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b370c2-d46b-47b5-af28-645680e92fd4/1/g3EmADklwdN8SKQpyrRDpqOQn-A.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b370c2-d46b-47b5-af28-645680e92fd4/1/AosCB3NxOyxT0GjjQuk_x6rfruI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208051

    Signature Algorithm: sha256WithRSAEncryption
         14:07:42:5c:b9:52:bc:ad:f0:f4:c5:2d:05:af:dc:96:46:94:
         8f:0d:5c:cd:90:1c:75:b8:f3:95:19:fc:c4:75:62:84:81:a6:
         f5:a1:36:95:94:ea:fb:12:5c:f3:bf:5a:32:c2:a6:6b:5b:44:
         b0:07:51:2d:64:a0:63:56:e9:23:81:fd:eb:6a:65:fd:99:86:
         3c:64:ab:e2:97:f2:42:e6:c1:12:ed:9a:0b:58:7c:cd:64:99:
         ed:27:f7:53:b3:c6:df:dc:c3:72:51:ab:c8:d8:f4:c7:5e:f7:
         bd:3c:ab:dc:df:8f:52:ac:e9:63:8e:25:04:69:7b:95:c9:e3:
         5c:79:b0:39:d5:e8:69:0d:4d:ba:df:d3:c3:53:82:fc:c5:3b:
         1d:50:bb:ae:aa:5b:78:10:8f:e0:4a:c6:e1:77:5c:f7:1a:2a:
         df:de:93:14:66:7b:9b:36:04:9d:24:72:e2:20:b3:a1:60:d8:
         fe:0a:b4:50:13:fb:7b:cb:28:11:84:7a:19:ca:3f:a7:2f:b8:
         24:1b:d6:69:1d:d7:da:37:1f:0f:86:12:25:aa:ab:aa:55:a3:
         8b:e3:ff:50:ff:60:6c:b1:bf:75:78:ed:f0:e7:af:3b:31:cc:
         73:cf:09:76:a2:58:d8:b1:38:0c:b2:42:2d:c8:08:47:e6:b5:
         82:73:9f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:10:40 2026 by rpki-client