Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/Xn8W3aZI-6tppOJ-g922UvO2P1E.asa
File:                     Xn8W3aZI-6tppOJ-g922UvO2P1E.asa (raw, json)
Hash identifier:          uXmwfFb/PO+RJeAl3LaUtqzCY+5ql2X+3/9TpSbCVCA=
Subject key identifier:   5E:7F:16:DD:A6:48:FB:AB:69:A4:E2:7E:83:DD:B6:52:F3:B6:3F:51
Certificate issuer:       /CN=a4d16629b0da920fff39bfb5ad29a68d847805c6
Certificate serial:       019F4BC891D77045E5FAA4DAE83699271C59
Authority key identifier: A4:D1:66:29:B0:DA:92:0F:FF:39:BF:B5:AD:29:A6:8D:84:78:05:C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pNFmKbDakg__Ob-1rSmmjYR4BcY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/Xn8W3aZI-6tppOJ-g922UvO2P1E.asa
Signing time:             Fri 10 Jul 2026 11:27:43 +0000
ASPA not before:          Fri 10 Jul 2026 11:27:43 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            215017
Providers:                AS: 835
                          AS: 6939
                          AS: 11967
                          AS: 41051
                          AS: 52025
                          AS: 205941
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/pNFmKbDakg__Ob-1rSmmjYR4BcY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/pNFmKbDakg__Ob-1rSmmjYR4BcY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pNFmKbDakg__Ob-1rSmmjYR4BcY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:4b:c8:91:d7:70:45:e5:fa:a4:da:e8:36:99:27:1c:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4d16629b0da920fff39bfb5ad29a68d847805c6
        Validity
            Not Before: Jul 10 11:27:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5e7f16dda648fbab69a4e27e83ddb652f3b63f51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:0f:c2:e8:a1:26:c5:3e:ac:2a:16:88:ef:bf:
                    02:d0:87:1b:64:a4:4e:87:72:fb:78:53:c8:98:0e:
                    df:64:5e:09:de:5c:28:05:13:e7:fb:bb:50:15:5e:
                    e2:92:3f:87:44:1f:1b:fc:9b:c2:ff:b8:33:57:09:
                    66:77:22:c5:27:d0:01:aa:d5:2d:7a:9a:7c:2e:9f:
                    03:bd:b8:ac:c2:ca:9f:78:96:79:e4:93:c2:71:76:
                    03:af:18:3d:90:03:79:09:14:a1:4d:25:f1:9c:b5:
                    62:47:d5:dd:28:c6:73:1b:2d:89:6f:96:9a:11:8c:
                    d5:78:bb:20:7f:f5:16:21:6f:2d:b0:32:d9:bc:ba:
                    9d:48:8b:1c:f3:09:a2:72:ab:47:4e:33:ae:b8:f1:
                    39:0d:5a:cd:45:ef:2f:66:d8:4e:79:36:c4:36:2d:
                    d2:50:86:d9:01:e9:cb:c9:5a:00:ad:0c:a4:27:ce:
                    7c:7f:12:f3:e8:a3:d9:66:4d:cc:4e:19:69:95:e6:
                    41:33:63:cf:13:00:20:f6:00:ad:48:35:39:4c:1f:
                    b2:fb:90:6c:2d:ac:0c:98:23:df:86:14:2b:86:30:
                    a2:76:73:33:01:61:34:d0:34:3c:2b:5e:07:bf:b4:
                    64:99:68:99:6b:ff:6c:5d:59:cd:b7:b6:7c:9d:9c:
                    99:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:7F:16:DD:A6:48:FB:AB:69:A4:E2:7E:83:DD:B6:52:F3:B6:3F:51
            X509v3 Authority Key Identifier:
                keyid:A4:D1:66:29:B0:DA:92:0F:FF:39:BF:B5:AD:29:A6:8D:84:78:05:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNFmKbDakg__Ob-1rSmmjYR4BcY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/Xn8W3aZI-6tppOJ-g922UvO2P1E.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/pNFmKbDakg__Ob-1rSmmjYR4BcY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215017

    Signature Algorithm: sha256WithRSAEncryption
         b0:ed:01:60:b8:d2:85:ce:cf:55:76:6b:8c:5c:8c:11:fa:f1:
         e4:f8:4a:37:3f:dd:58:26:c8:53:c3:8c:42:cb:59:1a:b1:42:
         3e:e9:a2:8c:e8:ec:1d:2b:c8:92:1a:54:de:0f:64:e2:c7:cf:
         36:ee:49:b0:af:79:3d:f5:d9:cd:f2:22:fb:1e:f8:a3:16:df:
         c1:54:07:a3:39:de:be:2a:67:e6:66:08:a8:70:3a:29:82:90:
         33:ec:86:08:ac:b3:fe:63:da:0a:3d:40:4d:0e:02:dd:47:ba:
         04:2d:9f:77:cd:cc:25:00:3c:1c:a1:98:8f:cb:c8:62:c9:7b:
         32:e6:17:18:e7:91:6d:ab:bc:d6:ae:57:d2:58:f8:92:46:96:
         f5:2b:b4:2c:0c:17:5a:d2:a7:ff:03:46:1e:38:9a:89:6a:89:
         39:fc:8b:95:3b:f7:51:f8:36:c8:c4:92:cb:27:fc:7b:a1:d9:
         fe:8b:02:e5:d1:ad:da:3d:05:b6:be:df:18:e6:e5:df:2a:78:
         bc:35:f5:01:ee:ee:10:e8:84:5c:e5:2e:2b:70:ad:14:9b:08:
         b1:ab:3b:bc:38:7b:02:94:20:0d:83:9a:ee:93:43:49:f4:a5:
         fe:e3:9c:cc:77:d3:e9:35:df:ec:55:2c:c9:d1:ec:db:33:e0:
         b9:27:b5:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:49:59 2026 by rpki-client