Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/ps1esgrNwALs0rprEq1u_73GPvQ.asa
File:                     ps1esgrNwALs0rprEq1u_73GPvQ.asa (raw, json)
Hash identifier:          FGyORXilz5BNYLMmlVd29mT3+yukVGqZlvtshiP/w0Q=
Subject key identifier:   A6:CD:5E:B2:0A:CD:C0:02:EC:D2:BA:6B:12:AD:6E:FF:BD:C6:3E:F4
Certificate issuer:       /CN=f3b5a8c0095825e13f46bdb370b7fdca9b9f8a52
Certificate serial:       019F1901509C91FCD8529873DC6F5ABF2FA3
Authority key identifier: F3:B5:A8:C0:09:58:25:E1:3F:46:BD:B3:70:B7:FD:CA:9B:9F:8A:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/87WowAlYJeE_Rr2zcLf9ypufilI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/ps1esgrNwALs0rprEq1u_73GPvQ.asa
Signing time:             Tue 30 Jun 2026 14:49:04 +0000
ASPA not before:          Tue 30 Jun 2026 14:49:04 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            211540
Providers:                AS: 559
                          AS: 6730
                          AS: 13030
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/87WowAlYJeE_Rr2zcLf9ypufilI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:50:9c:91:fc:d8:52:98:73:dc:6f:5a:bf:2f:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3b5a8c0095825e13f46bdb370b7fdca9b9f8a52
        Validity
            Not Before: Jun 30 14:49:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a6cd5eb20acdc002ecd2ba6b12ad6effbdc63ef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0d:6d:6a:79:e8:8b:ef:f5:49:a1:6a:1d:57:
                    fd:9c:6f:5d:ff:34:20:57:fd:b4:94:1e:40:d8:84:
                    a8:cc:c7:e9:81:61:7c:31:b9:a1:82:13:0d:39:4e:
                    72:58:c5:b6:45:9a:0f:49:41:51:5a:3e:7e:7c:82:
                    34:6b:4a:41:78:9b:ff:7e:b3:5a:a3:3c:86:53:04:
                    19:3a:14:23:46:4e:6a:1b:a9:6c:23:40:45:8d:4a:
                    62:d5:b4:77:30:6a:d5:3c:37:4a:42:e2:41:0b:a0:
                    8e:31:00:fe:ce:e0:0e:d3:cf:4f:cc:47:a4:c6:ea:
                    58:a5:fd:1f:64:58:4b:52:66:88:e1:5d:f4:8a:14:
                    1f:52:06:2e:e0:b2:1a:30:2f:82:42:01:8b:9e:4a:
                    68:bb:b2:9a:05:ed:11:cc:db:1a:80:74:b5:9e:13:
                    a7:67:62:cb:90:af:66:d7:93:44:4a:e5:fc:48:9b:
                    96:64:05:66:14:ce:97:bc:41:c1:08:aa:48:c8:32:
                    ec:a0:4f:39:86:cd:82:6f:7d:0a:5b:67:ad:57:4d:
                    1a:54:55:cb:ce:47:23:d3:50:c1:18:f4:b8:ed:7c:
                    0a:47:2d:1d:e0:d8:75:5a:68:9e:9b:63:f4:fb:8e:
                    e1:04:43:72:3f:2d:90:49:dd:8d:f4:0e:66:6f:d0:
                    5d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:CD:5E:B2:0A:CD:C0:02:EC:D2:BA:6B:12:AD:6E:FF:BD:C6:3E:F4
            X509v3 Authority Key Identifier:
                keyid:F3:B5:A8:C0:09:58:25:E1:3F:46:BD:B3:70:B7:FD:CA:9B:9F:8A:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87WowAlYJeE_Rr2zcLf9ypufilI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/ps1esgrNwALs0rprEq1u_73GPvQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211540

    Signature Algorithm: sha256WithRSAEncryption
         65:c7:fc:6c:a0:6d:0b:1e:9d:39:de:9d:69:12:8b:e1:ea:f2:
         30:bd:84:62:b3:d1:80:ec:95:d9:e6:f1:31:18:fe:31:a4:03:
         0a:cc:6d:00:77:2f:6d:bb:4d:95:43:82:52:45:87:ce:7d:3b:
         16:ee:a9:0e:eb:30:77:57:77:2f:2a:03:8f:fe:f7:5c:66:cb:
         96:1b:82:1b:cd:ed:17:22:73:b2:0f:05:4c:18:dd:85:8b:b0:
         da:f8:1e:19:4e:ee:96:b3:d1:d5:f6:45:51:c6:a4:27:06:6f:
         0a:9b:7b:01:d0:c7:63:c1:9d:89:ab:67:93:eb:a0:3d:56:d8:
         f8:16:42:80:66:27:36:3b:f1:77:5f:f2:54:a5:46:18:2d:50:
         da:69:c9:5d:55:83:d0:b0:89:cf:78:e0:bc:a8:30:58:f6:71:
         77:b7:1f:18:4c:55:ed:f3:1f:44:b7:8a:9c:41:d4:46:77:89:
         20:70:ad:40:4f:3e:b6:21:7c:f0:97:f9:54:8b:29:78:c0:c5:
         55:69:fc:f8:cf:cd:18:37:4d:47:a8:74:1f:fb:c9:40:a2:fa:
         83:42:c2:64:f6:89:4d:1a:47:72:4b:d8:f2:5c:9d:27:d2:e0:
         f8:e0:3f:84:9d:a5:ed:26:bc:fa:59:4c:88:1b:94:bb:6b:6c:
         2f:af:a7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:39 2026 by rpki-client