Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/ARREJkvwymf2JqV3QtYgcvvvBYk.asa
File:                     ARREJkvwymf2JqV3QtYgcvvvBYk.asa (raw, json)
Hash identifier:          IdgT4jYwa51CjWUlreSvK7wpG/o174TADgIlc+b9O+c=
Subject key identifier:   01:14:44:26:4B:F0:CA:67:F6:26:A5:77:42:D6:20:72:FB:EF:05:89
Certificate issuer:       /CN=cf6a7a426dc519963d33d2dc6cef782fd5f2dc77
Certificate serial:       019F52EFA19FB7BAD1AB865052827AE593FF
Authority key identifier: CF:6A:7A:42:6D:C5:19:96:3D:33:D2:DC:6C:EF:78:2F:D5:F2:DC:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/ARREJkvwymf2JqV3QtYgcvvvBYk.asa
Signing time:             Sat 11 Jul 2026 20:47:43 +0000
ASPA not before:          Sat 11 Jul 2026 20:47:43 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            215236
Providers:                AS: 29670
                          AS: 50629
                          AS: 58299
                          AS: 59645
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:52:ef:a1:9f:b7:ba:d1:ab:86:50:52:82:7a:e5:93:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf6a7a426dc519963d33d2dc6cef782fd5f2dc77
        Validity
            Not Before: Jul 11 20:47:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=011444264bf0ca67f626a57742d62072fbef0589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6d:0c:5c:25:b9:33:99:45:d3:d9:69:59:fe:
                    c9:92:fe:77:3c:6e:99:d3:eb:4b:82:85:3e:9e:47:
                    5f:b8:e8:12:52:9b:5b:b8:ca:f6:95:f2:ff:f2:42:
                    e3:17:42:04:f6:6d:4e:44:9b:07:be:fc:78:cd:10:
                    ab:86:00:a9:a2:b0:2f:e6:a3:e6:fc:55:cc:32:ad:
                    ce:56:6e:49:57:7a:f2:41:0a:84:15:52:54:e8:ad:
                    bf:e0:75:e5:56:57:6c:38:23:01:48:b5:b2:42:fa:
                    fc:6b:d5:3d:a9:ed:94:29:d8:bc:08:1d:1f:03:39:
                    dd:3d:c4:bc:0f:07:2e:b4:c2:cc:3b:0c:b4:05:9a:
                    10:3a:6e:2a:db:9a:a2:84:f7:8b:fd:37:58:ce:44:
                    ad:39:47:94:b7:0e:09:01:39:df:b6:e4:f6:5d:bd:
                    e3:64:25:6a:24:77:85:88:f4:c9:7d:2b:06:8e:fd:
                    21:64:9e:52:d3:1c:bb:df:95:c5:ec:8c:2b:62:64:
                    8b:8b:d8:13:c6:de:6f:37:31:72:42:b4:eb:33:e9:
                    e2:21:1b:5a:1b:48:52:eb:86:31:5c:9c:08:5a:8f:
                    47:4c:93:47:1c:b6:7e:8c:1f:b4:77:0b:57:23:d0:
                    a5:a0:49:b0:36:5b:3f:98:b9:c9:c2:ca:fc:5e:15:
                    a3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:14:44:26:4B:F0:CA:67:F6:26:A5:77:42:D6:20:72:FB:EF:05:89
            X509v3 Authority Key Identifier:
                keyid:CF:6A:7A:42:6D:C5:19:96:3D:33:D2:DC:6C:EF:78:2F:D5:F2:DC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/ARREJkvwymf2JqV3QtYgcvvvBYk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215236

    Signature Algorithm: sha256WithRSAEncryption
         00:84:e5:6d:4e:af:a5:48:e1:2f:3b:ae:34:c2:db:8e:c9:71:
         be:29:2b:7c:ca:2e:f4:19:44:0d:24:a2:ed:6e:e0:24:9c:45:
         9b:02:10:cf:f9:a8:d8:96:5d:cb:0b:a7:31:41:fd:b6:8d:ac:
         8e:c8:44:63:61:73:7f:e5:f9:75:41:ba:bf:4f:21:f0:6b:c0:
         89:c4:2e:03:44:13:f0:e6:56:8e:25:a2:29:f5:dd:68:6a:72:
         b9:61:6c:02:31:97:8c:54:e1:f9:6e:ae:54:f9:66:6f:7f:7d:
         fb:6a:da:bb:5c:c6:9e:e0:21:10:5f:be:f0:fc:60:de:3c:95:
         d9:a9:1d:7e:71:39:7d:c1:7e:65:67:11:2a:24:0d:bd:a0:6d:
         5d:bc:6a:69:5c:b4:6a:2f:fc:48:0b:84:f3:11:a1:34:4a:b0:
         b4:8a:30:76:7d:3e:40:09:f0:38:e7:07:ec:44:db:35:1a:0c:
         9a:ce:b8:92:c2:5e:61:9b:ed:eb:dc:28:fb:33:23:14:8a:8b:
         27:1b:f0:d7:f4:d5:dd:87:23:fa:84:63:92:39:bb:14:89:1c:
         75:60:1f:6e:0c:ab:b6:43:8b:de:4d:a6:d0:40:14:92:53:17:
         b0:fa:fc:29:87:31:2a:f2:a1:2d:e4:68:08:d8:58:97:d8:52:
         25:af:de:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:15:22 2026 by rpki-client