Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/93cba9-d0c5-452b-9226-5d7844dd45b4/1/MZwHyoxyedbHMHzcDY_-BSVnPSA.asa
File:                     MZwHyoxyedbHMHzcDY_-BSVnPSA.asa (raw, json)
Hash identifier:          GUjDhBxz76iF0qBxXqsv2ZfQlXLmcrAvFFiVS8y2Yns=
Subject key identifier:   31:9C:07:CA:8C:72:79:D6:C7:30:7C:DC:0D:8F:FE:05:25:67:3D:20
Certificate issuer:       /CN=edaf6de904cde8fa4b33f6a363172e79a3ce8cae
Certificate serial:       019D10FC1B7C1A97555375BC562B26217FBB
Authority key identifier: ED:AF:6D:E9:04:CD:E8:FA:4B:33:F6:A3:63:17:2E:79:A3:CE:8C:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7a9t6QTN6PpLM_ajYxcueaPOjK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/93cba9-d0c5-452b-9226-5d7844dd45b4/1/MZwHyoxyedbHMHzcDY_-BSVnPSA.asa
Signing time:             Sat 21 Mar 2026 15:20:50 +0000
ASPA not before:          Sat 21 Mar 2026 15:20:50 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            197919
Providers:                AS: 210475
                          AS: 215577
                          AS: 216107
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/93cba9-d0c5-452b-9226-5d7844dd45b4/1/7a9t6QTN6PpLM_ajYxcueaPOjK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/93cba9-d0c5-452b-9226-5d7844dd45b4/1/7a9t6QTN6PpLM_ajYxcueaPOjK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7a9t6QTN6PpLM_ajYxcueaPOjK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:10:fc:1b:7c:1a:97:55:53:75:bc:56:2b:26:21:7f:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edaf6de904cde8fa4b33f6a363172e79a3ce8cae
        Validity
            Not Before: Mar 21 15:20:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=319c07ca8c7279d6c7307cdc0d8ffe0525673d20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e0:e8:5e:93:29:5a:5f:af:30:11:60:24:ac:
                    9f:26:b3:8f:7d:1d:24:77:9f:a5:fb:5e:d3:48:ee:
                    ee:b9:57:88:c4:19:b9:5a:d2:a1:65:e8:b8:75:90:
                    1a:71:fd:c9:3f:44:d6:98:7a:5c:33:db:d8:4a:e1:
                    90:d3:3e:60:19:5e:2a:84:22:a3:5e:60:f5:9a:db:
                    53:f8:44:32:d7:14:83:8f:ee:62:9e:fa:d9:2c:58:
                    6d:d5:e5:09:3d:a4:ce:e8:76:f7:2f:88:35:5e:00:
                    32:d5:ff:14:2d:dd:8d:64:91:f4:9c:3a:b3:e0:b2:
                    2c:5c:fc:40:f8:f1:f3:28:ba:77:67:e3:54:cc:03:
                    40:28:5a:6b:9a:25:67:13:34:aa:dc:ee:c5:e5:e7:
                    92:f7:ae:65:23:e7:2c:c9:c3:e4:a7:42:53:a4:af:
                    cf:94:76:9b:c3:bc:8f:05:39:b2:33:f7:4a:44:81:
                    e8:b1:02:9e:99:65:a7:6e:4c:44:52:f5:09:f2:69:
                    96:e6:c2:35:66:e2:4e:4f:22:a6:c0:3d:07:70:ec:
                    51:4b:dc:a2:6e:6f:bb:76:a3:a9:36:c6:38:06:b6:
                    18:2c:ab:21:f5:0b:ac:f3:f7:42:08:15:66:82:8f:
                    97:89:74:11:8e:4e:c2:a5:f5:b0:72:15:62:67:fb:
                    fe:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:9C:07:CA:8C:72:79:D6:C7:30:7C:DC:0D:8F:FE:05:25:67:3D:20
            X509v3 Authority Key Identifier:
                keyid:ED:AF:6D:E9:04:CD:E8:FA:4B:33:F6:A3:63:17:2E:79:A3:CE:8C:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a9t6QTN6PpLM_ajYxcueaPOjK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/93cba9-d0c5-452b-9226-5d7844dd45b4/1/MZwHyoxyedbHMHzcDY_-BSVnPSA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/93cba9-d0c5-452b-9226-5d7844dd45b4/1/7a9t6QTN6PpLM_ajYxcueaPOjK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197919

    Signature Algorithm: sha256WithRSAEncryption
         b7:84:9a:18:e0:c9:0e:47:da:f5:41:11:75:ec:d8:d0:2a:2b:
         99:04:89:70:f6:27:74:1d:b9:d8:d5:4e:bd:8b:0e:28:df:42:
         58:e5:1b:8a:19:a0:31:94:c7:f2:55:95:0f:3d:14:21:5d:60:
         9e:44:dc:20:35:bb:4a:64:38:de:c7:e4:ce:6b:99:b1:b0:59:
         37:8a:b3:90:b6:34:b4:e0:dc:4f:2b:50:25:0f:96:b3:4c:ab:
         d0:22:83:35:87:0c:8d:d9:f3:70:8b:0c:1c:a8:40:88:61:4a:
         4b:4d:43:c5:b3:6f:2d:97:f9:a5:a9:97:07:b9:3e:43:7e:79:
         70:6c:4b:7f:60:09:4b:6b:2d:db:7f:12:42:31:e9:4f:4f:f9:
         5d:fa:32:2a:45:22:a8:43:28:a7:7e:00:d1:65:63:8e:54:7d:
         44:0d:4d:4d:98:e9:e0:6c:80:db:71:13:0f:16:d3:ce:e7:a6:
         d6:67:b4:31:d0:78:a6:04:c9:9d:0b:86:21:e2:9d:3c:9e:a5:
         be:bd:9e:f0:74:e1:62:37:2c:2f:12:e6:38:4e:0d:ab:08:51:
         f2:2f:4c:7d:a3:02:d5:9f:d0:fa:ba:45:99:a9:9c:dc:ce:09:
         63:f9:a3:66:92:19:6f:d7:01:b0:77:59:24:7a:dd:27:60:57:
         23:ec:c9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:17:29 2026 by rpki-client