Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/4nYYdXdACDvFJB3NrSEU1h6fV1M.asa
File:                     4nYYdXdACDvFJB3NrSEU1h6fV1M.asa (raw, json)
Hash identifier:          j8Lw+F7BcVN4VcHXZaM+s3DucdPJcpRpTIHgwu3t9Hk=
Subject key identifier:   E2:76:18:75:77:40:08:3B:C5:24:1D:CD:AD:21:14:D6:1E:9F:57:53
Certificate issuer:       /CN=7927f6d0062a9766bd58f0d075c4f0d10257e606
Certificate serial:       019F19012660FF4FEFFF3778391FC67C3125
Authority key identifier: 79:27:F6:D0:06:2A:97:66:BD:58:F0:D0:75:C4:F0:D1:02:57:E6:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eSf20AYql2a9WPDQdcTw0QJX5gY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/4nYYdXdACDvFJB3NrSEU1h6fV1M.asa
Signing time:             Tue 30 Jun 2026 14:48:53 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:53 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            198457
Providers:                AS: 5617
                          AS: 12741
                          AS: 15694
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eSf20AYql2a9WPDQdcTw0QJX5gY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:26:60:ff:4f:ef:ff:37:78:39:1f:c6:7c:31:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7927f6d0062a9766bd58f0d075c4f0d10257e606
        Validity
            Not Before: Jun 30 14:48:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e27618757740083bc5241dcdad2114d61e9f5753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e4:ed:b6:34:54:ab:f9:de:68:34:a5:31:8f:
                    04:e9:13:e8:d1:9e:37:74:37:b0:81:9e:30:43:bc:
                    91:df:97:c7:12:ea:1a:c0:d4:b1:60:0f:4b:9d:a7:
                    d7:cf:9e:8d:82:16:4d:b7:a6:e3:f6:90:0c:2e:17:
                    ab:ac:08:cf:a0:07:09:e9:a8:ed:d9:42:cc:3d:15:
                    78:93:cf:03:0a:59:55:0a:e8:e3:da:61:5a:d3:50:
                    5c:07:5d:fc:94:cc:3c:fb:5b:57:74:51:6a:63:59:
                    94:e1:1c:c4:29:d3:30:5b:1e:74:2b:c6:3c:a4:26:
                    7a:70:dd:61:0c:94:36:ea:81:59:3f:93:44:fd:c0:
                    46:52:e1:ca:ad:c9:cc:c9:49:89:44:b4:7d:f0:99:
                    ec:5b:72:24:77:de:11:3c:32:e9:9c:e0:9c:74:bf:
                    11:62:f8:b0:8a:2b:0a:51:6a:d0:01:e1:d3:28:03:
                    c8:5a:20:91:96:46:f0:59:f4:c6:21:0d:29:34:7a:
                    f1:d1:c2:ff:14:a2:53:3d:4e:20:53:54:35:dd:32:
                    46:40:1e:9b:10:50:d5:f5:05:12:4e:a1:08:21:52:
                    2e:26:29:6a:6d:90:b6:5f:e3:b0:7d:45:46:24:c8:
                    81:39:27:86:23:91:76:16:31:9b:56:99:c2:6c:07:
                    8b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:76:18:75:77:40:08:3B:C5:24:1D:CD:AD:21:14:D6:1E:9F:57:53
            X509v3 Authority Key Identifier:
                keyid:79:27:F6:D0:06:2A:97:66:BD:58:F0:D0:75:C4:F0:D1:02:57:E6:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSf20AYql2a9WPDQdcTw0QJX5gY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/4nYYdXdACDvFJB3NrSEU1h6fV1M.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198457

    Signature Algorithm: sha256WithRSAEncryption
         8d:33:47:84:8d:98:d6:9b:b2:e3:7d:1f:db:60:5e:0a:61:af:
         79:ec:37:14:08:c9:e0:27:dd:53:3b:1d:55:b3:2c:ed:49:b7:
         a7:b4:51:ab:e5:0a:c8:d5:8f:ca:6a:7e:1b:51:5d:03:a3:79:
         95:7b:05:74:12:29:63:21:d8:fc:5f:23:fe:80:fc:ff:05:5e:
         e9:91:43:bf:29:68:91:d6:e5:be:f3:89:87:c4:ef:c2:1f:ae:
         97:f4:13:85:a9:29:49:9a:d8:4c:09:0f:0b:40:7b:f9:9a:b6:
         a6:ee:8f:a9:db:0e:af:af:5f:7b:e0:d1:db:80:a8:d8:fb:50:
         21:76:85:53:ec:1d:43:0c:86:2e:c5:54:d4:98:06:8d:13:42:
         9e:2e:61:fa:99:e4:2d:cf:75:65:70:55:6b:89:b2:03:26:50:
         6e:03:82:e4:3a:d1:d8:50:55:17:dd:58:5a:cf:63:db:15:b7:
         b7:d6:97:45:66:5c:74:62:33:91:57:24:85:11:c8:a2:bd:68:
         1f:46:7e:84:4c:b4:c9:f6:9a:d1:f6:3d:c8:39:b5:f2:6e:9c:
         e2:ac:ce:f1:b1:08:55:50:8c:b1:ff:20:7c:08:bf:76:0c:b7:
         ce:a1:58:50:9a:cc:c3:c6:90:eb:79:46:ea:2d:04:83:23:80:
         27:c1:4c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:02 2026 by rpki-client