Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9831e8-4691-40a3-a4dc-2aef811b61ee/1/Hp6Raag0ALYp5EYwlQ8D2sx5dSM.asa
File:                     Hp6Raag0ALYp5EYwlQ8D2sx5dSM.asa (raw, json)
Hash identifier:          5SUq8qPiHzfCvx12Di43xDFk3VXfwUFCax1cmFA1IUw=
Subject key identifier:   1E:9E:91:69:A8:34:00:B6:29:E4:46:30:95:0F:03:DA:CC:79:75:23
Certificate issuer:       /CN=611497c83be95424c31385074fe0d1af02ef3b7d
Certificate serial:       019F8DF5F54B96EFE3AEE254A92A5DD1A342
Authority key identifier: 61:14:97:C8:3B:E9:54:24:C3:13:85:07:4F:E0:D1:AF:02:EF:3B:7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YRSXyDvpVCTDE4UHT-DRrwLvO30.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/9831e8-4691-40a3-a4dc-2aef811b61ee/1/Hp6Raag0ALYp5EYwlQ8D2sx5dSM.asa
Signing time:             Thu 23 Jul 2026 07:52:14 +0000
ASPA not before:          Thu 23 Jul 2026 07:52:14 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            219529
Providers:                AS: 33755
                          AS: 199829
                          AS: 201279
                          AS: 214205
                          AS: 215828
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/9831e8-4691-40a3-a4dc-2aef811b61ee/1/YRSXyDvpVCTDE4UHT-DRrwLvO30.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/9831e8-4691-40a3-a4dc-2aef811b61ee/1/YRSXyDvpVCTDE4UHT-DRrwLvO30.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YRSXyDvpVCTDE4UHT-DRrwLvO30.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8d:f5:f5:4b:96:ef:e3:ae:e2:54:a9:2a:5d:d1:a3:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=611497c83be95424c31385074fe0d1af02ef3b7d
        Validity
            Not Before: Jul 23 07:52:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1e9e9169a83400b629e44630950f03dacc797523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fd:56:9f:33:67:40:af:3e:58:fc:6f:77:fa:
                    6b:0e:b9:c2:cc:ab:f2:0f:22:e3:69:ab:23:a7:de:
                    1e:c9:0d:f9:8c:75:90:47:20:ca:91:24:0d:ed:88:
                    df:1c:93:6f:d4:f5:ad:58:dd:f2:f3:9d:2c:e4:7e:
                    6a:95:f1:c1:d5:85:c5:35:d7:d4:51:2e:52:be:18:
                    5b:9b:a9:4b:9a:19:bd:e6:3a:c2:69:d7:df:a1:71:
                    16:3a:b5:ac:46:40:42:20:72:c4:5f:6d:3f:a9:c3:
                    30:83:56:19:0f:85:22:80:d8:42:9f:d7:9f:b7:62:
                    4c:e8:f3:2f:b4:a3:d3:6b:61:fd:a2:02:48:e9:39:
                    e2:03:20:17:b0:70:1f:88:c8:8d:70:32:a0:e6:fc:
                    9b:1a:9d:d6:2c:b3:7e:0a:31:34:1c:54:c0:d3:52:
                    d4:a1:34:be:74:0c:4f:de:c0:27:3c:21:3d:53:55:
                    c4:ad:7c:66:e2:da:46:a1:7d:08:41:ab:c1:97:44:
                    e8:74:4b:29:3a:c2:3b:e3:2e:52:8c:f1:1e:72:de:
                    f5:66:04:6e:f3:fc:b4:04:00:a5:70:de:f2:1e:e1:
                    94:4f:e3:3e:41:b1:04:85:76:f5:7e:ad:ee:32:4e:
                    c3:a8:15:a7:d6:83:36:5b:84:98:8e:bd:16:4b:fb:
                    b7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:9E:91:69:A8:34:00:B6:29:E4:46:30:95:0F:03:DA:CC:79:75:23
            X509v3 Authority Key Identifier:
                keyid:61:14:97:C8:3B:E9:54:24:C3:13:85:07:4F:E0:D1:AF:02:EF:3B:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRSXyDvpVCTDE4UHT-DRrwLvO30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9831e8-4691-40a3-a4dc-2aef811b61ee/1/Hp6Raag0ALYp5EYwlQ8D2sx5dSM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9831e8-4691-40a3-a4dc-2aef811b61ee/1/YRSXyDvpVCTDE4UHT-DRrwLvO30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  219529

    Signature Algorithm: sha256WithRSAEncryption
         99:2b:41:4b:2b:c0:0f:a6:c1:9e:c5:c9:87:c6:c9:84:1b:d8:
         6d:92:8b:50:61:5d:12:3d:3d:a2:06:50:38:a1:88:72:a0:da:
         51:0c:c6:b7:6c:37:10:4c:f1:10:fa:6f:42:34:f7:76:d8:c0:
         60:e6:c3:bd:82:46:ce:bb:b2:c3:cc:6b:cd:78:dd:cc:2d:9e:
         d6:69:1f:a2:31:fb:13:d3:63:41:7b:45:19:39:03:57:50:21:
         2a:28:b3:1c:ab:e9:ae:8d:09:8d:62:3a:c7:e5:aa:d3:ca:8d:
         f7:10:1f:ac:26:d0:b5:3d:04:c7:57:1d:01:64:8b:50:d7:01:
         5c:60:d0:f6:b2:2c:bd:7e:cf:ea:df:ed:a1:29:b6:00:0b:3a:
         70:21:d3:40:d3:e5:27:9e:1f:97:22:ac:dd:5f:a1:13:9e:8f:
         2e:f0:d6:6b:e2:ce:b4:0b:ce:19:c4:ef:e7:e1:e6:66:42:1b:
         d7:50:6e:be:3b:57:40:46:4c:cb:db:d3:29:b3:c8:47:96:be:
         76:e3:b3:36:19:ff:08:f0:f8:9f:43:1a:91:14:f5:3a:53:01:
         c2:78:a6:23:6b:b4:ef:7b:79:59:4d:58:f1:34:7e:fe:30:07:
         84:10:db:b6:94:eb:94:86:2c:79:47:55:d9:d2:40:7e:23:bd:
         29:32:62:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:56:14 2026 by rpki-client