Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/kGfuExTz52-sB1eMkLDsaAGePpw.asa
File:                     kGfuExTz52-sB1eMkLDsaAGePpw.asa (raw, json)
Hash identifier:          z47BctNwAk2POTWeuHzhRwzuq2rLlRzJsQDmN61BdBM=
Subject key identifier:   90:67:EE:13:14:F3:E7:6F:AC:07:57:8C:90:B0:EC:68:01:9E:3E:9C
Certificate issuer:       /CN=cea5b3410c3971c42d849996d6de6eb12b7effb0
Certificate serial:       019F2368724C612954D2FE8196FA1D70EF8C
Authority key identifier: CE:A5:B3:41:0C:39:71:C4:2D:84:99:96:D6:DE:6E:B1:2B:7E:FF:B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zqWzQQw5ccQthJmW1t5usSt-_7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/kGfuExTz52-sB1eMkLDsaAGePpw.asa
Signing time:             Thu 02 Jul 2026 15:17:55 +0000
ASPA not before:          Thu 02 Jul 2026 15:17:55 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            201786
Providers:                AS: 3216
                          AS: 31257
                          AS: 48858
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/zqWzQQw5ccQthJmW1t5usSt-_7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/zqWzQQw5ccQthJmW1t5usSt-_7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zqWzQQw5ccQthJmW1t5usSt-_7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:68:72:4c:61:29:54:d2:fe:81:96:fa:1d:70:ef:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cea5b3410c3971c42d849996d6de6eb12b7effb0
        Validity
            Not Before: Jul  2 15:17:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9067ee1314f3e76fac07578c90b0ec68019e3e9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f9:a9:d5:3d:fb:70:d4:dd:7a:26:b8:4c:f8:
                    84:d9:ca:84:09:e1:17:92:bb:cd:96:e8:75:f2:bf:
                    98:9d:27:67:90:af:16:20:88:61:95:e9:7c:b8:ba:
                    29:7e:49:88:c0:28:32:29:3e:aa:84:df:17:e9:4f:
                    5b:3b:a7:bb:67:f6:21:4d:9e:0f:77:8f:ed:11:4f:
                    d8:1b:fd:c2:02:a8:f2:b0:a1:d2:7d:13:92:60:98:
                    50:9a:1d:97:4f:9d:f5:22:e9:c9:46:07:f1:25:f7:
                    1a:85:4c:b2:e7:3b:a6:c7:9d:c8:a2:51:0d:20:92:
                    a0:d1:41:0f:94:2c:48:3f:f3:82:bd:ad:cd:4b:fe:
                    b4:2a:64:2b:3c:cc:98:bd:63:13:90:ae:a6:53:84:
                    5f:20:50:cc:7a:7a:14:c3:c2:38:b7:df:d6:45:9f:
                    36:b0:07:29:d7:aa:58:15:08:6b:3c:56:3d:4d:a7:
                    07:e6:ca:12:cd:aa:ee:ab:1e:3f:0e:6d:0f:3f:81:
                    c0:c5:79:3d:fb:a3:81:e4:fd:b4:ba:24:67:ff:2b:
                    bb:a1:3f:bd:f8:09:fb:0b:b2:2e:1b:d0:b8:ff:95:
                    77:9f:c1:ad:11:a0:ed:e8:bc:16:db:f8:1b:5b:16:
                    ed:56:a8:5a:9f:b5:1a:6f:08:f7:03:b6:b4:2f:b4:
                    cd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:67:EE:13:14:F3:E7:6F:AC:07:57:8C:90:B0:EC:68:01:9E:3E:9C
            X509v3 Authority Key Identifier:
                keyid:CE:A5:B3:41:0C:39:71:C4:2D:84:99:96:D6:DE:6E:B1:2B:7E:FF:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqWzQQw5ccQthJmW1t5usSt-_7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/kGfuExTz52-sB1eMkLDsaAGePpw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/zqWzQQw5ccQthJmW1t5usSt-_7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201786

    Signature Algorithm: sha256WithRSAEncryption
         74:a1:a7:79:67:b6:29:0e:05:ae:56:1d:36:be:58:c8:db:08:
         19:94:73:08:84:7c:3a:61:c0:34:e3:3e:53:ca:1c:ce:e3:c1:
         66:db:44:62:8c:1f:bf:b4:82:b4:e7:1d:0c:f4:d0:a6:3a:4f:
         96:b5:c2:52:9f:fb:16:41:a5:b5:6a:65:67:ff:68:70:8a:fd:
         36:19:64:8b:9f:e0:94:75:17:5e:69:55:d2:dd:d8:91:cf:5d:
         80:cf:e8:3a:0a:c0:15:c7:23:96:39:22:70:64:fe:2e:ca:a7:
         86:8e:95:79:c5:12:04:bb:ce:66:03:06:41:de:89:c6:e3:3e:
         1b:a3:37:9e:29:b8:00:2d:0e:8f:c6:88:02:c7:41:f0:ca:f9:
         e6:fb:f5:80:3b:7e:d2:34:34:ee:10:a8:21:1d:f0:9b:17:fa:
         d4:17:59:17:77:b6:70:ab:0f:f7:8c:a8:d7:47:b2:84:7f:4b:
         7a:ca:89:15:3a:4c:dd:a3:4b:a3:3b:46:a3:63:1c:8a:cc:51:
         f8:be:30:d6:12:5d:f4:5c:b8:03:c5:b6:1d:5b:4d:8b:7a:d3:
         28:6e:25:ed:c5:74:4f:42:29:89:77:9a:fa:f4:d3:e4:9f:31:
         5c:5c:a1:07:d4:07:e0:20:1f:93:26:20:50:39:c4:81:70:0a:
         73:fc:1e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:56:37 2026 by rpki-client