Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/KK2fVvhYxOpAItc8n8GBk8_156E.asa
File:                     KK2fVvhYxOpAItc8n8GBk8_156E.asa (raw, json)
Hash identifier:          f/2lJ7lV+SEIySTOe5SGEpN2tTypjAm/4YNh+sLBbuo=
Subject key identifier:   28:AD:9F:56:F8:58:C4:EA:40:22:D7:3C:9F:C1:81:93:CF:F5:E7:A1
Certificate issuer:       /CN=8eb44b078522da9c31062b9c7ef7f51727e73e5e
Certificate serial:       019F19011E5830BDA4A1A2F97BE1A515EA05
Authority key identifier: 8E:B4:4B:07:85:22:DA:9C:31:06:2B:9C:7E:F7:F5:17:27:E7:3E:5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/KK2fVvhYxOpAItc8n8GBk8_156E.asa
Signing time:             Tue 30 Jun 2026 14:48:51 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:51 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            207995
Providers:                AS: 3257
                          AS: 3356
                          AS: 8676
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:1e:58:30:bd:a4:a1:a2:f9:7b:e1:a5:15:ea:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eb44b078522da9c31062b9c7ef7f51727e73e5e
        Validity
            Not Before: Jun 30 14:48:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=28ad9f56f858c4ea4022d73c9fc18193cff5e7a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0d:56:7c:79:7b:a8:a4:2c:8e:92:fb:a0:fa:
                    0c:12:6e:be:be:2a:26:eb:b1:a3:25:b5:3f:d6:10:
                    e6:08:bb:a5:9a:5d:19:30:5c:72:d0:af:d7:76:8a:
                    64:e0:0b:84:6f:c5:9f:6c:07:24:6a:e1:11:41:59:
                    4b:09:2f:1b:33:d1:4b:f5:a6:e0:15:60:c3:77:0a:
                    09:af:b3:d1:eb:21:1e:e6:77:07:0d:cb:8c:18:c1:
                    e0:c0:52:f3:3e:72:c4:a2:92:cf:85:75:ea:87:0a:
                    59:d8:aa:20:fe:63:17:c8:37:eb:15:03:57:38:c8:
                    ac:f7:91:a9:46:66:71:19:4d:31:67:e2:a9:18:0c:
                    c6:b5:93:b4:fa:a3:ee:1f:76:4a:44:13:e3:ed:15:
                    28:76:bd:21:ca:26:c0:5c:17:c7:18:ca:36:93:d8:
                    07:43:9b:2a:cb:57:fc:85:a3:eb:d2:a0:f4:60:9e:
                    b1:20:86:b7:7d:34:ae:b4:eb:b8:38:8c:07:ab:b0:
                    71:5a:f7:57:63:4d:40:40:11:33:fc:72:01:97:dc:
                    4e:bd:f2:62:e4:e3:c9:4a:3f:81:94:d4:28:5f:9d:
                    b4:c1:6d:03:ed:f2:9d:67:1c:82:0b:ec:cb:ef:80:
                    48:e9:7f:b8:7a:57:03:d9:c8:a6:48:67:91:3c:d7:
                    36:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:AD:9F:56:F8:58:C4:EA:40:22:D7:3C:9F:C1:81:93:CF:F5:E7:A1
            X509v3 Authority Key Identifier:
                keyid:8E:B4:4B:07:85:22:DA:9C:31:06:2B:9C:7E:F7:F5:17:27:E7:3E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/KK2fVvhYxOpAItc8n8GBk8_156E.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207995

    Signature Algorithm: sha256WithRSAEncryption
         50:f2:41:83:77:f2:94:44:89:90:e2:75:84:53:47:eb:f1:35:
         bb:ea:06:4a:61:b7:30:c8:f7:a8:70:0c:a3:fe:29:f2:7a:15:
         81:91:16:90:f5:78:31:00:86:99:15:78:96:13:29:c1:7c:54:
         eb:47:f4:9c:d0:a6:85:e5:a9:08:56:6b:04:45:0a:4d:d2:38:
         b6:f5:7f:a7:0f:ea:d7:c1:2a:fa:0f:c1:86:a2:fd:c3:6a:a4:
         a8:71:c7:a7:a2:8d:5a:76:f0:ea:6e:f5:5e:e8:73:55:bc:1d:
         87:18:2f:da:44:76:f0:ff:62:0d:64:c2:5a:97:ac:fb:45:38:
         d2:e9:39:8e:e0:1d:dd:da:28:2c:8d:99:c9:22:40:af:eb:14:
         57:7c:29:f3:39:88:59:d0:df:d4:50:94:dd:99:58:e2:95:b5:
         a1:6f:da:20:b8:d7:a9:a8:16:a7:18:f7:08:ba:da:3b:d8:ec:
         83:14:ba:4b:71:e9:4d:25:0e:02:7c:30:8d:b2:c8:25:e9:ed:
         9a:05:61:b3:bc:85:0a:39:ad:35:fb:49:00:c4:bc:de:22:80:
         f4:ec:44:b6:84:c5:df:b6:ec:4c:fb:94:7c:18:49:15:2c:a3:
         c9:a0:30:e3:6f:3f:0f:7e:b4:cb:ad:fc:0d:f6:69:1e:f4:d6:
         b4:14:b5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:15:21 2026 by rpki-client