Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/cf9409-3935-43f5-a7ea-5584b853ed34/1/WE6dCj7x0gJX4CBgsBBV4qD6kks.asa
File:                     WE6dCj7x0gJX4CBgsBBV4qD6kks.asa (raw, json)
Hash identifier:          Ik9fu30Prhl5cLZ5Dpjdp1/bctc/vb9Xl0Pi2G12sXU=
Subject key identifier:   58:4E:9D:0A:3E:F1:D2:02:57:E0:20:60:B0:10:55:E2:A0:FA:92:4B
Certificate issuer:       /CN=ef51b3875262fa416d8eede9b9012e482e86e908
Certificate serial:       019DF486CF70E521815B8CDE0663DC324EDF
Authority key identifier: EF:51:B3:87:52:62:FA:41:6D:8E:ED:E9:B9:01:2E:48:2E:86:E9:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71Gzh1Ji-kFtju3puQEuSC6G6Qg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/cf9409-3935-43f5-a7ea-5584b853ed34/1/WE6dCj7x0gJX4CBgsBBV4qD6kks.asa
Signing time:             Mon 04 May 2026 19:46:08 +0000
ASPA not before:          Mon 04 May 2026 19:46:08 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            198038
Providers:                AS: 201640
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/cf9409-3935-43f5-a7ea-5584b853ed34/1/71Gzh1Ji-kFtju3puQEuSC6G6Qg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/cf9409-3935-43f5-a7ea-5584b853ed34/1/71Gzh1Ji-kFtju3puQEuSC6G6Qg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/71Gzh1Ji-kFtju3puQEuSC6G6Qg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:f4:86:cf:70:e5:21:81:5b:8c:de:06:63:dc:32:4e:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef51b3875262fa416d8eede9b9012e482e86e908
        Validity
            Not Before: May  4 19:46:08 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=584e9d0a3ef1d20257e02060b01055e2a0fa924b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e5:d0:85:36:38:6d:c2:b4:4f:00:d3:8b:00:
                    d3:60:10:bd:63:a2:6b:31:71:14:f6:54:7a:77:5a:
                    33:68:95:7f:b8:80:4f:e6:a5:2f:3d:7b:be:62:9b:
                    64:fd:97:04:06:66:9e:2e:cd:6e:e6:d1:b7:0a:0f:
                    30:2c:6b:82:a9:82:ca:e1:22:af:ee:bb:2f:6b:f6:
                    f0:b9:be:e0:98:65:8a:9e:1f:7a:f6:3c:89:89:0a:
                    81:45:2b:4c:9c:50:b1:72:53:90:3b:e0:97:a4:87:
                    1b:e4:f5:ba:be:4f:03:1d:63:62:77:5a:c7:8a:e9:
                    8a:18:6d:6a:5c:65:4b:29:57:4c:da:ed:a6:88:aa:
                    52:bd:1d:58:1f:86:bb:3d:90:60:94:e5:42:91:d9:
                    00:e4:c1:cc:ff:57:b3:2c:0c:27:6f:5e:5d:fb:e3:
                    17:be:e5:fa:f7:f4:ae:b6:a2:d5:82:37:53:87:42:
                    7f:eb:6a:8d:13:fc:64:e0:82:39:c4:e3:2a:a5:d5:
                    32:4b:55:18:46:99:5f:09:35:45:26:17:4f:6c:a3:
                    84:c8:7c:d6:8b:1e:bb:34:fd:80:1f:a3:af:e1:29:
                    96:d5:f1:2d:93:a7:46:d7:18:ae:4d:a5:05:3b:2a:
                    31:5f:a8:48:28:eb:fc:21:73:c0:4e:a8:1a:81:23:
                    e4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:4E:9D:0A:3E:F1:D2:02:57:E0:20:60:B0:10:55:E2:A0:FA:92:4B
            X509v3 Authority Key Identifier:
                keyid:EF:51:B3:87:52:62:FA:41:6D:8E:ED:E9:B9:01:2E:48:2E:86:E9:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71Gzh1Ji-kFtju3puQEuSC6G6Qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/cf9409-3935-43f5-a7ea-5584b853ed34/1/WE6dCj7x0gJX4CBgsBBV4qD6kks.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/cf9409-3935-43f5-a7ea-5584b853ed34/1/71Gzh1Ji-kFtju3puQEuSC6G6Qg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198038

    Signature Algorithm: sha256WithRSAEncryption
         55:d7:ad:c3:d3:68:f0:29:de:8b:b2:c4:65:2d:48:cb:60:53:
         b8:83:32:85:ad:43:2a:73:5d:cb:83:96:50:64:e5:58:f4:12:
         54:67:4f:91:99:04:d0:a2:c5:df:35:66:ad:28:65:49:e8:e6:
         fb:3f:70:3b:67:83:e6:f5:14:e4:15:51:d4:b7:ae:5e:8f:d9:
         e0:3e:a1:77:97:4b:8f:74:80:0c:c0:db:38:9f:16:6d:10:4c:
         d0:28:1b:c2:65:9e:38:50:b9:66:9a:cd:54:a3:e9:ab:b2:e6:
         f2:ee:1a:92:6c:91:6f:59:68:94:f3:0a:a4:4f:b0:a2:8e:c1:
         12:b8:9b:19:42:22:55:ad:20:66:6d:d0:9d:ad:1d:d4:9a:72:
         9b:2b:0e:95:04:91:e7:62:be:10:02:23:87:48:44:94:0b:f8:
         14:15:d0:20:9b:7f:93:20:24:77:86:f5:cf:a0:0a:9f:11:d3:
         a8:67:a0:e2:de:21:3f:13:d9:24:b7:fd:79:e4:2e:a7:60:a2:
         7f:5a:5d:86:1a:ac:db:93:07:e4:ad:8a:06:6d:e8:3d:44:66:
         e1:34:55:31:a6:72:37:bf:de:c1:21:b3:18:de:1c:c3:ca:88:
         e5:f8:bd:2e:ca:64:db:a1:71:38:03:aa:15:4b:ec:76:8b:e9:
         ad:a0:f8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:13:04 2026 by rpki-client