Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/873a70-7504-4308-9314-bf133af1edcc/1/dWRXL6GlJL5ZfmZx0cCdwJkYOrA.asa
File:                     dWRXL6GlJL5ZfmZx0cCdwJkYOrA.asa (raw, json)
Hash identifier:          4yNEgZE5634EFi1QHhyenk0Y/tnpyasW7YYGDpJwOeE=
Subject key identifier:   75:64:57:2F:A1:A5:24:BE:59:7E:66:71:D1:C0:9D:C0:99:18:3A:B0
Certificate issuer:       /CN=d086aa1da02f6701180b2c0341d60307f14a2cbe
Certificate serial:       01A188B648A5F5C5B7D7FC6751EB044F00AC
Authority key identifier: D0:86:AA:1D:A0:2F:67:01:18:0B:2C:03:41:D6:03:07:F1:4A:2C:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0IaqHaAvZwEYCywDQdYDB_FKLL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/873a70-7504-4308-9314-bf133af1edcc/1/dWRXL6GlJL5ZfmZx0cCdwJkYOrA.asa
Signing time:             Thu 29 Oct 2026 17:30:09 +0000
ASPA not before:          Thu 29 Oct 2026 17:30:09 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200097
Providers:                AS: 174
                          AS: 28917
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/873a70-7504-4308-9314-bf133af1edcc/1/0IaqHaAvZwEYCywDQdYDB_FKLL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/873a70-7504-4308-9314-bf133af1edcc/1/0IaqHaAvZwEYCywDQdYDB_FKLL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0IaqHaAvZwEYCywDQdYDB_FKLL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 10:37:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:88:b6:48:a5:f5:c5:b7:d7:fc:67:51:eb:04:4f:00:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d086aa1da02f6701180b2c0341d60307f14a2cbe
        Validity
            Not Before: Oct 29 17:30:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7564572fa1a524be597e6671d1c09dc099183ab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8a:46:82:b0:7f:46:09:b1:8c:a0:42:91:b2:
                    f0:7d:ab:f7:0b:0a:90:53:fc:fb:29:43:66:f2:e5:
                    dc:c2:02:85:3c:3a:28:a2:e4:b1:96:89:77:67:65:
                    91:a6:c0:66:77:7c:32:4e:5c:ce:99:4a:99:eb:bd:
                    96:ae:d2:95:e9:74:6a:a0:91:4f:a0:f9:67:e5:8b:
                    4e:ea:f0:d5:81:5c:07:6a:b3:4f:83:b7:5d:c8:b1:
                    b0:6f:13:92:03:bb:f3:3a:7e:cc:ca:34:ce:c9:24:
                    0c:80:95:1e:e6:a1:9c:b2:28:01:aa:4e:1f:4d:c6:
                    4b:4a:b4:fc:d0:2b:3e:37:d5:fa:24:7d:d8:9f:ba:
                    89:57:d9:b3:b3:25:3c:7f:f6:07:98:e1:5b:8d:1b:
                    5a:5e:7e:60:0e:41:16:92:22:99:08:39:8f:b4:fa:
                    6a:4a:1a:8d:2b:d0:4a:4e:fd:fb:3e:bc:88:b8:31:
                    e8:12:64:ff:59:b5:15:b4:92:27:05:4e:0b:4f:3d:
                    39:18:a5:e3:37:f1:e2:d2:2f:2d:3f:78:6b:83:c7:
                    2f:bc:be:00:7e:e9:da:1a:59:86:32:68:bc:aa:55:
                    be:f5:69:49:01:b3:d3:21:3e:cc:5a:0f:1a:8d:f4:
                    eb:75:32:ef:15:a7:10:18:30:0c:c4:b2:c8:cf:8a:
                    d4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:64:57:2F:A1:A5:24:BE:59:7E:66:71:D1:C0:9D:C0:99:18:3A:B0
            X509v3 Authority Key Identifier:
                keyid:D0:86:AA:1D:A0:2F:67:01:18:0B:2C:03:41:D6:03:07:F1:4A:2C:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0IaqHaAvZwEYCywDQdYDB_FKLL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/873a70-7504-4308-9314-bf133af1edcc/1/dWRXL6GlJL5ZfmZx0cCdwJkYOrA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/873a70-7504-4308-9314-bf133af1edcc/1/0IaqHaAvZwEYCywDQdYDB_FKLL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200097

    Signature Algorithm: sha256WithRSAEncryption
         9d:7a:5d:6e:9b:49:ab:fe:3c:d1:31:f8:7e:fe:27:57:b3:09:
         9b:c1:10:f3:59:90:18:65:c7:b9:55:86:34:0d:37:f1:9e:18:
         ba:0f:b1:7d:38:eb:cd:f6:ad:90:81:b3:2f:9f:f3:5f:70:6c:
         db:8c:f2:42:77:a2:4a:d8:89:45:0e:aa:16:69:3e:af:c5:15:
         75:fd:f4:32:7f:b9:51:6d:e3:72:d2:b7:46:c4:ed:8d:d0:7f:
         78:dc:99:ec:5b:23:35:02:8a:47:6e:10:3f:fe:8c:0c:ab:da:
         d7:80:9b:bc:45:1c:31:80:fe:5a:c0:a4:b1:49:21:00:17:32:
         e6:55:21:1e:32:f6:ff:fb:be:64:0f:0f:69:aa:aa:53:6b:9f:
         af:60:9e:7a:4f:2a:f3:6d:73:0f:20:f7:27:fd:c1:e4:0d:5c:
         b4:12:a0:91:f1:48:44:83:47:df:62:7e:e9:f8:f5:51:d8:ae:
         99:8e:83:01:57:b3:6b:45:bb:16:99:b1:bb:3d:6c:c3:ad:4c:
         9f:6d:f4:e1:42:94:87:0a:65:b6:b4:d6:ea:e8:e7:57:15:de:
         8a:7d:12:01:7c:18:7f:41:5f:93:26:10:0d:0b:c6:01:f0:df:
         d5:b7:35:48:ec:6f:f6:d7:43:53:b4:95:f5:bf:14:a2:a0:e9:
         28:50:93:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:55:45 2026 by rpki-client