Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/KWrdKwj-aGY8MOfcLeQBvHUUMrM.asa
File:                     KWrdKwj-aGY8MOfcLeQBvHUUMrM.asa (raw, json)
Hash identifier:          93izR3AJpKCj0JffNnplF5XSeltS5qXXfEr4WnEs8yw=
Subject key identifier:   29:6A:DD:2B:08:FE:68:66:3C:30:E7:DC:2D:E4:01:BC:75:14:32:B3
Certificate issuer:       /CN=1c028171c1e52c8acad4db29b92d216b332f0320
Certificate serial:       019F7A71ECA12C0E29A79C8CD1A6DD97FB6A
Authority key identifier: 1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/KWrdKwj-aGY8MOfcLeQBvHUUMrM.asa
Signing time:             Sun 19 Jul 2026 12:55:14 +0000
ASPA not before:          Sun 19 Jul 2026 12:55:14 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            210814
Providers:                AS: 16276
                          AS: 23470
                          AS: 24875
                          AS: 44620
                          AS: 51722
                          AS: 211421
                          AS: 212027
                          AS: 215120
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:7a:71:ec:a1:2c:0e:29:a7:9c:8c:d1:a6:dd:97:fb:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c028171c1e52c8acad4db29b92d216b332f0320
        Validity
            Not Before: Jul 19 12:55:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=296add2b08fe68663c30e7dc2de401bc751432b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b2:ee:e4:99:31:40:2f:d4:5d:8d:33:02:52:
                    e2:2f:4c:ca:0c:92:55:e2:b6:e5:bd:ee:56:15:c6:
                    fb:68:63:8f:82:78:bd:9b:8c:a0:4f:8c:1c:f0:e6:
                    06:79:49:f9:70:12:a4:44:38:18:0f:f9:c8:ec:74:
                    0c:3a:00:b3:de:db:fe:c7:de:cf:13:8c:40:dd:2e:
                    34:5b:b5:e5:f3:0a:dd:b2:0c:5f:e1:8d:c2:fc:f6:
                    78:2b:e2:eb:9e:24:0e:14:30:9b:2d:58:21:93:14:
                    e7:c7:3b:ab:d8:91:e4:21:8f:3e:87:4e:f0:80:af:
                    ab:4e:2c:2d:d6:99:d6:b0:04:13:08:f5:75:34:78:
                    b1:47:d5:cc:55:f7:46:f1:8a:48:38:68:6a:d7:bc:
                    ef:00:78:cb:c1:3a:82:82:e8:5d:a8:dc:bd:75:11:
                    76:57:87:6f:89:6d:61:a4:e1:9f:73:70:ac:2b:c3:
                    96:d6:a6:28:42:32:fa:2c:e8:68:f8:7c:c7:24:d0:
                    ae:c7:24:95:cd:df:93:3d:c4:0d:11:5d:f4:f0:fd:
                    9e:19:8c:bd:c2:2c:0d:dd:4b:f5:29:81:6d:05:b4:
                    10:0c:18:bc:b0:45:51:ed:fa:6c:c5:11:95:9c:fb:
                    0c:db:97:76:74:8d:bb:2a:03:d7:6c:eb:3a:be:01:
                    9a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:6A:DD:2B:08:FE:68:66:3C:30:E7:DC:2D:E4:01:BC:75:14:32:B3
            X509v3 Authority Key Identifier:
                keyid:1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/KWrdKwj-aGY8MOfcLeQBvHUUMrM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210814

    Signature Algorithm: sha256WithRSAEncryption
         0d:4b:5e:f8:83:60:c1:00:43:e7:b1:10:fe:a7:6f:3a:9b:95:
         87:d8:2f:d7:2f:4e:e4:c1:af:dc:f4:ef:e1:6e:ca:97:4d:c7:
         aa:ac:79:ba:2c:af:59:f2:c1:1c:30:0c:10:5e:52:47:31:bd:
         1c:7d:5f:5e:45:7c:f5:a4:d0:1a:b1:cf:90:aa:2c:20:4a:8b:
         01:de:a8:f4:42:9d:71:ac:c3:44:7a:f7:1d:ad:07:41:30:88:
         5b:cd:2f:61:d1:28:75:21:f6:d9:a2:86:d4:f8:d4:c7:5c:b6:
         71:13:0c:45:36:73:c0:66:82:96:2d:d6:69:19:e7:36:08:fe:
         74:1f:8c:41:8e:25:88:83:01:7b:85:cd:3f:61:76:ed:84:3e:
         1b:cc:82:1c:81:7b:2f:0c:b1:d3:16:5b:72:eb:f2:71:ae:ec:
         bc:de:8b:cd:b3:a7:e5:80:f4:fa:50:08:dd:ef:21:2c:a1:a1:
         e2:cb:8e:af:e7:2c:e7:21:f6:5f:12:b5:1b:cc:06:f9:34:b7:
         21:d7:1e:e3:58:1d:4f:62:4e:da:20:8c:69:29:2a:76:bb:91:
         48:65:89:37:71:d8:e7:2f:04:10:d8:6e:c8:e7:35:52:40:88:
         3b:4b:57:d0:f0:36:11:9f:81:b5:f5:c2:a3:a6:b4:1b:ac:48:
         ac:7b:30:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:49:48 2026 by rpki-client