Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/UWpDxfB-ZuspD5wESUrL1kAVF7U.asa
File:                     UWpDxfB-ZuspD5wESUrL1kAVF7U.asa (raw, json)
Hash identifier:          KLnBS9RAg/FIurQ1lNJtMihGIo9/bb6dhIB8i9SVeek=
Subject key identifier:   51:6A:43:C5:F0:7E:66:EB:29:0F:9C:04:49:4A:CB:D6:40:15:17:B5
Certificate issuer:       /CN=4ad2a74634f86117dc13d1a9260470deee6f76b5
Certificate serial:       019F236903E8E06A7D28BA49E8D0C41FAB2A
Authority key identifier: 4A:D2:A7:46:34:F8:61:17:DC:13:D1:A9:26:04:70:DE:EE:6F:76:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/StKnRjT4YRfcE9GpJgRw3u5vdrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/UWpDxfB-ZuspD5wESUrL1kAVF7U.asa
Signing time:             Thu 02 Jul 2026 15:18:32 +0000
ASPA not before:          Thu 02 Jul 2026 15:18:32 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            198748
Providers:                AS: 12400
                          AS: 20473
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/StKnRjT4YRfcE9GpJgRw3u5vdrU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/StKnRjT4YRfcE9GpJgRw3u5vdrU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/StKnRjT4YRfcE9GpJgRw3u5vdrU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:69:03:e8:e0:6a:7d:28:ba:49:e8:d0:c4:1f:ab:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ad2a74634f86117dc13d1a9260470deee6f76b5
        Validity
            Not Before: Jul  2 15:18:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=516a43c5f07e66eb290f9c04494acbd6401517b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f8:2a:5a:9a:85:3a:45:20:54:a8:d1:1c:82:
                    a2:f4:61:9b:35:88:6f:e6:e7:53:77:be:c1:b8:de:
                    67:4f:41:e4:57:2a:15:25:56:63:ff:87:2f:59:a2:
                    58:3e:81:b5:0c:8b:fe:b0:cc:5c:e9:d1:1f:83:62:
                    86:12:5b:d1:1a:af:ec:ca:63:77:f2:28:98:ad:4f:
                    ef:4e:10:be:6b:d4:58:2c:f3:48:df:4d:39:0d:0b:
                    15:7b:ff:0b:5a:d6:39:8e:04:f9:1f:99:34:d1:f1:
                    c3:dd:2b:73:eb:a1:3c:4d:dd:6f:6a:08:c9:05:99:
                    15:33:37:26:7e:a9:7e:e4:66:ec:14:b0:a0:30:99:
                    6d:2d:40:85:4e:41:7e:21:3e:b1:52:27:05:14:83:
                    84:62:b5:50:8f:7b:6d:81:c7:62:3b:dc:67:ae:9f:
                    69:2d:82:09:d1:f7:f6:fe:23:ce:15:36:82:17:9c:
                    4f:40:c8:ce:e2:54:d0:fe:0b:c3:ea:10:bc:d5:cb:
                    c8:88:85:bf:56:a4:dd:bc:39:6c:da:3a:02:f7:41:
                    86:c6:e6:8e:02:27:d4:c7:f6:e9:42:cb:da:73:e1:
                    04:25:80:0b:7a:3c:34:d9:f3:aa:d9:73:42:7a:70:
                    a6:3d:ed:bc:9c:67:4f:ba:2d:cd:a6:b3:25:0a:40:
                    4f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:6A:43:C5:F0:7E:66:EB:29:0F:9C:04:49:4A:CB:D6:40:15:17:B5
            X509v3 Authority Key Identifier:
                keyid:4A:D2:A7:46:34:F8:61:17:DC:13:D1:A9:26:04:70:DE:EE:6F:76:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StKnRjT4YRfcE9GpJgRw3u5vdrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/UWpDxfB-ZuspD5wESUrL1kAVF7U.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/StKnRjT4YRfcE9GpJgRw3u5vdrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198748

    Signature Algorithm: sha256WithRSAEncryption
         67:2c:16:3e:58:53:bf:3b:cc:d8:c7:2f:81:63:19:59:4a:64:
         23:93:2f:1e:e4:cc:66:50:ea:e4:aa:a1:2e:1e:ee:b5:77:41:
         5d:90:61:0b:46:ed:ea:fd:d8:24:6e:17:db:ef:db:0a:e7:2c:
         b8:d4:03:b2:78:66:fb:a7:e6:f5:57:b7:7b:95:e5:25:05:65:
         85:56:50:bb:e0:4f:76:55:26:33:7b:de:c1:26:ec:0c:a7:18:
         16:d9:ec:a9:06:f7:d5:b4:4e:ed:39:09:bb:f1:b4:26:ed:c8:
         59:e3:21:8a:0f:56:8a:32:1a:60:f0:ac:78:50:63:99:17:19:
         df:5e:4c:53:30:94:27:56:f4:fc:a0:5e:44:4f:03:c7:51:61:
         89:c0:70:95:48:69:5a:94:b5:c6:fe:64:a0:b3:84:96:d7:66:
         e9:2a:dc:e6:ac:59:39:04:5b:57:07:d7:9b:9d:e3:e9:da:ae:
         48:93:13:6d:3f:b8:24:c4:5c:46:41:99:c2:52:0c:16:d9:d1:
         bd:bc:4d:9c:de:cd:fa:9d:70:9d:60:57:4a:ab:7c:a2:1a:fc:
         0c:ea:dc:bc:3d:30:f0:e1:9f:a6:da:ad:1e:9f:e3:ed:ca:50:
         19:7d:e7:e3:34:3a:8d:70:e3:b2:e0:3e:fa:06:40:f2:a9:8f:
         78:20:d1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:16 2026 by rpki-client