Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/TcaCPZlW9b7nUjd0B-e1yd0zAE8.asa
File:                     TcaCPZlW9b7nUjd0B-e1yd0zAE8.asa (raw, json)
Hash identifier:          Oy2UJlXOZ8xOLUsWDNeaDlW0wd+hjDN8NHEzf1/ZIt0=
Subject key identifier:   4D:C6:82:3D:99:56:F5:BE:E7:52:37:74:07:E7:B5:C9:DD:33:00:4F
Certificate issuer:       /CN=611b38eea3bc7073f6f4aa4d21ed413665d7ca27
Certificate serial:       019F36CAB254FB20C2A83B71A6E37AFB64D2
Authority key identifier: 61:1B:38:EE:A3:BC:70:73:F6:F4:AA:4D:21:ED:41:36:65:D7:CA:27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YRs47qO8cHP29KpNIe1BNmXXyic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/TcaCPZlW9b7nUjd0B-e1yd0zAE8.asa
Signing time:             Mon 06 Jul 2026 09:38:01 +0000
ASPA not before:          Mon 06 Jul 2026 09:38:01 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            219291
Providers:                AS: 49673
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/YRs47qO8cHP29KpNIe1BNmXXyic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/YRs47qO8cHP29KpNIe1BNmXXyic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YRs47qO8cHP29KpNIe1BNmXXyic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:36:ca:b2:54:fb:20:c2:a8:3b:71:a6:e3:7a:fb:64:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=611b38eea3bc7073f6f4aa4d21ed413665d7ca27
        Validity
            Not Before: Jul  6 09:38:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4dc6823d9956f5bee752377407e7b5c9dd33004f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e6:31:b4:38:b4:0a:c8:89:13:86:7b:9f:b3:
                    4b:79:31:9c:9a:a8:fe:1d:0f:ea:80:09:5c:63:68:
                    4a:33:e7:e2:ec:bd:57:24:65:e4:b9:ba:09:74:f1:
                    e3:0e:db:57:8c:df:e1:ca:ca:9b:e6:94:e6:d3:2d:
                    86:85:33:24:24:d0:84:1f:5d:6e:85:9c:cb:48:22:
                    ca:28:79:06:bc:01:c9:a1:41:0c:5d:38:1f:91:38:
                    72:b2:a9:eb:6c:77:98:f8:4a:8a:e9:95:0a:d1:86:
                    d5:40:0f:b7:54:87:bd:53:47:92:aa:f7:29:a7:9c:
                    5b:7f:42:b6:96:53:b4:2e:91:9d:20:d4:c0:20:ef:
                    e6:fa:32:42:cc:99:2b:82:77:e3:7e:06:51:a9:4f:
                    0a:61:f9:c0:44:f1:4c:ae:ac:b5:9d:d2:14:55:d0:
                    c3:fb:43:34:8e:52:2c:5d:af:b0:76:2d:31:d2:ef:
                    2e:73:cc:b3:93:b3:01:9c:96:66:e8:f3:04:cc:4d:
                    f4:84:f6:89:f1:01:b8:5b:76:08:7f:dc:76:3d:e8:
                    84:04:70:0d:93:94:6d:18:8d:9d:1a:2a:de:38:2b:
                    1f:b3:c1:3b:99:31:d4:00:4f:bc:ec:6a:b3:5d:85:
                    b9:d1:ba:af:3c:de:a6:e4:6f:9b:54:42:28:b1:76:
                    90:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C6:82:3D:99:56:F5:BE:E7:52:37:74:07:E7:B5:C9:DD:33:00:4F
            X509v3 Authority Key Identifier:
                keyid:61:1B:38:EE:A3:BC:70:73:F6:F4:AA:4D:21:ED:41:36:65:D7:CA:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRs47qO8cHP29KpNIe1BNmXXyic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/TcaCPZlW9b7nUjd0B-e1yd0zAE8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/YRs47qO8cHP29KpNIe1BNmXXyic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  219291

    Signature Algorithm: sha256WithRSAEncryption
         64:53:1a:e0:97:f1:15:dc:45:22:65:1d:63:58:bd:0f:5a:8d:
         13:74:c1:07:6e:ab:1b:09:eb:76:3a:97:81:12:5a:8c:04:34:
         71:fe:5e:fa:59:55:c3:87:7e:26:24:47:b7:cd:60:52:06:9f:
         30:eb:1e:a6:9f:5e:0a:44:8d:ca:67:a0:d2:8f:73:e8:e6:b3:
         d5:0e:22:7e:a6:f1:2c:7b:bf:25:9b:43:c9:ea:03:b7:fc:9b:
         88:f2:ca:d8:2d:24:0d:94:9e:e5:b7:32:11:f9:fc:bf:fe:90:
         0b:e9:08:66:fe:d1:a3:e1:31:96:c2:f1:91:da:6f:3c:94:eb:
         5f:e1:76:35:25:c6:93:11:c7:57:ad:dd:a2:2e:ae:20:a9:4c:
         4e:43:07:75:49:fa:c2:c9:94:c8:37:ca:43:57:47:4d:52:d1:
         38:f4:1b:26:2e:46:a6:3b:4a:81:36:b3:d2:1c:e0:3d:db:17:
         e2:ac:c4:c4:4b:20:3b:9c:c5:ea:58:02:bd:68:f0:f9:d4:08:
         e1:a5:d8:3f:b3:fb:4b:c1:e3:05:b3:59:e4:9b:b1:0d:6f:5b:
         89:8f:8c:3b:41:b4:d2:81:20:c8:03:b0:7c:02:38:4f:ae:f2:
         a4:74:0c:9b:34:6e:66:08:5c:65:bd:52:a1:24:65:d2:55:c5:
         b5:6a:b7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 18:59:31 2026 by rpki-client