Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/sSUeiTuTscB37GhFxmHCikkgWjE.asa
File:                     sSUeiTuTscB37GhFxmHCikkgWjE.asa (raw, json)
Hash identifier:          Kd5QYpqifnyO+2uyl3rYd5x9cU744aPeXurfnyMHjoA=
Subject key identifier:   B1:25:1E:89:3B:93:B1:C0:77:EC:68:45:C6:61:C2:8A:49:20:5A:31
Certificate issuer:       /CN=e0c649b66a19da2fec236b049dd122a0ef368b0f
Certificate serial:       019F190114ECF08837EE87BE67C30E8DA083
Authority key identifier: E0:C6:49:B6:6A:19:DA:2F:EC:23:6B:04:9D:D1:22:A0:EF:36:8B:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4MZJtmoZ2i_sI2sEndEioO82iw8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/sSUeiTuTscB37GhFxmHCikkgWjE.asa
Signing time:             Tue 30 Jun 2026 14:48:48 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:48 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            207061
Providers:                AS: 5405
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4MZJtmoZ2i_sI2sEndEioO82iw8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:14:ec:f0:88:37:ee:87:be:67:c3:0e:8d:a0:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0c649b66a19da2fec236b049dd122a0ef368b0f
        Validity
            Not Before: Jun 30 14:48:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b1251e893b93b1c077ec6845c661c28a49205a31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ab:06:59:53:83:a7:fe:dd:89:e5:7e:6f:24:
                    cd:8e:21:d8:19:53:3d:57:51:fb:99:3c:35:f4:ba:
                    aa:c4:be:67:a6:bf:ad:be:ca:01:33:e8:29:36:b3:
                    d7:51:73:73:ba:ff:56:b5:a2:c8:30:b3:35:95:dd:
                    1f:73:6f:04:bb:26:e0:43:60:48:41:5c:5f:e3:61:
                    bf:ab:8f:e6:b2:02:c9:39:8a:40:a0:57:e3:93:f2:
                    26:c8:bd:00:95:c2:e7:da:47:28:ed:3e:13:89:cb:
                    a8:8f:29:e8:50:28:13:1c:a6:f5:68:d5:de:8b:a4:
                    4d:37:99:04:ab:9b:af:9e:d8:d5:2f:44:ab:5d:14:
                    93:7f:f4:32:78:ef:9c:f0:46:3a:4f:b6:28:b1:7a:
                    49:6b:46:a5:13:cf:86:fb:d5:29:79:0f:ef:50:19:
                    f0:4d:59:55:80:86:c4:78:d6:cc:1d:0f:f9:cd:1e:
                    07:fa:d0:44:db:b6:0b:f7:09:ac:68:15:c7:3a:d1:
                    54:47:6a:30:28:ce:a2:5c:96:d0:60:10:ec:ac:0b:
                    20:f3:de:41:05:c0:3f:27:1c:1c:31:0c:a4:4a:f6:
                    f4:fc:43:30:58:ab:38:83:79:3d:96:c3:5c:69:d1:
                    4b:a1:ac:2d:6d:4a:69:ab:9f:b9:f7:0c:8b:55:5d:
                    f3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:25:1E:89:3B:93:B1:C0:77:EC:68:45:C6:61:C2:8A:49:20:5A:31
            X509v3 Authority Key Identifier:
                keyid:E0:C6:49:B6:6A:19:DA:2F:EC:23:6B:04:9D:D1:22:A0:EF:36:8B:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MZJtmoZ2i_sI2sEndEioO82iw8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/sSUeiTuTscB37GhFxmHCikkgWjE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207061

    Signature Algorithm: sha256WithRSAEncryption
         62:8f:57:90:7d:07:cd:f2:00:8c:ca:de:7f:60:4d:7c:65:93:
         ab:e4:7f:dc:fd:1b:91:b7:cd:25:3b:de:52:e0:94:7f:ef:62:
         d2:b6:5d:de:63:1c:6f:71:e5:e6:da:d0:e3:25:63:fe:79:cc:
         6c:9b:fe:0f:a0:6b:ea:3d:ef:f7:fa:77:ad:64:91:7d:6d:3b:
         9a:b3:68:35:0b:08:97:33:06:87:ea:5e:9a:d0:f3:5e:9e:8b:
         c3:00:62:b5:a9:96:12:51:95:2a:46:1c:e1:1b:cd:f2:f9:6b:
         59:e4:d9:92:7d:c2:79:96:ea:d2:07:a8:9e:4e:53:0d:cf:5e:
         a5:c3:36:d8:9b:75:dd:07:7e:75:cd:f7:fd:88:55:fd:e9:aa:
         33:4a:06:24:c6:db:7f:77:cf:c9:f0:b9:ef:5c:67:41:b1:ac:
         89:1a:81:c9:60:25:9c:de:58:9a:12:0c:00:6f:6d:2e:d4:82:
         32:fa:d0:fd:cc:28:7b:55:d7:1f:13:6d:b8:80:f9:69:1b:9c:
         fa:c7:e5:77:9c:f6:f1:9a:2a:b7:06:67:76:9f:6e:53:99:0a:
         d3:27:2a:f5:3f:67:82:e8:dd:0e:7d:8b:7c:1f:57:90:a4:4d:
         7c:3a:15:99:a2:45:72:5c:29:36:89:85:03:fb:4c:b8:c2:0d:
         77:97:ff:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:10 2026 by rpki-client