Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/podK66tMt3lZvNdvpbXgIxZ0Kgo.asa
File:                     podK66tMt3lZvNdvpbXgIxZ0Kgo.asa (raw, json)
Hash identifier:          7bkRGWpwII4FGKdhAF8hQRW0M96LDy/oByw+whJAwFY=
Subject key identifier:   A6:87:4A:EB:AB:4C:B7:79:59:BC:D7:6F:A5:B5:E0:23:16:74:2A:0A
Certificate issuer:       /CN=744aea53ef60f8a8a9345e582982a9a59bc13767
Certificate serial:       019F19012B6306A2B9EF16BEAA8F20E05711
Authority key identifier: 74:4A:EA:53:EF:60:F8:A8:A9:34:5E:58:29:82:A9:A5:9B:C1:37:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/podK66tMt3lZvNdvpbXgIxZ0Kgo.asa
Signing time:             Tue 30 Jun 2026 14:48:54 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            197301
Providers:                AS: 1299
                          AS: 31027
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:2b:63:06:a2:b9:ef:16:be:aa:8f:20:e0:57:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=744aea53ef60f8a8a9345e582982a9a59bc13767
        Validity
            Not Before: Jun 30 14:48:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a6874aebab4cb77959bcd76fa5b5e02316742a0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8b:27:62:26:43:4c:e2:e6:ae:dd:24:fc:7a:
                    d4:01:47:7a:37:27:e6:79:d6:aa:66:6c:4c:86:eb:
                    3f:23:43:04:93:1b:8c:61:2d:a4:d4:1a:26:c9:3c:
                    e9:d5:f5:92:5f:87:2c:22:50:e7:09:a1:9c:b3:46:
                    3f:6c:33:11:6e:c1:33:38:b3:de:2d:25:cf:dc:18:
                    cc:40:44:99:8e:75:80:ca:9d:bd:75:de:cb:7b:1c:
                    66:b6:99:41:04:e8:6e:5a:c6:8a:4e:0e:aa:e8:3b:
                    4a:49:3e:31:45:18:45:13:b5:9b:23:14:30:f6:a8:
                    ef:8a:fd:f2:2d:9d:ee:82:83:0e:7d:20:ff:73:28:
                    aa:6d:aa:a3:69:d9:08:fc:6a:04:46:4b:08:a6:ec:
                    2c:2a:48:24:6b:17:14:f6:8d:33:00:d3:d5:02:dd:
                    e1:6e:28:b0:6d:ff:c5:d3:92:9f:9b:41:f0:13:1e:
                    ab:9f:b5:db:4c:d8:f3:2b:3a:0a:41:e1:07:c8:48:
                    4b:3f:60:bf:9c:0d:17:5f:c2:41:c1:f8:f7:07:73:
                    4c:5f:54:84:7e:6a:82:b5:36:ad:f4:14:fd:95:58:
                    fc:43:0a:6d:d8:66:7b:aa:17:6a:74:7e:5f:95:bf:
                    06:6b:04:e7:05:04:1e:f6:ec:cd:1f:04:59:f2:ba:
                    7e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:87:4A:EB:AB:4C:B7:79:59:BC:D7:6F:A5:B5:E0:23:16:74:2A:0A
            X509v3 Authority Key Identifier:
                keyid:74:4A:EA:53:EF:60:F8:A8:A9:34:5E:58:29:82:A9:A5:9B:C1:37:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/podK66tMt3lZvNdvpbXgIxZ0Kgo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197301

    Signature Algorithm: sha256WithRSAEncryption
         1a:a0:48:31:77:07:4a:4a:d3:20:cb:3c:b8:2e:fa:0a:cb:fe:
         64:e3:be:01:68:11:a8:74:ad:bf:83:9e:55:67:40:de:eb:49:
         6f:54:8c:4b:34:86:85:8e:f6:12:57:16:69:ab:38:ac:b7:d8:
         fd:ae:2d:a1:db:f8:0e:13:9e:9e:a4:97:a3:a6:f4:79:65:54:
         99:85:32:bb:be:24:43:86:d0:2c:df:b5:9e:09:83:3f:1d:44:
         ca:c5:a6:8f:2c:4e:b8:73:49:f7:1e:02:6e:99:16:c6:34:79:
         57:6d:68:e5:97:3e:d3:c2:aa:43:ff:8a:58:47:99:18:46:15:
         ae:57:2a:ad:97:e2:80:0b:9e:07:7d:2f:55:ef:40:5e:66:86:
         af:18:e0:75:8d:d3:c1:17:21:6d:d4:83:fb:6a:82:c4:1c:ba:
         72:9e:dc:4d:d3:42:31:cf:c8:76:6d:b6:70:25:2e:2d:6f:69:
         39:ba:cf:56:77:62:f4:d9:76:92:fe:20:48:c2:ad:17:f3:76:
         5f:f5:fc:08:17:66:7a:17:1a:e9:ac:22:22:86:3c:a5:1c:df:
         e9:a9:46:ba:10:a8:6e:8b:e1:1f:07:c6:b3:01:81:e9:c1:b4:
         df:4a:fb:f5:7c:47:0a:70:a1:2f:2b:42:88:8d:dc:9a:72:ac:
         7e:ed:9c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:00:19 2026 by rpki-client