Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/zTpF3FSMs_qDjEf4CKvMWuVC_2g.asa
File:                     zTpF3FSMs_qDjEf4CKvMWuVC_2g.asa (raw, json)
Hash identifier:          s24/aX3H/IMCq17F9HBTclHDEpfjAqO3H7tgCV+Qz94=
Subject key identifier:   CD:3A:45:DC:54:8C:B3:FA:83:8C:47:F8:08:AB:CC:5A:E5:42:FF:68
Certificate issuer:       /CN=cf6843ce15229a8023d97fa27a37e59278b2bfd7
Certificate serial:       019F190108CAD244E43EAA2B2A4D48F07271
Authority key identifier: CF:68:43:CE:15:22:9A:80:23:D9:7F:A2:7A:37:E5:92:78:B2:BF:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z2hDzhUimoAj2X-iejflkniyv9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/zTpF3FSMs_qDjEf4CKvMWuVC_2g.asa
Signing time:             Tue 30 Jun 2026 14:48:45 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:45 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            197944
Providers:                AS: 12778
                          AS: 198524
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z2hDzhUimoAj2X-iejflkniyv9c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:08:ca:d2:44:e4:3e:aa:2b:2a:4d:48:f0:72:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf6843ce15229a8023d97fa27a37e59278b2bfd7
        Validity
            Not Before: Jun 30 14:48:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=cd3a45dc548cb3fa838c47f808abcc5ae542ff68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e5:7d:52:b2:13:ef:ff:fc:de:72:38:9c:25:
                    48:e7:35:f4:53:d4:d1:ee:74:06:84:11:84:5f:16:
                    a1:dc:a7:94:66:7d:1e:16:e7:dc:7f:ae:fc:c8:61:
                    41:c4:5e:aa:7b:6e:9a:e2:a5:14:ea:8f:28:37:c4:
                    0a:32:df:8f:fd:82:fb:a6:f0:9b:c8:4d:77:cc:c0:
                    aa:93:b6:ae:ba:0e:1d:d5:da:c4:c9:1f:41:ba:37:
                    ff:84:e7:9b:a6:b1:03:4c:5b:f5:6b:50:39:9b:1c:
                    5b:01:ce:e9:5a:40:60:c2:19:60:56:7b:ca:8a:09:
                    d1:01:b6:04:9e:2f:79:40:10:de:68:8c:33:83:7b:
                    c6:97:e5:11:39:f6:4e:c7:91:54:30:f2:df:b2:de:
                    5c:6f:13:de:00:19:cf:ce:64:bd:e3:d1:5a:14:97:
                    42:ea:7f:7e:fb:8b:aa:89:d2:7b:ee:b1:d7:e6:70:
                    b6:25:8f:f3:0c:78:ce:68:23:1c:0f:d6:4e:66:f3:
                    0f:9c:50:78:8c:c9:8b:b9:8f:e6:c1:75:a4:1e:49:
                    c7:5e:15:5a:35:99:28:4f:34:2b:0b:91:81:3b:f7:
                    24:02:0e:b2:4b:6c:3b:c2:e5:64:44:81:7a:7e:f7:
                    f7:4c:16:48:4d:7c:75:44:76:70:05:09:80:2c:3c:
                    23:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:3A:45:DC:54:8C:B3:FA:83:8C:47:F8:08:AB:CC:5A:E5:42:FF:68
            X509v3 Authority Key Identifier:
                keyid:CF:68:43:CE:15:22:9A:80:23:D9:7F:A2:7A:37:E5:92:78:B2:BF:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2hDzhUimoAj2X-iejflkniyv9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/zTpF3FSMs_qDjEf4CKvMWuVC_2g.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197944

    Signature Algorithm: sha256WithRSAEncryption
         de:2e:fc:02:b9:9a:88:03:43:2a:b0:82:9c:1d:f0:98:e5:b2:
         ed:79:d3:8e:f8:71:61:e3:6b:bd:72:91:8a:17:60:77:01:cd:
         c9:01:ad:9d:35:06:20:9f:4e:8a:3c:03:06:1d:7d:cc:50:e5:
         ca:52:da:4c:88:07:c3:f3:dd:e7:cf:b0:8a:dc:f0:cd:9f:62:
         46:e2:0e:16:4f:d9:a8:33:72:11:ea:0b:2d:39:da:d2:7e:59:
         90:0e:90:b6:a0:b4:1e:3b:0a:1b:12:1b:b5:22:8d:88:64:bb:
         d6:3f:30:25:bd:08:25:f7:65:d6:c2:1e:77:17:e1:4f:00:af:
         7f:b6:fc:2b:d6:b6:df:b8:55:46:70:ae:5e:fd:be:6c:04:57:
         b8:6e:fe:f6:98:a1:76:63:2a:18:69:08:d7:d1:86:b0:19:bb:
         c3:a5:dd:84:f3:6b:14:5f:2b:a5:50:5d:fc:e9:af:6c:95:16:
         c8:4d:e4:63:21:15:a8:7a:41:4e:cb:e2:62:c3:a4:5a:d8:3d:
         6e:ac:bc:e5:a0:37:28:98:08:d7:ae:02:c9:99:75:86:23:73:
         27:6e:7b:bd:9f:5a:05:2e:e6:6f:43:1e:39:e7:4b:88:78:45:
         72:3f:cf:c3:73:2d:7f:6c:c4:5c:bd:d6:f6:0d:3e:51:ca:c1:
         39:da:bc:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 18:57:47 2026 by rpki-client