Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/5EQdNoP1UjaR-skKIKftXWhf5gA.asa
File:                     5EQdNoP1UjaR-skKIKftXWhf5gA.asa (raw, json)
Hash identifier:          C0fM4FVis692gMQk03hL76xbHc5A8aN2YCRCIVRcsWg=
Subject key identifier:   E4:44:1D:36:83:F5:52:36:91:FA:C9:0A:20:A7:ED:5D:68:5F:E6:00
Certificate issuer:       /CN=7d9e0a591cc52914cc700e3875ed75a91ec98c28
Certificate serial:       019D1ADAA5CE6A3967AFF6B9D087959DD7C7
Authority key identifier: 7D:9E:0A:59:1C:C5:29:14:CC:70:0E:38:75:ED:75:A9:1E:C9:8C:28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/5EQdNoP1UjaR-skKIKftXWhf5gA.asa
Signing time:             Mon 23 Mar 2026 13:20:30 +0000
ASPA not before:          Mon 23 Mar 2026 13:20:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            196954
Providers:                AS: 1299
                          AS: 5405
                          AS: 6939
                          AS: 33891
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 10:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:1a:da:a5:ce:6a:39:67:af:f6:b9:d0:87:95:9d:d7:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d9e0a591cc52914cc700e3875ed75a91ec98c28
        Validity
            Not Before: Mar 23 13:20:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e4441d3683f5523691fac90a20a7ed5d685fe600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:87:67:76:f8:f5:ea:ae:28:8d:13:ff:4f:f0:
                    56:36:20:33:b9:f5:6c:75:4e:66:91:a5:fd:ce:60:
                    d6:47:59:fc:16:3a:47:4c:4d:9c:36:a2:b8:e1:eb:
                    99:8a:ce:ea:c0:a1:35:a4:2e:20:26:57:77:1d:ea:
                    9b:c5:97:12:d8:6b:3a:74:34:2b:7d:3a:49:02:e3:
                    9d:2d:59:85:34:7d:fb:4b:b7:29:7f:dc:28:1e:c1:
                    30:a7:7c:e0:dc:ce:cc:62:a5:1d:67:72:73:ee:46:
                    5e:6b:15:c2:00:9d:cb:36:70:98:a3:d2:90:67:96:
                    f3:65:6c:f8:a3:03:35:6e:49:11:d2:48:b8:25:5c:
                    70:17:34:5f:8b:78:1c:34:62:ce:fa:48:c6:db:55:
                    02:b7:5a:c6:88:9b:41:50:cb:91:9c:ca:71:1b:d9:
                    ef:a8:7c:26:e8:7d:41:df:ae:32:01:c2:6f:3b:3b:
                    1f:74:21:51:22:82:90:7c:78:7c:f6:7b:ae:c7:68:
                    df:55:b7:2e:a7:f8:b9:2e:b6:ba:66:25:4a:3e:c3:
                    61:1e:0a:c0:df:d6:d4:4d:0e:89:3e:e3:5d:b6:24:
                    cd:43:a6:6e:d1:49:1d:aa:93:e9:03:93:93:33:e0:
                    91:7b:e9:72:5d:8d:7b:f7:0a:33:e9:5d:5f:87:b2:
                    fb:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:44:1D:36:83:F5:52:36:91:FA:C9:0A:20:A7:ED:5D:68:5F:E6:00
            X509v3 Authority Key Identifier:
                keyid:7D:9E:0A:59:1C:C5:29:14:CC:70:0E:38:75:ED:75:A9:1E:C9:8C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/5EQdNoP1UjaR-skKIKftXWhf5gA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  196954

    Signature Algorithm: sha256WithRSAEncryption
         0a:b9:47:3f:f2:8f:67:04:09:44:04:13:7b:da:67:2c:1a:2f:
         1a:74:e4:2f:37:6f:b6:c5:3f:e9:52:fa:1d:59:c4:33:11:dc:
         f0:75:98:81:8f:82:b0:bb:eb:e8:35:ae:91:77:3d:58:6c:10:
         21:c6:e8:f2:67:88:f7:77:89:1e:77:a7:b4:b8:de:4c:34:ce:
         32:30:25:94:d0:9f:bb:ca:2b:4d:c5:b0:80:b7:a1:0f:55:fd:
         54:fc:7a:36:8d:69:32:0e:2d:9b:48:27:d4:b0:69:d7:a2:76:
         89:85:6a:32:58:19:e6:76:80:24:29:f6:cb:ce:d2:5d:2b:5d:
         70:f7:4d:aa:7a:d2:5d:29:fe:67:0a:4c:ef:26:93:b7:d3:9a:
         52:40:39:20:8f:f7:95:a3:64:75:ef:52:f0:a8:3f:af:e8:cd:
         46:d2:40:bd:79:03:d6:f9:e8:8f:47:3e:30:60:52:aa:bd:92:
         ce:08:b5:01:4b:9c:e5:28:36:47:97:49:e9:b9:01:7b:55:e1:
         80:23:76:e7:4e:ee:17:91:1a:ff:df:5b:25:59:86:e5:1e:01:
         dd:28:c9:6c:61:5e:79:e8:1f:a3:44:26:32:ef:cf:be:6d:45:
         9c:5d:53:f5:20:b0:74:7f:2e:86:e0:6c:72:74:bc:1e:31:68:
         a2:11:19:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 20:06:30 2026 by rpki-client