Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/jcc4yW3OL1E7Kj5I3mk5eumiQPQ.asa
File:                     jcc4yW3OL1E7Kj5I3mk5eumiQPQ.asa (raw, json)
Hash identifier:          NfneSVCezm9SCYMNzPCLoGYj9M9/pdm5oImHAQYysyI=
Subject key identifier:   8D:C7:38:C9:6D:CE:2F:51:3B:2A:3E:48:DE:69:39:7A:E9:A2:40:F4
Certificate issuer:       /CN=aa27f512b0a10265df2b346f143a645c382742be
Certificate serial:       01A0CAA021636E2C54089C8730A69EE728AF
Authority key identifier: AA:27:F5:12:B0:A1:02:65:DF:2B:34:6F:14:3A:64:5C:38:27:42:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qif1ErChAmXfKzRvFDpkXDgnQr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/jcc4yW3OL1E7Kj5I3mk5eumiQPQ.asa
Signing time:             Tue 22 Sep 2026 19:38:07 +0000
ASPA not before:          Tue 22 Sep 2026 19:38:07 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            51202
Providers:                AS: 5405
                          AS: 6204
                          AS: 6939
                          AS: 20562
                          AS: 24785
                          AS: 33891
                          AS: 34307
                          AS: 49559
                          AS: 50263
                          AS: 50629
                          AS: 58212
                          AS: 215828
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qif1ErChAmXfKzRvFDpkXDgnQr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:a0:21:63:6e:2c:54:08:9c:87:30:a6:9e:e7:28:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa27f512b0a10265df2b346f143a645c382742be
        Validity
            Not Before: Sep 22 19:38:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8dc738c96dce2f513b2a3e48de69397ae9a240f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:96:83:6b:73:b7:98:af:19:1a:9a:41:a6:1f:
                    cc:03:78:92:4c:84:0c:58:35:8b:4d:42:70:1d:bb:
                    4f:c7:fa:63:3c:f1:80:b8:6f:2f:e0:fe:68:d7:2f:
                    e7:b8:1d:eb:7b:a7:02:16:46:e1:68:9a:a0:37:a4:
                    f2:bd:e5:54:ee:57:8c:18:99:a3:e3:13:55:ac:f2:
                    6c:21:47:3e:b3:b3:f7:42:17:bc:d2:03:1b:ba:ab:
                    87:2a:45:74:38:f2:d0:bb:58:ca:15:56:c8:ab:22:
                    ae:2d:57:e9:c8:3c:14:bb:6f:ac:36:cf:99:47:ea:
                    cb:a3:3f:95:8e:9b:e7:e5:ba:0d:2f:f0:89:87:f1:
                    e3:5a:a5:42:56:d1:81:d2:3b:cc:6f:d2:00:dc:50:
                    7a:2f:98:ad:a5:74:59:a9:af:22:b3:4e:73:96:92:
                    3f:cc:12:58:a1:5a:f4:06:53:5b:15:87:57:63:af:
                    57:48:c9:4b:c6:28:60:bb:e9:a0:cc:e9:d3:0c:e1:
                    4a:4a:fd:95:e3:c7:dd:16:7c:4e:5f:f2:28:91:9a:
                    d1:3f:55:59:92:08:62:fa:e2:61:f9:89:49:01:2e:
                    00:3a:11:6e:d6:a9:01:66:f4:ef:bf:4b:75:42:6d:
                    c1:78:9d:12:27:05:ea:06:e6:9d:85:af:24:2a:32:
                    10:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C7:38:C9:6D:CE:2F:51:3B:2A:3E:48:DE:69:39:7A:E9:A2:40:F4
            X509v3 Authority Key Identifier:
                keyid:AA:27:F5:12:B0:A1:02:65:DF:2B:34:6F:14:3A:64:5C:38:27:42:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qif1ErChAmXfKzRvFDpkXDgnQr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/jcc4yW3OL1E7Kj5I3mk5eumiQPQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51202

    Signature Algorithm: sha256WithRSAEncryption
         6c:5c:dc:75:67:c4:14:89:c8:af:01:06:8d:25:6b:f6:c4:24:
         8f:ff:e1:dc:55:45:05:50:c7:f8:1f:8c:0a:01:d1:96:52:e5:
         a8:9a:31:34:7a:0b:5a:17:a3:66:68:b1:3d:f0:26:6f:87:01:
         ef:c9:5b:f2:a6:35:f7:77:df:a6:58:98:ed:45:e7:7e:1f:a2:
         b4:d0:de:9e:5a:23:5e:3a:7d:c3:77:cf:1f:c6:e1:28:2a:b2:
         31:39:25:01:6a:a3:ca:74:51:5e:6d:55:06:60:af:5c:44:f0:
         49:2e:5c:8b:5f:de:21:9c:90:a6:bb:6e:51:62:8e:ac:eb:50:
         ce:72:8f:ba:d6:18:79:7b:ae:6e:8c:d1:05:95:40:a3:12:21:
         79:6c:de:87:0e:7b:40:37:ef:57:67:a0:de:e7:b2:9d:fc:8e:
         66:fd:b9:f9:cb:16:1d:66:de:5d:96:c1:10:ff:da:28:36:fc:
         03:68:6c:21:7b:cc:cc:28:0f:fb:c4:38:93:a5:3d:7b:c8:d3:
         ae:6c:84:c4:1a:ae:9b:1e:1b:30:80:eb:3a:b9:77:0a:cd:3e:
         88:96:3d:d6:6a:d6:a9:8d:cd:23:6a:1b:d0:f8:2a:24:a0:16:
         bc:38:3b:02:76:1d:d5:9d:f7:00:0b:6c:b5:5e:36:9e:c7:6a:
         c9:ea:2b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:47:36 2026 by rpki-client