Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/e22be2-3d59-48e1-a3a9-5055ef84a0de/1/twJdhLz6_L4VH5UksDeF_-GsnZA.asa
File:                     twJdhLz6_L4VH5UksDeF_-GsnZA.asa (raw, json)
Hash identifier:          LhnLT0uLz9ZcPLhQjsyXGMaQiLIIk+pMWZ26XxT0AQQ=
Subject key identifier:   B7:02:5D:84:BC:FA:FC:BE:15:1F:95:24:B0:37:85:FF:E1:AC:9D:90
Certificate issuer:       /CN=12442a984d406b3630437e2aec9c530d0e1b95c8
Certificate serial:       01A0BF1210001704207206E8B85C71896A6D
Authority key identifier: 12:44:2A:98:4D:40:6B:36:30:43:7E:2A:EC:9C:53:0D:0E:1B:95:C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EkQqmE1AazYwQ34q7JxTDQ4blcg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/e22be2-3d59-48e1-a3a9-5055ef84a0de/1/twJdhLz6_L4VH5UksDeF_-GsnZA.asa
Signing time:             Sun 20 Sep 2026 13:47:07 +0000
ASPA not before:          Sun 20 Sep 2026 13:47:07 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            202358
Providers:                AS: 215147
                          AS: 219418
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/e22be2-3d59-48e1-a3a9-5055ef84a0de/1/EkQqmE1AazYwQ34q7JxTDQ4blcg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/e22be2-3d59-48e1-a3a9-5055ef84a0de/1/EkQqmE1AazYwQ34q7JxTDQ4blcg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EkQqmE1AazYwQ34q7JxTDQ4blcg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bf:12:10:00:17:04:20:72:06:e8:b8:5c:71:89:6a:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12442a984d406b3630437e2aec9c530d0e1b95c8
        Validity
            Not Before: Sep 20 13:47:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b7025d84bcfafcbe151f9524b03785ffe1ac9d90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5c:3f:74:64:30:74:b1:44:24:6a:89:63:3e:
                    21:d9:39:ac:25:eb:44:33:f2:a2:75:9a:00:42:53:
                    cb:f4:9d:df:02:e7:ad:e4:ae:f5:31:27:63:8a:4b:
                    ea:b5:cc:b5:1b:f1:59:b6:86:a3:c7:ca:b5:8d:53:
                    d3:a2:9d:bd:16:4b:ce:25:c8:72:0e:e2:f7:bd:0e:
                    b7:38:3a:60:6b:e7:00:4e:2f:39:50:97:69:52:a1:
                    97:2d:f2:73:a0:52:52:35:2d:39:99:0d:de:e9:43:
                    79:d2:f8:8f:43:3b:43:99:28:91:5c:1c:64:5b:da:
                    01:0b:70:dc:7c:9a:0d:bf:25:b6:41:db:da:e0:39:
                    e8:c8:be:89:2b:88:49:b6:9f:49:e5:3b:e6:78:df:
                    ee:6b:2e:d2:81:4c:3c:eb:01:77:cb:26:a9:e8:0f:
                    cb:26:77:06:f7:a9:c0:32:f2:ab:e6:1c:68:0e:73:
                    44:9b:14:c5:cb:f5:bc:5b:7f:f9:3f:33:b6:d6:3d:
                    9b:2c:9c:0b:aa:f2:2d:aa:d2:df:15:19:a6:73:50:
                    be:03:3c:66:04:f6:f1:45:bc:2d:68:af:bd:2d:4f:
                    89:f0:72:c2:4f:a3:ae:b7:47:7d:05:8d:73:fe:65:
                    1d:86:c4:fe:39:8a:27:7d:aa:b0:7c:12:c8:94:b3:
                    c1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:02:5D:84:BC:FA:FC:BE:15:1F:95:24:B0:37:85:FF:E1:AC:9D:90
            X509v3 Authority Key Identifier:
                keyid:12:44:2A:98:4D:40:6B:36:30:43:7E:2A:EC:9C:53:0D:0E:1B:95:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkQqmE1AazYwQ34q7JxTDQ4blcg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e22be2-3d59-48e1-a3a9-5055ef84a0de/1/twJdhLz6_L4VH5UksDeF_-GsnZA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e22be2-3d59-48e1-a3a9-5055ef84a0de/1/EkQqmE1AazYwQ34q7JxTDQ4blcg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202358

    Signature Algorithm: sha256WithRSAEncryption
         23:dd:f1:18:1b:1a:10:30:14:d3:a6:d1:7e:2b:b8:a8:4a:20:
         b6:61:31:d3:e2:73:ab:c2:45:c0:ba:f8:38:d4:00:fb:bb:76:
         45:ed:fe:1f:14:91:6f:c9:a6:d3:9c:ff:3c:fa:be:6c:db:f0:
         8d:23:8a:2d:f4:28:3e:46:03:67:1d:d0:46:e7:87:35:b1:3a:
         95:27:8e:41:84:87:d3:c1:9a:4f:7d:10:2b:55:ea:c7:42:3f:
         5c:51:a9:2c:61:ee:53:2b:03:fa:c3:5a:d8:f0:4e:2a:30:cf:
         a8:80:e9:f4:1a:ad:f0:87:36:2f:20:ab:b7:e9:52:c2:00:6a:
         e1:5d:c1:2d:8e:5f:2b:17:04:d2:ec:d6:82:1b:84:d0:f5:63:
         22:a9:87:6a:03:0e:56:a8:56:01:42:a0:34:fb:a0:4f:92:92:
         c3:57:aa:ce:0d:b5:70:9e:6a:9f:c2:de:51:4c:de:b7:27:cc:
         58:48:0b:a5:7f:42:2d:e7:cc:ba:c4:15:db:4a:66:6b:10:2d:
         1b:fa:bd:a8:e9:d4:83:5f:79:93:df:ff:eb:33:13:8d:4d:91:
         ce:8c:a3:a8:7b:6c:c1:c0:17:85:84:00:10:05:1b:bd:1e:5b:
         6c:35:6e:12:bb:5b:25:31:06:de:1e:70:b6:84:27:0f:4e:86:
         89:9b:e9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:00:09 2026 by rpki-client