Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/1f0955-4d62-433b-b18c-7c37e639bf0f/1/5hv4H4ReHOgoU2j6GHM3gxKuVNM.asa
File:                     5hv4H4ReHOgoU2j6GHM3gxKuVNM.asa (raw, json)
Hash identifier:          S/TCcSWUgUNlvh+ikvdbt5fB2XvB1d7QClP906FqOhc=
Subject key identifier:   E6:1B:F8:1F:84:5E:1C:E8:28:53:68:FA:18:73:37:83:12:AE:54:D3
Certificate issuer:       /CN=39caa0bd254d1a87f4bb30db3b513fdb9af625f6
Certificate serial:       019F807C3FE8452233E9686568C0739C2A99
Authority key identifier: 39:CA:A0:BD:25:4D:1A:87:F4:BB:30:DB:3B:51:3F:DB:9A:F6:25:F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OcqgvSVNGof0uzDbO1E_25r2JfY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/1f0955-4d62-433b-b18c-7c37e639bf0f/1/5hv4H4ReHOgoU2j6GHM3gxKuVNM.asa
Signing time:             Mon 20 Jul 2026 17:04:14 +0000
ASPA not before:          Mon 20 Jul 2026 17:04:14 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            209046
Providers:                AS: 20771
                          AS: 35805
                          AS: 198150
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/1f0955-4d62-433b-b18c-7c37e639bf0f/1/OcqgvSVNGof0uzDbO1E_25r2JfY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/1f0955-4d62-433b-b18c-7c37e639bf0f/1/OcqgvSVNGof0uzDbO1E_25r2JfY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OcqgvSVNGof0uzDbO1E_25r2JfY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 08:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:80:7c:3f:e8:45:22:33:e9:68:65:68:c0:73:9c:2a:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39caa0bd254d1a87f4bb30db3b513fdb9af625f6
        Validity
            Not Before: Jul 20 17:04:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e61bf81f845e1ce8285368fa1873378312ae54d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6f:f9:15:77:ad:d4:b0:43:64:28:a7:54:c7:
                    a7:c8:5f:eb:af:5e:2b:44:6e:60:4e:f1:e1:9a:24:
                    d9:0d:72:c5:05:4e:d1:19:4b:37:d5:3a:2a:17:52:
                    1e:d2:8e:f6:32:84:1c:fb:e1:1b:67:6b:8a:84:3a:
                    1b:b7:9c:a6:34:e9:12:03:9b:0c:16:c7:09:c0:dc:
                    fd:df:fd:89:50:2d:2c:dd:92:fe:a2:8b:ea:b9:89:
                    45:81:84:62:bd:19:30:1b:58:48:fa:ee:6a:f3:ea:
                    76:67:92:71:89:18:c2:bd:2a:12:b0:0d:25:a1:b3:
                    79:1b:ba:69:5e:1d:27:21:57:58:10:d6:56:a0:7d:
                    18:b6:4f:df:5b:be:88:be:6c:2a:24:a9:53:f4:c9:
                    18:9c:18:66:e2:7d:40:e9:b1:0d:70:7c:f4:cf:55:
                    61:04:b8:26:2a:c4:27:80:03:7a:be:49:ba:79:79:
                    53:b0:d8:e3:30:0b:d1:7e:81:9d:a7:d4:ad:57:76:
                    54:50:c4:49:e3:0b:55:57:82:03:f9:bf:7e:69:ae:
                    fa:77:ac:8b:91:3c:55:cf:a1:fd:20:cb:b3:93:5e:
                    9f:1a:53:f1:4c:44:8a:e7:5d:d4:6b:dc:21:1a:45:
                    28:dc:f0:2d:68:72:e9:18:29:d9:5d:7c:04:c7:4c:
                    d9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:1B:F8:1F:84:5E:1C:E8:28:53:68:FA:18:73:37:83:12:AE:54:D3
            X509v3 Authority Key Identifier:
                keyid:39:CA:A0:BD:25:4D:1A:87:F4:BB:30:DB:3B:51:3F:DB:9A:F6:25:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcqgvSVNGof0uzDbO1E_25r2JfY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/1f0955-4d62-433b-b18c-7c37e639bf0f/1/5hv4H4ReHOgoU2j6GHM3gxKuVNM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/1f0955-4d62-433b-b18c-7c37e639bf0f/1/OcqgvSVNGof0uzDbO1E_25r2JfY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209046

    Signature Algorithm: sha256WithRSAEncryption
         45:ad:b5:8c:3f:a9:44:ee:f4:cd:33:e1:88:d8:24:62:35:90:
         7b:35:bc:24:d0:d0:26:4b:90:68:e4:cb:10:1c:4a:1f:bd:ab:
         bd:48:fd:7a:44:5a:f0:f7:13:6b:cd:db:a9:f8:4b:15:e2:e7:
         79:75:42:c3:73:74:1f:e1:be:30:fe:65:7e:83:8f:14:08:46:
         7a:d6:86:b0:c8:e1:c4:80:96:b6:2f:7d:7c:30:42:8b:9b:af:
         7c:e4:75:b9:2d:2d:4b:a4:b2:91:8b:15:52:56:af:f3:d4:61:
         51:43:ff:2a:64:d1:ec:04:c9:b2:e5:ce:81:ca:45:f4:96:b0:
         23:eb:35:3e:f9:33:fe:a7:a9:99:ad:22:de:3f:5c:4d:ae:4b:
         e3:1c:59:85:d2:19:d4:25:17:c2:f2:67:f4:a2:b4:be:3b:95:
         57:60:9b:e7:72:1d:95:dd:3e:f3:f7:e8:b9:00:b3:5d:bb:7d:
         13:c3:c7:75:9d:c8:93:53:fb:7a:82:0e:46:25:9c:e6:f6:1c:
         1f:a7:1c:b9:17:15:7f:3e:e4:2f:ac:9b:d2:8b:cd:57:44:79:
         e2:8f:d5:4e:2f:9a:ad:5b:a3:21:c3:f1:5b:8d:a4:1d:cd:75:
         f2:c5:cf:da:ba:93:92:60:b3:8d:ae:d0:84:95:74:aa:7d:e7:
         cf:b1:7a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:30 2026 by rpki-client