Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/6fb18c-48eb-4e3f-bbbe-b3f66b3d542c/1/ypwoD8WNlujjLErobvoTdVgSnlM.asa
File:                     ypwoD8WNlujjLErobvoTdVgSnlM.asa (raw, json)
Hash identifier:          mZSvKsEORYpPG2YuRUeELKK/DzjDDr8HvRa5KJ/AxkQ=
Subject key identifier:   CA:9C:28:0F:C5:8D:96:E8:E3:2C:4A:E8:6E:FA:13:75:58:12:9E:53
Certificate issuer:       /CN=cb81cda60e7f5ed5fff038cb490913affe2331ea
Certificate serial:       019F950D71F08527521418663DC32FE05D62
Authority key identifier: CB:81:CD:A6:0E:7F:5E:D5:FF:F0:38:CB:49:09:13:AF:FE:23:31:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y4HNpg5_XtX_8DjLSQkTr_4jMeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/6fb18c-48eb-4e3f-bbbe-b3f66b3d542c/1/ypwoD8WNlujjLErobvoTdVgSnlM.asa
Signing time:             Fri 24 Jul 2026 16:55:14 +0000
ASPA not before:          Fri 24 Jul 2026 16:55:14 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            219406
Providers:                AS: 209533
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/6fb18c-48eb-4e3f-bbbe-b3f66b3d542c/1/y4HNpg5_XtX_8DjLSQkTr_4jMeo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/6fb18c-48eb-4e3f-bbbe-b3f66b3d542c/1/y4HNpg5_XtX_8DjLSQkTr_4jMeo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y4HNpg5_XtX_8DjLSQkTr_4jMeo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:55:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:0d:71:f0:85:27:52:14:18:66:3d:c3:2f:e0:5d:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb81cda60e7f5ed5fff038cb490913affe2331ea
        Validity
            Not Before: Jul 24 16:55:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ca9c280fc58d96e8e32c4ae86efa137558129e53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5d:01:b7:b8:52:c5:bb:b5:5c:3c:96:f3:b7:
                    58:82:b3:16:11:57:e9:68:67:09:53:0e:f5:77:e7:
                    5d:c9:78:44:4a:c9:e0:d1:50:41:89:32:3d:ae:b9:
                    b7:26:b2:b7:c1:19:a2:b0:dd:71:0d:bd:7c:a0:c0:
                    d4:43:d0:cd:65:8f:3a:5d:ec:ac:07:b0:5e:17:2e:
                    24:5d:ec:73:d6:e4:22:36:88:75:65:b8:48:98:78:
                    77:fa:66:fa:35:04:40:6a:c0:c7:d4:b5:e3:ce:27:
                    41:2c:0a:cb:1e:19:f8:c8:0b:62:88:45:3f:d7:bb:
                    89:d0:57:a5:9b:6d:2e:60:f1:ad:c2:7c:de:40:46:
                    06:67:ff:e3:b2:8c:09:39:04:ca:92:96:f2:a0:fe:
                    03:84:b3:08:47:1b:e5:d0:23:b2:1b:5e:e9:6f:cc:
                    b5:d3:6b:c1:a0:a2:34:20:e0:08:d6:bc:c0:da:ce:
                    69:d5:fc:7b:b3:eb:bd:aa:25:01:7c:ad:f9:f8:d3:
                    45:16:5f:7c:63:28:df:5c:03:cb:77:be:bf:32:f6:
                    11:7b:7b:07:13:b5:54:ef:5d:b9:24:8c:9b:22:f8:
                    d8:a4:43:77:b5:65:bf:d1:37:d9:45:97:d2:5b:0e:
                    15:33:0c:4c:a0:69:3f:6c:0e:89:67:e4:2b:f2:88:
                    0c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:9C:28:0F:C5:8D:96:E8:E3:2C:4A:E8:6E:FA:13:75:58:12:9E:53
            X509v3 Authority Key Identifier:
                keyid:CB:81:CD:A6:0E:7F:5E:D5:FF:F0:38:CB:49:09:13:AF:FE:23:31:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4HNpg5_XtX_8DjLSQkTr_4jMeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6fb18c-48eb-4e3f-bbbe-b3f66b3d542c/1/ypwoD8WNlujjLErobvoTdVgSnlM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6fb18c-48eb-4e3f-bbbe-b3f66b3d542c/1/y4HNpg5_XtX_8DjLSQkTr_4jMeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  219406

    Signature Algorithm: sha256WithRSAEncryption
         56:9a:02:ec:82:fb:6a:7e:73:d8:68:2a:81:0d:ab:80:f4:1e:
         3b:2a:5f:93:a6:d8:be:cb:e5:d5:60:04:61:d2:ba:cc:5f:be:
         44:4c:49:1d:71:c0:90:1b:5f:70:ba:94:0a:26:3e:51:6d:16:
         30:17:b6:c3:c6:87:25:a0:e1:c2:2c:01:28:2f:5d:a4:37:19:
         6a:62:11:ef:5a:b8:7d:01:fc:23:d6:6e:08:10:f7:8d:3c:d9:
         42:29:0a:4e:4d:fa:91:32:c1:60:b5:95:c1:40:60:35:63:dc:
         b2:f4:ec:af:23:a2:df:8b:c4:ee:f1:8c:e4:e8:51:0a:57:11:
         bd:b0:2d:cc:b5:f1:00:05:39:18:eb:44:c2:17:81:9b:bf:0c:
         a0:14:38:e9:2d:0b:fc:c3:3a:31:8b:98:32:8a:2c:37:29:82:
         85:38:f7:29:8a:f4:05:cb:72:6c:f1:62:e8:d9:aa:64:47:0c:
         38:b5:ed:b6:ac:35:e9:a5:ba:60:95:50:bc:19:bb:2e:58:32:
         33:7b:60:fa:b9:a7:96:ee:80:17:c8:fe:54:1d:ea:27:4d:b0:
         27:88:c4:5e:de:09:2a:dc:c1:25:1e:49:0b:16:bf:04:ee:a4:
         d9:1c:b1:fb:f4:8d:68:ae:b3:39:77:7a:94:fe:dc:b5:30:4c:
         8e:e1:41:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:19:57 2026 by rpki-client