Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/lN9Gc6nnY4wfJS-_nrlVa8nmRj4.asa
File:                     lN9Gc6nnY4wfJS-_nrlVa8nmRj4.asa (raw, json)
Hash identifier:          fcvvISOsOt68aAXMoyb8wR0Eov34Nd6IrPJ+pTVeu6A=
Subject key identifier:   94:DF:46:73:A9:E7:63:8C:1F:25:2F:BF:9E:B9:55:6B:C9:E6:46:3E
Certificate issuer:       /CN=10f1d0dbe093c722350618f4045c25ba94317f87
Certificate serial:       019F19012F84EB783B38B35267A2E5013F87
Authority key identifier: 10:F1:D0:DB:E0:93:C7:22:35:06:18:F4:04:5C:25:BA:94:31:7F:87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/lN9Gc6nnY4wfJS-_nrlVa8nmRj4.asa
Signing time:             Tue 30 Jun 2026 14:48:55 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:55 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            215782
Providers:                AS: 1299
                          AS: 3356
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 12:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:2f:84:eb:78:3b:38:b3:52:67:a2:e5:01:3f:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10f1d0dbe093c722350618f4045c25ba94317f87
        Validity
            Not Before: Jun 30 14:48:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=94df4673a9e7638c1f252fbf9eb9556bc9e6463e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8c:51:68:b4:68:a2:79:69:b4:9c:f6:a1:18:
                    21:08:56:48:55:ec:10:61:5e:fa:81:6d:cb:91:5f:
                    fe:f2:1a:58:2f:18:e3:ea:46:c1:95:b8:c3:73:5c:
                    29:d6:50:43:bf:ac:ce:6d:f1:bf:e7:52:b3:62:35:
                    6c:ba:af:a4:f4:48:4f:12:14:9e:43:d7:5d:42:a8:
                    98:e8:20:e6:3f:f0:5a:4d:ff:c5:f3:3e:74:0b:41:
                    fe:db:8d:c0:06:8e:c1:01:61:30:3e:ab:76:e5:94:
                    7b:ad:c2:63:2b:89:5e:1f:f4:e7:77:cf:e6:0c:6e:
                    e2:4f:f8:55:59:8e:b0:c6:92:fb:08:1c:31:c7:83:
                    6a:fb:dc:33:3d:73:57:f0:a0:c3:c9:1e:a0:f2:9c:
                    9a:6c:69:87:b0:0f:27:ba:bb:c6:c9:15:35:0a:c5:
                    b5:e5:28:d3:89:a8:6d:ed:18:f5:01:80:20:fb:b5:
                    52:0c:f4:f8:15:42:6f:c8:3b:0d:81:77:68:de:54:
                    02:34:f6:ef:dc:c8:f1:36:21:49:0b:e4:89:98:d3:
                    42:d4:79:fe:d0:72:dd:b1:ad:a5:c6:1c:be:54:24:
                    f2:e2:aa:bf:1e:7e:d5:a1:b9:78:22:a0:b2:e7:8c:
                    bf:14:87:dd:1c:8d:ed:96:2e:9e:b9:90:6c:cf:60:
                    3a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:DF:46:73:A9:E7:63:8C:1F:25:2F:BF:9E:B9:55:6B:C9:E6:46:3E
            X509v3 Authority Key Identifier:
                keyid:10:F1:D0:DB:E0:93:C7:22:35:06:18:F4:04:5C:25:BA:94:31:7F:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/lN9Gc6nnY4wfJS-_nrlVa8nmRj4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215782

    Signature Algorithm: sha256WithRSAEncryption
         1e:9d:d8:d6:29:53:50:01:fb:01:be:de:7c:22:7f:99:7c:98:
         c7:31:2e:e7:6d:d8:28:bf:ed:32:62:4c:e4:ae:c8:26:36:a2:
         b8:49:2b:e1:73:39:0c:ce:88:cf:cf:f7:7e:f5:f7:e1:b3:c1:
         dd:07:94:2f:5e:3a:90:ae:2c:01:42:a6:11:0a:a3:5d:73:70:
         3c:34:28:88:bc:7d:c6:aa:8b:d8:54:14:35:8c:d6:d5:9b:23:
         23:35:7b:e5:96:c1:b4:ea:f6:73:33:ff:f9:2e:19:51:0a:16:
         bd:ed:75:78:77:43:25:93:6d:f0:75:8e:3c:71:d7:4b:f3:a3:
         b4:a0:49:b1:ad:89:59:d1:cc:a6:c1:23:c7:87:c8:e1:74:60:
         3d:d9:81:f0:47:d3:7f:4b:9d:9e:d7:e4:27:7c:15:85:50:b7:
         bf:43:aa:d1:69:92:7f:f1:18:b0:a3:a0:df:f2:1d:f3:c7:24:
         96:d8:98:5e:16:84:38:b8:bb:3e:58:d5:fc:17:9d:09:14:a7:
         3c:4d:56:fa:0b:cf:d2:56:fb:52:ee:fa:dd:32:bc:e1:45:0f:
         56:21:c0:78:ca:2d:af:21:92:74:e9:0f:2a:69:ce:14:8c:60:
         ca:78:fc:6e:45:cb:85:96:35:52:50:c9:da:0d:25:93:14:94:
         94:04:42:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:41 2026 by rpki-client