Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/1-LHcZlaxr8dQvsVNzQIDaN2BeWE.asa
File:                     1-LHcZlaxr8dQvsVNzQIDaN2BeWE.asa (raw, json)
Hash identifier:          LiZ9oWhCLFkLqjTHi7biMv/A13XAhUUyZNZ2kHRDC4o=
Subject key identifier:   F8:B1:DC:66:56:B1:AF:C7:50:BE:C5:4D:CD:02:03:68:DD:81:79:61
Certificate issuer:       /CN=66ba8d64e901b39b501ed3693ec27430713886e3
Certificate serial:       019F19013AD0E77A4E65377FA2991D5DD1C2
Authority key identifier: 66:BA:8D:64:E9:01:B3:9B:50:1E:D3:69:3E:C2:74:30:71:38:86:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/1-LHcZlaxr8dQvsVNzQIDaN2BeWE.asa
Signing time:             Tue 30 Jun 2026 14:48:58 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:58 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            210861
Providers:                AS: 15576
                          AS: 39040
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:3a:d0:e7:7a:4e:65:37:7f:a2:99:1d:5d:d1:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ba8d64e901b39b501ed3693ec27430713886e3
        Validity
            Not Before: Jun 30 14:48:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f8b1dc6656b1afc750bec54dcd020368dd817961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e8:e3:58:22:57:4d:6a:85:a0:e6:0a:16:fe:
                    e8:89:e4:3b:5b:11:dc:c9:7c:ba:47:ff:2c:fa:2a:
                    f3:83:0f:c5:15:5d:ac:41:be:b9:16:97:f0:e2:2b:
                    47:c4:76:06:50:ce:da:35:7e:02:93:d0:5c:b9:7e:
                    02:24:93:d4:f7:cf:ab:e9:f3:48:6d:c2:b6:0b:5c:
                    2b:9b:a6:d0:17:2e:4b:cf:d0:91:e7:52:c8:32:41:
                    ad:55:36:7c:22:66:30:66:f6:60:5e:3f:34:0a:70:
                    5e:35:53:09:e7:af:26:51:0c:12:89:e5:d4:97:c5:
                    56:c4:ff:e3:93:fe:23:3c:82:9a:79:b9:a5:1b:c4:
                    fd:a8:c7:b9:db:d4:f2:f0:11:c7:20:77:53:62:e2:
                    14:c4:69:7f:ca:72:a4:b9:7c:e6:9c:a5:a4:e0:77:
                    fe:fb:93:d8:42:93:10:38:13:41:c3:69:33:76:c3:
                    a8:43:5f:a8:4e:35:67:0b:de:73:f1:57:0b:0c:c5:
                    cb:f1:2e:19:fc:70:e3:d7:34:e5:07:a3:24:4c:ef:
                    f1:a3:8b:2f:bf:8f:70:f1:0e:2a:29:dd:38:5d:73:
                    a0:f4:c8:79:6f:0b:63:56:4d:61:b2:c6:0f:cd:2d:
                    b3:c6:5a:0c:a5:37:24:89:a0:0a:54:9c:cb:75:9a:
                    d6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B1:DC:66:56:B1:AF:C7:50:BE:C5:4D:CD:02:03:68:DD:81:79:61
            X509v3 Authority Key Identifier:
                keyid:66:BA:8D:64:E9:01:B3:9B:50:1E:D3:69:3E:C2:74:30:71:38:86:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/1-LHcZlaxr8dQvsVNzQIDaN2BeWE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210861

    Signature Algorithm: sha256WithRSAEncryption
         a2:87:7f:ad:ac:7b:e2:3f:3e:f1:6e:44:86:03:e1:9b:ae:99:
         57:46:2b:5e:e9:c7:3f:4b:9f:5d:cd:f9:79:0c:7f:da:ba:59:
         e5:2d:4c:bc:fe:fc:3c:c7:94:9c:71:b7:72:02:d3:09:17:1c:
         32:86:cd:fb:34:bb:e1:9f:6b:be:d5:20:c8:e8:44:f0:57:11:
         e8:95:a4:57:a0:d1:70:44:eb:22:67:cf:6c:b8:eb:35:33:5e:
         3f:13:3d:69:b4:95:88:77:3f:ab:f8:33:34:3c:ee:1f:7e:20:
         91:1f:24:2d:58:8b:db:da:23:66:f1:97:64:94:80:4a:5d:97:
         5a:87:d2:ac:d3:f4:8b:76:43:35:10:93:f9:f5:b3:9b:36:86:
         51:55:11:06:45:ca:98:78:0b:b4:7e:31:5b:47:ab:19:0a:4e:
         15:82:24:c5:30:b3:be:e6:3d:3a:55:16:a3:53:85:7a:38:47:
         fe:85:c6:3d:19:76:06:32:25:e5:07:79:2c:fb:9e:4e:98:ed:
         5d:56:ed:4f:08:76:91:69:32:02:4e:72:62:5d:d5:ec:de:ec:
         39:3b:1d:10:0a:44:01:48:f5:93:b3:3a:39:02:9c:c6:4c:e2:
         0e:b4:55:29:32:ed:56:69:0e:25:a6:4d:26:e9:30:7e:31:ea:
         80:04:19:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:56:16 2026 by rpki-client