Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/k1vmFVnn5CjvX41Mnbd99nD_htg.asa
File:                     k1vmFVnn5CjvX41Mnbd99nD_htg.asa (raw, json)
Hash identifier:          luIsE9S/Vqc7HG61AULLRKQgLE2wgWBSXTpWVm+n2Mw=
Subject key identifier:   93:5B:E6:15:59:E7:E4:28:EF:5F:8D:4C:9D:B7:7D:F6:70:FF:86:D8
Certificate issuer:       /CN=06079c429a7146f1f9aa049bdb42ca95144b74da
Certificate serial:       019F19013B478393CA8838576EEE64D7C61A
Authority key identifier: 06:07:9C:42:9A:71:46:F1:F9:AA:04:9B:DB:42:CA:95:14:4B:74:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BgecQppxRvH5qgSb20LKlRRLdNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/k1vmFVnn5CjvX41Mnbd99nD_htg.asa
Signing time:             Tue 30 Jun 2026 14:48:58 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:58 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            13020
Providers:                AS: 50472
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BgecQppxRvH5qgSb20LKlRRLdNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:3b:47:83:93:ca:88:38:57:6e:ee:64:d7:c6:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06079c429a7146f1f9aa049bdb42ca95144b74da
        Validity
            Not Before: Jun 30 14:48:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=935be61559e7e428ef5f8d4c9db77df670ff86d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1e:e0:ce:80:51:11:b7:f9:b6:ef:aa:d1:75:
                    95:ba:20:33:d9:05:dd:55:b0:9d:af:ef:c2:83:34:
                    02:77:0f:17:80:a7:ad:5e:b3:fb:4c:a7:9c:41:4c:
                    ed:90:07:c2:e7:9d:07:2d:64:0a:40:20:d4:b6:95:
                    62:85:13:f5:14:53:80:c7:6f:12:03:81:44:bb:e6:
                    79:53:cc:a2:cb:ac:da:cc:2e:d9:e5:57:c3:68:8d:
                    42:fc:32:5f:05:94:ba:16:34:7d:c1:45:96:eb:de:
                    1d:71:c6:22:61:9f:c9:8a:94:a3:e1:37:a4:9d:70:
                    f8:1c:13:f3:f9:a4:e4:68:fd:5c:78:48:32:d1:b5:
                    d1:ba:ae:8e:d4:ec:73:5e:65:7e:15:25:96:38:b5:
                    b1:c7:b3:99:7f:b8:51:1b:95:64:bc:8e:b3:8f:b9:
                    6d:54:dc:31:91:85:e7:90:75:c9:8d:e3:23:04:29:
                    22:12:85:e6:13:9c:46:67:c0:95:64:b3:75:a8:b2:
                    84:65:f4:34:2a:38:eb:8c:29:c4:bb:0e:73:ba:80:
                    bb:d6:c7:09:f2:d6:a1:6a:c2:31:66:9e:7f:01:1c:
                    7b:5c:5a:2c:4c:69:ed:22:da:ed:7a:fc:e9:5f:0a:
                    db:e8:6b:4e:71:1d:c3:d0:89:a3:bb:f1:2e:eb:a3:
                    37:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:5B:E6:15:59:E7:E4:28:EF:5F:8D:4C:9D:B7:7D:F6:70:FF:86:D8
            X509v3 Authority Key Identifier:
                keyid:06:07:9C:42:9A:71:46:F1:F9:AA:04:9B:DB:42:CA:95:14:4B:74:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgecQppxRvH5qgSb20LKlRRLdNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/k1vmFVnn5CjvX41Mnbd99nD_htg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13020

    Signature Algorithm: sha256WithRSAEncryption
         50:85:e8:62:ea:f6:9c:89:09:7a:12:87:cf:56:b5:45:fd:f3:
         0b:5f:d9:49:83:9f:07:a0:68:f9:b9:57:01:8f:ae:6f:a2:ac:
         ad:df:58:8d:71:af:c7:e7:6d:3c:02:c5:76:20:7f:3d:67:ea:
         b4:5f:44:93:89:cf:2c:f3:40:7d:3e:3f:6e:6a:76:1a:de:39:
         c0:e9:8b:b0:2e:90:d4:bb:0f:0c:91:fa:38:33:cb:7f:ab:10:
         7c:80:aa:43:f6:bd:1c:28:79:b9:28:68:f3:f8:48:b3:99:c3:
         e9:48:d5:15:4f:99:67:3d:7c:7c:99:6f:f0:24:6e:6f:6c:35:
         01:e7:a1:87:fd:74:9f:14:b6:a4:4e:6d:4f:42:e5:b7:bc:b2:
         16:53:92:22:fe:fa:b3:89:3a:a8:c0:a2:59:44:a7:f6:21:62:
         79:72:d9:96:c6:8b:1a:2a:e6:e9:7a:07:64:ce:3d:f2:36:cc:
         d3:0a:3b:a8:5e:4f:95:f8:19:1d:44:07:0b:9c:46:1d:c9:d7:
         fc:05:81:df:be:22:07:a2:72:03:c1:f5:8d:a6:fb:3d:39:a4:
         50:15:d0:49:7e:58:34:97:e6:1d:89:aa:96:38:ec:2b:62:fa:
         37:15:8c:47:35:ba:7b:92:2d:fc:60:01:e5:e7:39:58:be:a6:
         33:83:e5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:00 2026 by rpki-client