Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/cbef6d-db73-4d8b-b0cc-f06e89c4770a/1/zo2qx61yORuCWKZTMikpC0Y_XdA.asa
File:                     zo2qx61yORuCWKZTMikpC0Y_XdA.asa (raw, json)
Hash identifier:          htZ7XNkenFrj9WSytSLvWOuP7M7LeldRqaDXaKNxolY=
Subject key identifier:   CE:8D:AA:C7:AD:72:39:1B:82:58:A6:53:32:29:29:0B:46:3F:5D:D0
Certificate issuer:       /CN=63672c32119256811cfeff5e7c3629119365c419
Certificate serial:       019F2368B29D3E4706E62D7B884DDDB281F9
Authority key identifier: 63:67:2C:32:11:92:56:81:1C:FE:FF:5E:7C:36:29:11:93:65:C4:19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y2csMhGSVoEc_v9efDYpEZNlxBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/cbef6d-db73-4d8b-b0cc-f06e89c4770a/1/zo2qx61yORuCWKZTMikpC0Y_XdA.asa
Signing time:             Thu 02 Jul 2026 15:18:11 +0000
ASPA not before:          Thu 02 Jul 2026 15:18:11 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            198980
Providers:                AS: 2860
                          AS: 15525
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/cbef6d-db73-4d8b-b0cc-f06e89c4770a/1/Y2csMhGSVoEc_v9efDYpEZNlxBk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/cbef6d-db73-4d8b-b0cc-f06e89c4770a/1/Y2csMhGSVoEc_v9efDYpEZNlxBk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y2csMhGSVoEc_v9efDYpEZNlxBk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:68:b2:9d:3e:47:06:e6:2d:7b:88:4d:dd:b2:81:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63672c32119256811cfeff5e7c3629119365c419
        Validity
            Not Before: Jul  2 15:18:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ce8daac7ad72391b8258a6533229290b463f5dd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:78:ca:00:74:63:93:4a:ad:b0:81:fa:d8:19:
                    cb:65:84:c6:5f:2f:eb:72:1a:a8:df:0c:73:94:cd:
                    dd:be:ec:f9:60:35:a9:2b:6e:40:7a:7e:90:37:52:
                    87:82:a1:82:12:78:ab:0c:47:0e:b8:32:ad:67:ad:
                    f2:88:23:5c:3f:0a:b7:dc:90:7c:a6:d7:f4:dd:50:
                    ab:a3:dd:1b:7b:be:60:73:25:ca:f6:67:22:56:8a:
                    a5:a5:c6:1d:07:54:f8:4f:9d:f4:db:b8:93:c1:1a:
                    f3:1f:90:61:a5:02:fc:2c:9b:20:2c:6e:0b:8b:3b:
                    ca:31:48:b2:6a:95:31:5c:38:e0:03:2e:9f:e7:3e:
                    f4:cb:ec:31:3d:d7:fa:e3:38:83:bd:79:11:1f:81:
                    1e:b2:b0:d4:c1:2b:56:0f:09:30:51:1c:0d:ba:cd:
                    6e:ce:03:75:69:6a:5b:9d:e9:bb:7f:a1:f2:85:07:
                    0b:19:83:26:7a:be:e6:d2:e5:bb:6c:34:a3:4e:7f:
                    1d:dd:b8:87:0d:19:d8:4c:70:02:a5:34:51:3d:0a:
                    a0:75:f6:db:34:af:fb:c7:cb:4d:4a:b4:f0:9d:31:
                    cb:48:bf:c6:cd:38:c7:9d:18:c9:ce:61:41:1f:f0:
                    8b:bd:27:20:26:ec:3a:6f:d4:19:f9:cd:f0:b1:fe:
                    0a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:8D:AA:C7:AD:72:39:1B:82:58:A6:53:32:29:29:0B:46:3F:5D:D0
            X509v3 Authority Key Identifier:
                keyid:63:67:2C:32:11:92:56:81:1C:FE:FF:5E:7C:36:29:11:93:65:C4:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2csMhGSVoEc_v9efDYpEZNlxBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cbef6d-db73-4d8b-b0cc-f06e89c4770a/1/zo2qx61yORuCWKZTMikpC0Y_XdA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cbef6d-db73-4d8b-b0cc-f06e89c4770a/1/Y2csMhGSVoEc_v9efDYpEZNlxBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198980

    Signature Algorithm: sha256WithRSAEncryption
         bb:c5:6d:19:c3:85:94:f7:b4:1d:2f:83:0a:2d:ca:a1:05:d8:
         02:53:a7:85:ec:ed:ff:92:8a:96:5f:57:11:97:c9:6f:88:7a:
         eb:d0:18:74:2e:48:60:ea:2d:79:41:3a:bc:65:a3:25:e1:1f:
         0c:b0:06:a6:6f:43:4c:68:3c:76:ff:91:54:fb:9b:e4:63:c7:
         36:b3:e8:d5:53:9d:a4:5d:bd:e0:77:67:9f:fb:d9:41:e7:0a:
         6c:a9:ba:2a:0c:c9:4c:41:a3:ca:96:36:a3:ff:04:99:05:97:
         9e:bd:41:26:3f:10:a9:1b:18:84:ef:95:14:a8:63:2b:62:5b:
         e9:29:74:3e:8b:26:2f:6d:c5:ba:00:38:93:dd:af:6a:dd:b5:
         ab:bf:bb:58:bd:16:d9:de:99:dc:e6:96:a5:1a:51:c8:c3:2d:
         12:2f:a7:45:70:ee:12:c7:fe:95:bb:2a:46:11:8d:7c:9d:e3:
         7c:3f:de:42:f0:93:4d:20:38:85:b9:2f:36:6b:20:c4:87:4e:
         23:69:bb:05:fa:15:e6:d0:b1:9d:24:53:f1:d1:bc:b5:9e:ec:
         54:e6:d5:d0:81:c2:e0:21:dd:76:71:a2:30:0e:77:ac:34:5c:
         e4:a4:16:bc:a2:22:20:46:07:5d:08:9b:e5:a0:7a:68:f4:45:
         2f:e1:51:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:32 2026 by rpki-client