Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b70c26-5e06-42f8-80cc-a887b70cdae8/1/B0aaQzDUymEy_TMI7vVm762HqmA.asa
File:                     B0aaQzDUymEy_TMI7vVm762HqmA.asa (raw, json)
Hash identifier:          flZ5LVNjeKipvaNx0Yaj9neDFvSoUInt+O77VeDAqvk=
Subject key identifier:   07:46:9A:43:30:D4:CA:61:32:FD:33:08:EE:F5:66:EF:AD:87:AA:60
Certificate issuer:       /CN=7c28a627ca31f292622c3ebba39482e34e5d956c
Certificate serial:       019F85DC4993181C44DD3C9B0A1588377DA4
Authority key identifier: 7C:28:A6:27:CA:31:F2:92:62:2C:3E:BB:A3:94:82:E3:4E:5D:95:6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fCimJ8ox8pJiLD67o5SC405dlWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/b70c26-5e06-42f8-80cc-a887b70cdae8/1/B0aaQzDUymEy_TMI7vVm762HqmA.asa
Signing time:             Tue 21 Jul 2026 18:07:14 +0000
ASPA not before:          Tue 21 Jul 2026 18:07:14 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            219300
Providers:                AS: 7720
                          AS: 152918
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/b70c26-5e06-42f8-80cc-a887b70cdae8/1/fCimJ8ox8pJiLD67o5SC405dlWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/b70c26-5e06-42f8-80cc-a887b70cdae8/1/fCimJ8ox8pJiLD67o5SC405dlWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fCimJ8ox8pJiLD67o5SC405dlWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:85:dc:49:93:18:1c:44:dd:3c:9b:0a:15:88:37:7d:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c28a627ca31f292622c3ebba39482e34e5d956c
        Validity
            Not Before: Jul 21 18:07:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=07469a4330d4ca6132fd3308eef566efad87aa60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cb:0c:5d:94:ca:19:05:a1:f9:c3:26:47:bf:
                    cb:f4:36:0f:4f:76:67:0f:03:e8:2c:b7:3a:ab:9d:
                    8f:b9:67:34:1e:77:43:f2:72:c5:7f:ae:b7:19:cd:
                    c7:a8:87:b7:82:19:b6:35:0f:26:16:45:d6:0b:62:
                    90:fc:62:97:d4:20:00:05:b3:3b:db:59:27:3f:b3:
                    66:c7:df:47:71:90:08:48:69:5c:86:ba:4c:97:1d:
                    9b:47:12:96:16:f2:00:17:47:55:95:26:eb:42:ee:
                    74:6d:07:2f:05:dc:85:79:f2:0a:8c:0c:3e:b0:d4:
                    3b:17:44:53:72:1e:3b:97:0e:24:c5:36:08:74:25:
                    87:51:80:27:41:86:c0:21:fe:0e:e4:90:0a:9a:6c:
                    31:07:03:4a:ea:48:ea:da:e9:3c:31:b2:ec:2e:8b:
                    49:f3:a5:ee:47:10:f4:ac:9b:8f:c9:ab:a9:bf:f2:
                    12:fd:7c:5f:aa:57:cc:fc:64:2f:3a:9b:5a:19:b9:
                    6e:f5:db:b8:5b:64:9f:cf:ba:89:b2:03:57:71:eb:
                    43:b8:bb:a8:aa:f9:88:a2:5a:2b:9d:68:e0:fb:eb:
                    3d:69:bd:73:2b:2a:a4:cf:13:81:c0:84:58:67:01:
                    0f:ff:22:c6:e7:c2:9e:57:cb:b2:cd:44:98:03:e9:
                    f9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:46:9A:43:30:D4:CA:61:32:FD:33:08:EE:F5:66:EF:AD:87:AA:60
            X509v3 Authority Key Identifier:
                keyid:7C:28:A6:27:CA:31:F2:92:62:2C:3E:BB:A3:94:82:E3:4E:5D:95:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCimJ8ox8pJiLD67o5SC405dlWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b70c26-5e06-42f8-80cc-a887b70cdae8/1/B0aaQzDUymEy_TMI7vVm762HqmA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b70c26-5e06-42f8-80cc-a887b70cdae8/1/fCimJ8ox8pJiLD67o5SC405dlWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  219300

    Signature Algorithm: sha256WithRSAEncryption
         20:aa:26:5d:97:47:54:74:d0:21:76:48:c1:48:ac:93:90:87:
         a6:05:28:71:bb:ce:86:55:e5:f3:d7:76:b7:c6:1c:9d:83:f4:
         ec:8e:cd:2e:98:20:a4:14:bc:98:95:99:5a:8f:13:9f:2a:dd:
         6a:f8:0e:43:d3:1d:77:e0:54:a8:ae:30:ab:52:9a:c5:5c:b4:
         ce:c0:82:a1:f2:42:75:51:a3:43:af:6c:68:d6:d7:f1:61:67:
         64:1b:60:58:6e:1c:b4:51:aa:af:bc:cd:af:6a:f2:43:ac:49:
         2c:f4:3e:ad:1c:58:1a:d0:3f:65:d4:55:d9:96:c4:8a:a3:4a:
         80:7d:79:3f:76:2b:78:3e:8b:9d:4a:99:e1:2f:c2:b9:71:ed:
         d5:f3:3c:86:2a:71:51:51:25:83:08:bd:99:ad:16:48:03:64:
         16:a7:1c:c7:8f:ff:c1:ec:b0:dd:0b:f8:81:44:10:37:7c:41:
         26:c2:15:7b:4b:ea:cd:5e:9d:0d:c6:30:6f:7b:cf:9f:22:ad:
         42:37:29:ed:0f:29:ae:5a:d5:3f:00:ed:15:ee:21:9c:fd:f1:
         b2:da:d0:30:e8:be:26:cd:38:06:c6:95:4d:3d:d3:6f:a8:2a:
         b4:30:1d:61:db:32:98:38:b2:85:e7:ae:70:11:4e:d9:84:9d:
         12:ea:91:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:00:11 2026 by rpki-client