Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/43f129-d9d6-4117-b68d-1914c3aa37b9/1/t3FyYhHRPqJ-a3_z-yeKN1Sdvh4.asa
File:                     t3FyYhHRPqJ-a3_z-yeKN1Sdvh4.asa (raw, json)
Hash identifier:          6+uN5m0MDTZzrHFrqFDKq2fqSVkd4BTjnly82iu2JIM=
Subject key identifier:   B7:71:72:62:11:D1:3E:A2:7E:6B:7F:F3:FB:27:8A:37:54:9D:BE:1E
Certificate issuer:       /CN=2bf3f0fd454ae80c9945adbc1e30cdbc1c2f4020
Certificate serial:       019E0166263736355C3FFBEF03E96F7540D0
Authority key identifier: 2B:F3:F0:FD:45:4A:E8:0C:99:45:AD:BC:1E:30:CD:BC:1C:2F:40:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K_Pw_UVK6AyZRa28HjDNvBwvQCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/43f129-d9d6-4117-b68d-1914c3aa37b9/1/t3FyYhHRPqJ-a3_z-yeKN1Sdvh4.asa
Signing time:             Thu 07 May 2026 07:45:31 +0000
ASPA not before:          Thu 07 May 2026 07:45:31 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            198727
Providers:                AS: 9002
                          AS: 42156
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/43f129-d9d6-4117-b68d-1914c3aa37b9/1/K_Pw_UVK6AyZRa28HjDNvBwvQCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/43f129-d9d6-4117-b68d-1914c3aa37b9/1/K_Pw_UVK6AyZRa28HjDNvBwvQCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K_Pw_UVK6AyZRa28HjDNvBwvQCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 13:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:01:66:26:37:36:35:5c:3f:fb:ef:03:e9:6f:75:40:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bf3f0fd454ae80c9945adbc1e30cdbc1c2f4020
        Validity
            Not Before: May  7 07:45:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b771726211d13ea27e6b7ff3fb278a37549dbe1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:11:b2:87:21:e7:e9:7a:d5:0d:93:49:7c:6d:
                    d2:4f:9e:8a:64:58:e5:57:0e:13:d2:9a:ca:59:20:
                    ef:53:33:9e:de:b5:8e:25:b7:ae:95:15:0f:f3:2a:
                    49:72:71:80:13:93:e4:c6:52:dc:92:2f:ae:9d:5a:
                    39:92:79:5f:68:45:a4:79:ac:27:30:1e:c7:d2:9d:
                    12:eb:cc:c8:b9:1e:1f:21:d9:e6:62:96:25:e6:1e:
                    53:8e:0f:58:98:25:c7:c5:d1:e3:6a:8d:18:de:9d:
                    fc:0c:5b:9f:99:a9:45:32:e2:d6:11:77:df:6f:f6:
                    bb:6f:70:be:7f:c6:9c:ee:a5:89:ff:08:03:dd:0f:
                    cd:0a:39:c5:d2:a5:ef:61:d5:88:95:76:81:7a:a4:
                    7f:c3:4d:8b:46:db:01:27:66:0a:54:b9:f1:3c:aa:
                    2c:44:72:05:58:bf:1f:1d:94:21:04:d3:8b:3c:70:
                    0d:49:ff:b9:13:6e:5c:77:f4:22:b8:0e:3b:47:71:
                    17:c0:ab:38:52:a7:91:f1:de:b2:14:a7:48:b1:09:
                    81:ed:aa:5a:39:34:27:53:dc:fc:b3:1a:14:a8:18:
                    1e:21:ea:67:bb:d6:89:02:25:7f:3e:15:02:55:6c:
                    1a:2b:83:12:98:e3:2a:3c:3e:2e:22:28:62:89:01:
                    59:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:71:72:62:11:D1:3E:A2:7E:6B:7F:F3:FB:27:8A:37:54:9D:BE:1E
            X509v3 Authority Key Identifier:
                keyid:2B:F3:F0:FD:45:4A:E8:0C:99:45:AD:BC:1E:30:CD:BC:1C:2F:40:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_Pw_UVK6AyZRa28HjDNvBwvQCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/43f129-d9d6-4117-b68d-1914c3aa37b9/1/t3FyYhHRPqJ-a3_z-yeKN1Sdvh4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/43f129-d9d6-4117-b68d-1914c3aa37b9/1/K_Pw_UVK6AyZRa28HjDNvBwvQCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198727

    Signature Algorithm: sha256WithRSAEncryption
         52:09:a9:2f:23:6e:a6:97:8c:2d:da:a3:ac:b1:bf:b0:90:8c:
         eb:cc:e7:e3:09:f8:d7:3a:53:91:88:f3:28:e8:10:2b:4d:77:
         68:87:f1:d8:33:0e:4a:91:2b:fc:aa:7d:90:ae:e3:29:e1:41:
         ed:cc:c5:b7:00:c2:f4:e8:56:37:15:9f:76:d2:7a:2c:d3:72:
         f7:09:4a:e1:7d:f7:d5:05:da:c3:0a:e9:3e:97:8f:3b:ee:ff:
         18:2d:93:69:3a:55:26:47:8c:ae:e1:a6:72:50:c5:7f:fa:d5:
         8f:6b:e6:c7:0d:0a:01:12:74:e5:1a:7e:a3:ba:74:53:73:69:
         d4:85:1c:a7:d5:b6:f9:e8:d0:a9:d7:74:23:c6:58:cd:43:6c:
         01:9a:a8:03:a1:46:9c:f5:ca:51:46:30:ef:2f:72:2c:07:83:
         bd:07:f9:62:c5:e1:67:2d:9c:1d:bf:75:8b:75:a8:9f:36:e1:
         99:33:38:db:c4:35:a4:0b:52:81:a2:d8:14:9e:d4:4b:12:a8:
         8b:b7:33:6d:32:56:14:ce:d7:62:2b:4c:29:b4:45:93:58:56:
         67:67:d7:67:f1:a5:5c:81:b9:f0:5d:ad:76:ad:cf:a6:8c:c8:
         6e:8e:93:1c:57:3c:8b:8f:37:ea:ee:c5:49:04:ff:fe:7b:71:
         ba:a6:e3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:13:10 2026 by rpki-client