Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/7sRoOWKbSUAYn6fc2kMDiGOFSzI.asa
File:                     7sRoOWKbSUAYn6fc2kMDiGOFSzI.asa (raw, json)
Hash identifier:          bVK40h1po743oXeQksBOOUrJaKABeP31ahdGkgnYLa4=
Subject key identifier:   EE:C4:68:39:62:9B:49:40:18:9F:A7:DC:DA:43:03:88:63:85:4B:32
Certificate issuer:       /CN=cb6a9ef810edaaf52453d28373ef0f79b09bd63d
Certificate serial:       019F5FB6CE58AD73A6633DCCBDC9A2A143A6
Authority key identifier: CB:6A:9E:F8:10:ED:AA:F5:24:53:D2:83:73:EF:0F:79:B0:9B:D6:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y2qe-BDtqvUkU9KDc-8PebCb1j0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/7sRoOWKbSUAYn6fc2kMDiGOFSzI.asa
Signing time:             Tue 14 Jul 2026 08:20:43 +0000
ASPA not before:          Tue 14 Jul 2026 08:20:43 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            201439
Providers:                AS: 34927
                          AS: 209022
                          AS: 209533
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y2qe-BDtqvUkU9KDc-8PebCb1j0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:5f:b6:ce:58:ad:73:a6:63:3d:cc:bd:c9:a2:a1:43:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb6a9ef810edaaf52453d28373ef0f79b09bd63d
        Validity
            Not Before: Jul 14 08:20:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=eec46839629b4940189fa7dcda43038863854b32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:96:8b:20:86:a7:0e:05:0f:c0:f7:ee:a3:55:
                    52:10:20:91:11:dd:de:b8:8e:e0:16:24:5a:c2:51:
                    4d:47:55:7b:bd:a4:fe:94:5e:a3:d1:d0:6a:ba:ad:
                    42:fa:b0:f4:b0:cf:34:da:f9:02:e0:1c:b8:ed:68:
                    6c:3a:53:41:80:72:26:b1:3e:83:16:9d:56:61:83:
                    5b:44:38:9e:de:b3:93:62:a1:dd:b0:a0:81:c6:6a:
                    30:d9:90:04:af:62:4c:dd:cb:f1:04:91:f1:f7:8f:
                    78:3a:2c:14:81:3c:bb:1d:dd:21:1c:24:3e:69:d6:
                    1b:9a:3d:d1:91:26:9b:52:2e:57:b9:36:1c:3d:c6:
                    15:2d:3e:d5:65:07:89:53:f9:93:c8:2b:d8:ca:5b:
                    15:de:29:e0:32:7c:6b:11:a1:a2:82:ab:45:1d:d9:
                    15:95:76:3c:6d:b8:23:37:d7:db:33:fa:7e:2f:b3:
                    40:8a:4f:d7:ed:4e:3d:78:69:50:39:94:00:c9:57:
                    d6:95:17:eb:a2:d3:45:22:02:72:40:ac:43:6b:8f:
                    98:39:57:ff:e8:9e:3b:3c:2a:d4:59:5a:63:c9:4d:
                    95:9b:2f:a8:8f:5e:0d:78:71:cc:63:48:a0:f3:d2:
                    f9:80:cc:50:92:1e:03:08:86:b2:b6:76:53:cf:e6:
                    72:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C4:68:39:62:9B:49:40:18:9F:A7:DC:DA:43:03:88:63:85:4B:32
            X509v3 Authority Key Identifier:
                keyid:CB:6A:9E:F8:10:ED:AA:F5:24:53:D2:83:73:EF:0F:79:B0:9B:D6:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2qe-BDtqvUkU9KDc-8PebCb1j0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/7sRoOWKbSUAYn6fc2kMDiGOFSzI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201439

    Signature Algorithm: sha256WithRSAEncryption
         8c:36:9a:c2:20:27:74:7a:55:91:30:7f:c6:42:ad:5a:3e:04:
         d5:8c:56:04:e7:1c:80:c2:0b:cd:d8:a6:7a:72:82:d4:bb:f8:
         8b:66:59:69:f0:5c:15:c5:4d:7e:46:14:a3:ff:d2:31:4d:f2:
         29:3b:db:9a:e3:5e:b5:ba:72:a3:07:e0:f7:92:ef:61:21:ab:
         ff:64:46:22:0b:4d:86:43:0c:51:8d:56:03:e6:00:a5:6f:07:
         b8:8b:5a:3a:eb:e2:9b:ce:da:e5:02:ee:db:e7:42:df:85:8a:
         55:5d:f5:27:81:74:38:da:ba:af:f9:ac:dc:1b:bd:84:65:7c:
         5c:0b:67:50:41:e6:ba:77:a8:85:25:9d:36:f2:31:ac:44:44:
         3c:c7:21:e3:95:9e:44:35:35:db:56:60:8a:82:a2:99:df:63:
         ba:d7:82:cb:4e:9c:20:89:da:e5:67:fa:78:0c:80:09:47:c5:
         58:20:3a:88:f4:22:ac:7b:f4:ac:f8:f9:d0:28:21:3f:34:4b:
         ee:fb:45:a1:fa:3c:56:db:8e:1a:4b:9b:d5:fb:b0:11:74:1d:
         54:d8:0b:39:26:ef:04:fd:b3:39:13:0a:13:6d:13:c8:18:ea:
         d9:7c:7a:a1:cf:5d:38:5a:24:62:a2:a4:1e:19:b8:8b:6d:2f:
         96:51:82:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 18:58:21 2026 by rpki-client