Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/9aSqAQcmoN2g2ZBcTNHTApttx4g.asa
File:                     9aSqAQcmoN2g2ZBcTNHTApttx4g.asa (raw, json)
Hash identifier:          Kb0ToC2/MP2f01Ifkul/qi5eKO/zR/3pP3dFhvYFaR8=
Subject key identifier:   F5:A4:AA:01:07:26:A0:DD:A0:D9:90:5C:4C:D1:D3:02:9B:6D:C7:88
Certificate issuer:       /CN=4dbe87b70adae7ae880b4670bfa078e90984d660
Certificate serial:       019F5BA4068BF3D611BFB56E2E7EE45A2378
Authority key identifier: 4D:BE:87:B7:0A:DA:E7:AE:88:0B:46:70:BF:A0:78:E9:09:84:D6:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/9aSqAQcmoN2g2ZBcTNHTApttx4g.asa
Signing time:             Mon 13 Jul 2026 13:21:43 +0000
ASPA not before:          Mon 13 Jul 2026 13:21:43 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            210258
Providers:                AS: 174
                          AS: 6461
                          AS: 8943
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:5b:a4:06:8b:f3:d6:11:bf:b5:6e:2e:7e:e4:5a:23:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dbe87b70adae7ae880b4670bfa078e90984d660
        Validity
            Not Before: Jul 13 13:21:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f5a4aa010726a0dda0d9905c4cd1d3029b6dc788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fc:14:fc:1e:54:ca:b5:d1:bc:71:1d:e2:fb:
                    35:df:1c:ae:0a:29:75:b0:7e:9d:b6:39:bd:e6:70:
                    94:3f:3a:fc:e8:c9:4e:f4:a7:5a:12:43:c4:4a:84:
                    06:c3:73:37:fb:03:6e:c5:79:f0:79:33:71:de:8f:
                    66:a5:72:b2:39:f7:7e:0b:22:7a:fb:09:bc:04:44:
                    5b:74:dd:88:26:c8:72:40:3c:8a:5f:d2:4e:de:44:
                    e8:f7:1d:bb:54:35:f1:07:c9:d6:78:d6:b4:2b:17:
                    4f:a7:17:17:49:e1:5b:a8:3f:3a:8d:2f:dd:b8:95:
                    6e:b6:ed:40:68:a8:b9:bb:f4:49:51:69:1b:cb:e0:
                    e3:2b:20:6c:3a:28:34:ee:bb:32:98:35:86:4b:4a:
                    3c:8c:f4:af:50:16:73:e2:7e:ad:ba:04:16:e4:40:
                    ef:b2:87:44:52:e7:4d:6c:6e:1f:d7:8a:c3:69:99:
                    f1:cf:0d:5a:cc:84:23:1e:1c:43:cc:8d:71:b0:1b:
                    b8:9c:49:5c:c0:52:c5:b1:d5:0c:27:4c:14:77:07:
                    e3:05:ca:19:16:b1:bf:97:22:d7:d2:a5:d6:91:c2:
                    9a:b9:54:c1:87:c1:06:5b:42:99:47:6b:e8:77:f7:
                    dc:4f:7c:46:9f:d4:ae:85:ca:09:ee:6e:ef:68:a3:
                    4a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A4:AA:01:07:26:A0:DD:A0:D9:90:5C:4C:D1:D3:02:9B:6D:C7:88
            X509v3 Authority Key Identifier:
                keyid:4D:BE:87:B7:0A:DA:E7:AE:88:0B:46:70:BF:A0:78:E9:09:84:D6:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/9aSqAQcmoN2g2ZBcTNHTApttx4g.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210258

    Signature Algorithm: sha256WithRSAEncryption
         1d:db:82:b4:57:d8:a6:40:54:4b:6b:e9:44:98:03:ff:5b:46:
         e6:ff:2b:d3:80:b4:45:21:b5:21:14:bc:19:a3:c5:bc:4c:06:
         c7:c7:95:1e:f2:e5:8b:b6:b9:1d:9b:3c:08:3b:9f:5c:e8:58:
         75:41:41:fe:44:fe:37:d0:49:da:67:91:a2:15:ac:fb:40:90:
         50:90:4a:92:d0:97:1d:00:bd:6d:b4:1c:7b:24:f1:3c:67:f5:
         e5:b1:4f:25:09:05:00:fd:61:58:68:e8:a9:46:13:04:d7:c9:
         b9:b9:ed:5a:48:54:e4:56:64:ea:5e:1b:53:8c:fa:8d:13:19:
         e5:d1:6b:6d:58:09:d9:f2:28:9f:7d:c2:04:45:c2:3e:34:66:
         70:e2:73:13:ed:0a:80:1a:1f:01:2a:d6:6c:00:35:5e:61:e4:
         77:73:27:f3:b9:55:9f:90:26:63:70:34:f3:3f:46:65:57:e7:
         39:d4:81:41:16:50:c8:94:5c:10:c8:3d:27:c3:98:bd:6f:4a:
         00:ad:9b:90:f7:54:bf:75:56:7b:6d:bf:ba:cb:a8:70:29:d0:
         2e:14:d2:44:86:30:c4:21:2e:94:bd:7e:a1:81:a5:9e:b2:b5:
         77:bd:fb:26:08:53:78:80:3e:f8:8f:a6:25:04:e2:68:85:8c:
         8d:b8:46:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 18:59:31 2026 by rpki-client