Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/xybwCV1hWwBn4MLDW9HYu0-_w6w.asa
File:                     xybwCV1hWwBn4MLDW9HYu0-_w6w.asa (raw, json)
Hash identifier:          t3PVU0MZBtOUV0rI7OL9UqMXFGu/+sqRp88+GVOPUEU=
Subject key identifier:   C7:26:F0:09:5D:61:5B:00:67:E0:C2:C3:5B:D1:D8:BB:4F:BF:C3:AC
Certificate issuer:       /CN=cf328249cc35ec27cc10e18b882c6c13897c8497
Certificate serial:       019F19015E654C6D7B6C2430B55866F7DA91
Authority key identifier: CF:32:82:49:CC:35:EC:27:CC:10:E1:8B:88:2C:6C:13:89:7C:84:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/xybwCV1hWwBn4MLDW9HYu0-_w6w.asa
Signing time:             Tue 30 Jun 2026 14:49:07 +0000
ASPA not before:          Tue 30 Jun 2026 14:49:07 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            62220
Providers:                AS: 8194
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:5e:65:4c:6d:7b:6c:24:30:b5:58:66:f7:da:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf328249cc35ec27cc10e18b882c6c13897c8497
        Validity
            Not Before: Jun 30 14:49:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c726f0095d615b0067e0c2c35bd1d8bb4fbfc3ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:67:5c:be:f7:f9:e9:e3:a6:07:7c:84:7c:e2:
                    1e:35:c1:98:69:ff:71:9f:6b:23:9b:c1:dc:05:a0:
                    c7:5d:09:b8:08:34:23:6e:3e:54:3b:1c:94:cc:65:
                    98:01:f5:46:09:04:11:e0:78:b9:21:8e:10:81:9b:
                    ee:d5:ee:42:49:81:fe:62:52:6b:3e:6f:fb:6e:01:
                    08:74:49:5b:ec:ba:23:25:a8:0a:52:96:c0:82:a1:
                    fc:c9:d4:e8:1e:83:f3:8c:ca:63:c9:6e:f5:cb:5b:
                    2a:e7:cc:93:3c:92:08:6e:6c:c5:98:f7:dd:e2:91:
                    a5:24:fd:bc:c5:21:e6:f0:38:ef:54:84:72:5f:09:
                    d2:53:2e:ae:78:9a:a9:b6:7c:60:ec:36:49:0d:82:
                    72:87:aa:85:91:17:45:c6:aa:42:ae:8d:2b:21:98:
                    c9:d4:d0:6f:cd:e3:ae:06:56:6a:8e:45:9b:d4:37:
                    a1:92:14:97:37:2e:1d:73:82:f3:88:81:08:a9:ab:
                    f2:94:08:1b:93:08:c6:cb:70:e9:67:18:0a:cf:b2:
                    ad:0d:53:b7:46:be:c4:d0:ea:58:a7:0c:dd:37:c4:
                    1e:a4:98:10:0a:5f:8d:5f:7a:3d:05:65:c2:00:c1:
                    00:af:1a:ee:58:4d:6d:14:6a:37:34:cc:e5:aa:ef:
                    1a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:26:F0:09:5D:61:5B:00:67:E0:C2:C3:5B:D1:D8:BB:4F:BF:C3:AC
            X509v3 Authority Key Identifier:
                keyid:CF:32:82:49:CC:35:EC:27:CC:10:E1:8B:88:2C:6C:13:89:7C:84:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/xybwCV1hWwBn4MLDW9HYu0-_w6w.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62220

    Signature Algorithm: sha256WithRSAEncryption
         6d:90:f0:96:3a:cf:4c:d2:51:5b:e8:5d:a2:90:cf:ac:fc:04:
         bf:c8:5d:d6:34:6e:1d:73:74:7e:19:00:af:d2:f6:16:11:3f:
         ac:e7:f4:a4:35:20:a6:a8:1c:f2:50:3b:9d:29:d5:ad:27:1d:
         69:b0:cf:10:7a:63:c1:dc:7a:63:26:97:56:ab:85:e4:c4:55:
         67:c5:e5:ac:5c:3e:21:ed:87:2e:17:ca:c0:2e:ef:6e:e6:eb:
         3e:85:d3:64:a0:6c:05:e5:a5:42:1a:02:bb:f9:c3:3f:bf:c6:
         5f:4f:0f:61:71:0e:3e:b9:86:ba:46:d5:93:c0:77:48:31:33:
         79:8b:ed:3b:dd:da:98:55:d6:ce:22:26:8b:85:86:d8:61:40:
         6b:71:38:d9:2c:33:c5:61:2f:a0:d9:65:ca:19:ab:0c:ad:48:
         6b:fd:c6:20:5e:93:d4:9a:f7:99:57:c1:98:46:87:4c:7c:c5:
         d4:c8:ae:45:9b:7f:33:4c:40:a9:e8:77:ea:7e:78:83:d0:a5:
         d2:d3:4a:41:cf:9a:e0:46:be:4d:0b:34:8e:72:45:c5:21:ba:
         f9:42:14:83:9f:8b:d3:14:f9:33:98:45:f2:db:73:45:7d:9f:
         b6:19:c2:eb:23:6d:ca:5f:00:30:de:59:63:03:34:24:55:d0:
         db:a5:db:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:15:10 2026 by rpki-client