Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/3150ee-70a3-4569-a732-53be7358e252/1/b9SZegPwSzxHPkJmXkOZdO34Isk.asa
File:                     b9SZegPwSzxHPkJmXkOZdO34Isk.asa (raw, json)
Hash identifier:          E7JZVgnPZLiJMVvltmZKGhM+/DtbizayQSGX/wVp+IM=
Subject key identifier:   6F:D4:99:7A:03:F0:4B:3C:47:3E:42:66:5E:43:99:74:ED:F8:22:C9
Certificate issuer:       /CN=d0425d254dfff3e12a9672930843fc0e9abc9062
Certificate serial:       01A0343E850F6544CED3EE45CFB79E3129E4
Authority key identifier: D0:42:5D:25:4D:FF:F3:E1:2A:96:72:93:08:43:FC:0E:9A:BC:90:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/3150ee-70a3-4569-a732-53be7358e252/1/b9SZegPwSzxHPkJmXkOZdO34Isk.asa
Signing time:             Mon 24 Aug 2026 14:48:27 +0000
ASPA not before:          Mon 24 Aug 2026 14:48:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            197754
Providers:                AS: 6939
                          AS: 8283
                          AS: 50869
                          AS: 202585
                          AS: 203291
                          AS: 210320
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/3150ee-70a3-4569-a732-53be7358e252/1/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/3150ee-70a3-4569-a732-53be7358e252/1/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:34:3e:85:0f:65:44:ce:d3:ee:45:cf:b7:9e:31:29:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0425d254dfff3e12a9672930843fc0e9abc9062
        Validity
            Not Before: Aug 24 14:48:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6fd4997a03f04b3c473e42665e439974edf822c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9a:91:eb:fa:14:14:4d:8d:af:5d:44:fa:e4:
                    ea:5e:85:27:40:67:2c:57:3c:ee:f9:55:72:79:f7:
                    95:02:85:81:02:b9:15:a3:36:e0:eb:98:3b:5e:4d:
                    cb:40:70:aa:98:e9:54:6c:f5:58:55:de:10:f2:9e:
                    1e:98:20:f0:23:ab:b2:c2:db:ae:fe:dd:a9:ce:6f:
                    d8:05:ab:76:96:c3:74:1e:5b:b7:a0:5e:ad:84:c5:
                    64:b2:c2:1d:7c:13:b1:59:f1:ce:58:a2:45:90:62:
                    a9:ca:1b:4d:c2:e5:e7:5e:6f:b8:2e:43:56:60:ed:
                    63:b5:d7:7f:fb:ee:62:0a:66:a8:d0:e3:57:48:11:
                    23:ac:2e:8f:60:ef:0d:43:ea:6b:7f:c3:c8:b4:4e:
                    1d:61:b2:65:93:db:ac:f5:50:45:8c:c1:a0:94:d9:
                    f1:6e:1e:da:cf:96:03:6d:d5:28:94:ed:b1:8f:f7:
                    09:9e:9a:e6:f3:1d:1e:d3:e2:f6:67:a2:c9:04:eb:
                    d6:f6:a2:ac:41:39:c5:ff:de:95:7c:34:18:6b:dd:
                    6b:ea:66:4f:a0:44:b0:35:90:62:9b:64:2f:4e:25:
                    b5:29:81:50:80:66:32:80:7e:88:d0:c2:9c:c2:1d:
                    d6:34:c2:d4:5f:d4:c4:8e:48:85:73:0e:74:51:a3:
                    36:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D4:99:7A:03:F0:4B:3C:47:3E:42:66:5E:43:99:74:ED:F8:22:C9
            X509v3 Authority Key Identifier:
                keyid:D0:42:5D:25:4D:FF:F3:E1:2A:96:72:93:08:43:FC:0E:9A:BC:90:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/3150ee-70a3-4569-a732-53be7358e252/1/b9SZegPwSzxHPkJmXkOZdO34Isk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/3150ee-70a3-4569-a732-53be7358e252/1/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197754

    Signature Algorithm: sha256WithRSAEncryption
         5a:2d:7e:ec:21:7b:98:24:e4:c2:48:b4:eb:81:9b:b5:af:d6:
         45:b1:00:12:01:42:bd:70:b9:d4:f1:d6:d8:8f:d2:9d:2d:89:
         e1:fb:2a:07:07:b3:9e:8d:63:28:79:0e:b0:5f:c2:6f:eb:4b:
         0d:a1:57:35:f0:b7:ae:45:47:b1:c6:17:26:fa:99:ed:68:51:
         b7:1b:48:f9:51:b6:5c:ef:23:57:db:03:dd:2c:8c:49:ca:10:
         b9:97:5a:73:70:64:77:4a:e4:b3:b1:86:5a:32:a0:8d:2a:b1:
         fb:4d:7e:ff:a7:c3:06:12:82:10:2e:dd:47:f4:aa:3b:9f:f1:
         4f:db:68:56:98:7d:1d:f3:2f:28:4e:b5:41:59:f8:5c:b4:ae:
         01:90:70:40:93:14:cf:62:8d:29:e7:2e:8d:04:f2:ea:37:dd:
         1a:c9:0a:de:09:8a:4e:44:ee:9b:01:3c:d6:90:e4:7f:ac:65:
         b4:9b:11:4f:9e:e5:07:dc:56:71:09:bb:e2:b2:40:5d:e9:77:
         a3:7a:c3:6e:bd:04:06:7d:ba:b9:17:7a:ac:da:9f:1e:b0:f0:
         f2:15:4f:65:d3:ee:8d:20:2f:cd:2d:7d:29:04:55:b8:61:ff:
         68:a7:2e:20:c6:37:f2:a7:34:36:14:3a:3b:72:7a:62:68:9b:
         b0:aa:c4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:22:57 2026 by rpki-client