Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/O0HrGhN3pYr9lUMIV7ErsXKdli8.asa
File:                     O0HrGhN3pYr9lUMIV7ErsXKdli8.asa (raw, json)
Hash identifier:          Ey/VrrgpurefOuj7hrY5WE3h1zlbk513RdzoUx24SFE=
Subject key identifier:   3B:41:EB:1A:13:77:A5:8A:FD:95:43:08:57:B1:2B:B1:72:9D:96:2F
Certificate issuer:       /CN=7b8985faea08598c05cc30b82e282306af793316
Certificate serial:       019F83EFBB1004DB2F8E4F8EAAE0824E8CE7
Authority key identifier: 7B:89:85:FA:EA:08:59:8C:05:CC:30:B8:2E:28:23:06:AF:79:33:16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/O0HrGhN3pYr9lUMIV7ErsXKdli8.asa
Signing time:             Tue 21 Jul 2026 09:09:14 +0000
ASPA not before:          Tue 21 Jul 2026 09:09:14 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            203352
Providers:                AS: 30781
                          AS: 203500
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:83:ef:bb:10:04:db:2f:8e:4f:8e:aa:e0:82:4e:8c:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b8985faea08598c05cc30b82e282306af793316
        Validity
            Not Before: Jul 21 09:09:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3b41eb1a1377a58afd95430857b12bb1729d962f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:44:44:e4:e1:7c:f9:5f:56:d3:09:34:1b:48:
                    da:61:3b:f5:70:cf:3b:a8:53:83:52:ab:d4:14:f4:
                    d3:f0:7d:d7:2a:23:cb:3b:19:c3:7f:11:f0:ea:ae:
                    12:a8:95:c0:a8:d6:aa:27:cc:04:40:33:87:23:da:
                    ff:67:e3:d8:f4:f1:c7:2a:ac:29:83:e7:f4:53:83:
                    ad:60:a1:36:bf:e6:f1:88:8e:31:92:2f:47:9a:70:
                    6c:43:6b:c1:a4:f5:76:bd:18:33:b0:4c:30:de:2b:
                    03:c6:58:cd:24:49:f4:de:ff:b7:56:ae:2b:09:cd:
                    f6:f4:1d:93:92:fd:c9:16:d1:86:4a:ea:df:76:ed:
                    c0:e0:f1:b6:b2:f1:c9:b2:00:12:4a:6a:d2:ca:01:
                    7c:25:57:31:14:1b:08:cc:e9:6e:87:cf:f5:33:79:
                    f0:27:16:45:d9:c9:bc:eb:3a:b4:2c:f9:ee:24:e1:
                    dc:87:3f:8a:29:9e:1f:da:6c:d1:3f:56:5f:d2:73:
                    5f:d8:06:12:ec:f7:86:da:a4:52:c7:5c:e7:f8:a3:
                    c5:ed:1d:8b:cd:68:e4:6a:45:66:bf:56:ae:13:55:
                    f7:94:2a:43:62:ad:18:94:5a:70:2a:39:96:26:6f:
                    13:37:7f:14:59:2d:7a:e3:cd:a0:08:49:22:b5:d7:
                    11:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:41:EB:1A:13:77:A5:8A:FD:95:43:08:57:B1:2B:B1:72:9D:96:2F
            X509v3 Authority Key Identifier:
                keyid:7B:89:85:FA:EA:08:59:8C:05:CC:30:B8:2E:28:23:06:AF:79:33:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/O0HrGhN3pYr9lUMIV7ErsXKdli8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203352

    Signature Algorithm: sha256WithRSAEncryption
         1f:e2:a9:ac:b0:2c:fd:3f:63:f8:e4:32:2b:91:7a:4d:fb:26:
         82:5a:6a:3a:f1:a4:58:c2:99:33:a8:b1:14:18:c8:7e:ac:26:
         45:2c:c1:52:c2:38:c8:ee:fd:80:62:78:e0:c0:bf:7f:97:bb:
         79:c1:30:61:6a:82:33:f7:a1:0e:1e:e2:2b:34:9f:d5:d3:12:
         44:60:1f:37:5e:20:7f:26:aa:2f:f4:c7:b9:31:99:19:31:e9:
         57:e5:99:89:d9:8b:bd:ba:8b:49:9d:31:bb:05:12:51:41:2a:
         10:e1:3b:94:de:81:db:52:32:85:82:a9:f0:11:24:30:b3:c0:
         c2:d6:de:fc:55:7a:39:28:d3:40:8b:8a:ec:71:63:f1:f8:57:
         b7:da:7c:66:c6:84:4a:b4:d0:57:81:73:89:a4:cf:de:dc:35:
         a6:6b:9d:2e:09:49:62:bb:b7:16:c1:09:8b:f1:fb:6e:3f:c8:
         89:69:e5:1b:72:46:32:27:1c:a9:6d:0d:2f:37:e0:a4:e4:30:
         ac:65:1e:8a:b2:85:ff:0a:62:ab:39:14:9e:30:6a:17:1a:12:
         d7:f5:37:4d:03:a9:ff:41:e5:50:1e:f1:5b:42:2c:6e:2a:c9:
         5a:ba:83:69:eb:55:e3:22:ed:31:ea:00:dc:d0:10:ab:ad:28:
         40:38:96:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:28:00 2026 by rpki-client