Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/ullWMQMNWNs2m-qavM2ZaH0wLLY.asa
File:                     ullWMQMNWNs2m-qavM2ZaH0wLLY.asa (raw, json)
Hash identifier:          Hs+EUjaBHhmBRRhyoMI5LyzKTqwRJd2HGRT6RAN80K8=
Subject key identifier:   BA:59:56:31:03:0D:58:DB:36:9B:EA:9A:BC:CD:99:68:7D:30:2C:B6
Certificate issuer:       /CN=e4f2a866202f4b8cbc33382d6e82d81d8964c80e
Certificate serial:       019DF202E515BCA95D4DD3140070B06B2E77
Authority key identifier: E4:F2:A8:66:20:2F:4B:8C:BC:33:38:2D:6E:82:D8:1D:89:64:C8:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5PKoZiAvS4y8MzgtboLYHYlkyA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/ullWMQMNWNs2m-qavM2ZaH0wLLY.asa
Signing time:             Mon 04 May 2026 08:02:49 +0000
ASPA not before:          Mon 04 May 2026 08:02:49 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200725
Providers:                AS: 199599
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5PKoZiAvS4y8MzgtboLYHYlkyA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:f2:02:e5:15:bc:a9:5d:4d:d3:14:00:70:b0:6b:2e:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4f2a866202f4b8cbc33382d6e82d81d8964c80e
        Validity
            Not Before: May  4 08:02:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ba595631030d58db369bea9abccd99687d302cb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:df:a8:35:1e:00:d4:c7:97:40:51:f0:b5:41:
                    59:5c:2b:1a:68:6c:40:50:7c:7e:88:2d:28:74:50:
                    10:a6:a9:45:fc:c0:cd:61:f3:dd:ae:a0:fe:9c:06:
                    18:40:c9:ff:0c:ec:c8:2d:e0:ea:b2:0a:56:9d:51:
                    41:78:ac:bd:1d:ed:1c:d8:3f:92:5f:ec:be:42:07:
                    70:ad:de:0a:f0:9c:52:f0:fe:d7:fa:06:ad:59:67:
                    c4:47:bb:bf:78:ed:73:1d:a6:59:40:8b:46:14:1f:
                    8d:7b:89:64:43:3d:b3:dd:7d:14:3d:3e:99:46:eb:
                    04:cc:8e:b5:0c:0e:8a:2a:4a:fd:96:de:e4:e3:08:
                    82:3e:b6:0a:96:e5:b0:84:18:43:2f:09:14:26:e7:
                    13:a3:20:ee:07:f0:a6:1c:1d:ec:7d:56:64:b4:5b:
                    5c:e8:13:c4:d4:b0:34:0c:c0:7a:20:4f:2b:a1:74:
                    64:f3:02:ff:be:ea:f7:c8:10:10:bd:e3:8d:c7:a1:
                    a9:4d:7f:53:bb:67:e3:e0:17:eb:a8:88:31:32:22:
                    03:06:06:8d:18:c1:ec:18:a6:58:4e:af:c0:2c:d8:
                    8b:75:73:2a:3c:e6:24:0f:63:21:23:14:9b:36:4c:
                    8a:f0:6b:e5:d4:24:a0:84:3e:bd:51:6b:38:1b:9f:
                    7b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:59:56:31:03:0D:58:DB:36:9B:EA:9A:BC:CD:99:68:7D:30:2C:B6
            X509v3 Authority Key Identifier:
                keyid:E4:F2:A8:66:20:2F:4B:8C:BC:33:38:2D:6E:82:D8:1D:89:64:C8:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PKoZiAvS4y8MzgtboLYHYlkyA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/ullWMQMNWNs2m-qavM2ZaH0wLLY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200725

    Signature Algorithm: sha256WithRSAEncryption
         8f:f6:29:67:b0:fa:a8:dd:1c:60:db:f7:0a:e1:aa:d3:9f:a7:
         b7:8e:a7:b9:28:9a:65:b7:41:14:95:f3:c9:6d:5d:9d:41:49:
         f5:b1:c2:0a:2f:a0:0e:9b:bd:ac:89:86:38:ad:5b:44:9a:4b:
         dc:2c:c6:d4:80:43:c9:95:94:7a:f1:6d:db:1f:32:61:aa:7d:
         b3:fc:80:54:82:1e:d4:9d:01:ac:27:20:91:6a:ba:f1:38:75:
         80:10:5e:96:2f:23:49:dd:64:61:d5:a5:3a:41:bc:1b:de:c7:
         f4:3e:4c:7f:85:95:e2:8c:64:7a:97:fa:78:27:89:9b:0c:74:
         93:c1:4a:ca:ba:2e:90:8f:7d:c6:47:ac:ad:cd:1c:55:06:15:
         d0:49:37:41:af:f2:54:9b:f9:58:76:ee:ec:3c:06:cb:bc:ed:
         3d:b0:4f:62:bc:ff:da:9e:1e:b1:37:04:9f:3e:42:84:61:e7:
         42:31:34:cb:e4:f5:38:b4:da:eb:a9:9f:67:b8:52:68:3b:c9:
         71:e9:2e:60:87:fb:b1:42:ee:f9:8c:eb:86:1d:de:00:c7:c6:
         27:be:86:67:0e:d3:86:c9:9f:43:a0:e0:94:78:5f:54:22:63:
         52:2a:75:36:b5:9a:c6:a6:ff:ed:f1:47:a4:fc:82:ef:96:4f:
         0c:78:97:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:24:48 2026 by rpki-client