Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/Ledh3ytks4vVvPQKVNZW-CywdME.asa
File:                     Ledh3ytks4vVvPQKVNZW-CywdME.asa (raw, json)
Hash identifier:          wEkbzVsTHAI/hZOOB5TftO5Vy9bP7K1YrPCHKKhTjg8=
Subject key identifier:   2D:E7:61:DF:2B:64:B3:8B:D5:BC:F4:0A:54:D6:56:F8:2C:B0:74:C1
Certificate issuer:       /CN=db2303e96803793c3c48cda5207a41e74e50cb7c
Certificate serial:       019F1901550798E9A104F9560F6FAAAC4118
Authority key identifier: DB:23:03:E9:68:03:79:3C:3C:48:CD:A5:20:7A:41:E7:4E:50:CB:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2yMD6WgDeTw8SM2lIHpB505Qy3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/Ledh3ytks4vVvPQKVNZW-CywdME.asa
Signing time:             Tue 30 Jun 2026 14:49:05 +0000
ASPA not before:          Tue 30 Jun 2026 14:49:05 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            202732
Providers:                AS: 57575
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2yMD6WgDeTw8SM2lIHpB505Qy3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:55:07:98:e9:a1:04:f9:56:0f:6f:aa:ac:41:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db2303e96803793c3c48cda5207a41e74e50cb7c
        Validity
            Not Before: Jun 30 14:49:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2de761df2b64b38bd5bcf40a54d656f82cb074c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:33:cd:5d:89:74:54:ce:c9:c8:72:3b:1b:a1:
                    aa:78:5e:5c:8e:e7:10:bb:e2:32:20:1d:27:08:d2:
                    9c:21:08:39:ae:d7:96:0c:14:8e:23:2e:39:cd:cd:
                    30:eb:ef:ed:8b:c0:80:9e:36:e1:32:56:df:9f:8c:
                    24:cf:25:91:3e:63:81:0e:47:dc:e0:8e:fc:8c:4e:
                    f9:60:27:f6:b5:e2:54:65:fb:58:c2:a4:82:c6:ac:
                    e3:e2:57:2a:0b:bc:3b:4c:98:96:0b:9f:c2:99:9d:
                    f8:5d:1d:43:9e:e8:b4:bf:db:c9:a2:d7:c0:5b:c9:
                    8d:d0:82:e0:2b:28:a3:e5:73:3c:1a:19:04:50:14:
                    98:26:38:a6:9f:14:44:d2:ec:07:4f:63:95:90:ca:
                    ad:56:4c:e9:07:a2:2e:99:b8:8d:c6:04:2f:58:a2:
                    7a:7f:5d:3b:b7:50:94:e6:f7:6e:b3:3f:40:fb:fd:
                    36:34:c1:7f:34:36:90:59:2e:51:14:e4:29:c9:fc:
                    53:d2:7e:5c:16:92:dc:8c:78:4f:08:40:86:ce:2c:
                    e0:51:35:0a:43:cd:5b:dc:c5:c8:a2:49:52:90:d4:
                    63:85:f8:2a:d4:40:2c:67:79:c1:55:85:39:7b:9f:
                    6c:57:ee:ba:74:de:4e:8a:db:82:02:9b:0f:5d:86:
                    54:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E7:61:DF:2B:64:B3:8B:D5:BC:F4:0A:54:D6:56:F8:2C:B0:74:C1
            X509v3 Authority Key Identifier:
                keyid:DB:23:03:E9:68:03:79:3C:3C:48:CD:A5:20:7A:41:E7:4E:50:CB:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yMD6WgDeTw8SM2lIHpB505Qy3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/Ledh3ytks4vVvPQKVNZW-CywdME.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202732

    Signature Algorithm: sha256WithRSAEncryption
         0a:6e:6b:ce:75:52:49:3c:83:08:f2:69:b6:de:c1:60:00:8e:
         70:5f:7c:8d:48:5c:e4:06:e1:ce:79:b6:bb:99:19:df:59:b1:
         30:c1:32:5f:e7:76:a1:da:8b:c8:f6:00:ed:e7:e9:4a:8b:db:
         13:a5:1e:db:e2:5b:81:d6:51:80:fc:15:32:6b:4e:dd:80:d2:
         97:c0:c8:d7:8a:c3:c2:82:2f:bf:88:ec:25:b2:42:aa:73:f6:
         a1:60:8f:ac:9a:56:e3:0e:f6:29:1b:89:94:2c:75:8b:d7:2a:
         1f:2b:c0:79:9d:5f:11:ae:77:2c:6e:71:ef:65:f4:4d:05:94:
         c9:91:1b:e2:d0:88:22:bf:ac:1b:9a:36:70:7a:0f:33:2b:84:
         e1:9c:90:53:12:19:21:b2:6a:f9:39:da:64:43:34:51:6e:84:
         be:31:33:2d:a0:62:97:a6:ef:bb:7a:b5:de:58:fa:1e:39:14:
         15:a9:8e:64:f3:ff:b9:55:0a:ef:be:a9:45:4c:f3:20:b8:0a:
         76:1e:c4:6a:0a:2c:95:3b:db:b8:a4:20:34:11:48:ec:c2:56:
         76:79:5c:5c:30:c9:dc:53:a6:ae:fb:f8:ee:37:07:52:61:2f:
         22:41:9b:9b:4d:67:bf:b9:be:c1:70:03:b0:d5:e0:93:93:9e:
         e5:17:4f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:00:21 2026 by rpki-client