Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/PwBTang0Vc6dN8qNs-9O8VEBvo0.asa
File:                     PwBTang0Vc6dN8qNs-9O8VEBvo0.asa (raw, json)
Hash identifier:          /Swb/ZVBIdPhTfwvFRJ5FEJJwAFcFsEFTN2ZDc1e37U=
Subject key identifier:   3F:00:53:6A:78:34:55:CE:9D:37:CA:8D:B3:EF:4E:F1:51:01:BE:8D
Certificate issuer:       /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial:       019F19010B0BEAB95EF7E4F5DAE9EF2740C6
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/PwBTang0Vc6dN8qNs-9O8VEBvo0.asa
Signing time:             Tue 30 Jun 2026 14:48:46 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:46 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            199399
Providers:                AS: 5408
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:0b:0b:ea:b9:5e:f7:e4:f5:da:e9:ef:27:40:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
        Validity
            Not Before: Jun 30 14:48:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3f00536a783455ce9d37ca8db3ef4ef15101be8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5d:6c:80:30:33:0a:d7:92:13:9e:f6:22:3d:
                    3f:70:c5:28:e6:b4:17:f2:8f:3f:8f:01:42:ed:e1:
                    c8:63:9f:2a:cf:fe:f5:3d:84:a6:7d:17:58:f2:bc:
                    7f:60:95:b5:ed:2d:0d:7b:fe:a2:ed:5f:42:e4:59:
                    24:bf:b7:6c:c3:0e:80:92:d2:c4:9d:b0:78:4d:e2:
                    75:5e:91:4c:45:4a:f1:ce:0b:67:9f:4b:31:6c:1b:
                    68:5a:55:7c:07:ea:2e:d0:9f:1b:47:07:fc:ef:fe:
                    18:10:40:23:36:0e:e9:64:f8:6a:de:6f:1c:87:49:
                    3b:c2:b7:59:88:56:ba:c9:9c:74:16:a0:fa:7e:47:
                    ab:11:d1:cd:13:df:6e:56:a4:23:ff:9f:5a:db:14:
                    af:e2:74:2b:bd:26:61:23:88:d7:66:6c:28:3e:63:
                    8f:8a:8c:93:a9:be:4d:6c:f6:fc:18:de:cc:7b:75:
                    12:c0:12:39:e5:8f:30:48:07:5d:e1:56:76:ef:fe:
                    05:a6:9d:49:fe:47:e7:f6:b0:93:0d:89:91:f6:44:
                    d9:9b:8a:10:87:21:f9:c5:90:ea:76:ca:72:d3:ff:
                    36:63:f0:4c:e3:c7:db:73:93:be:16:3c:40:0a:d6:
                    c9:ac:a9:c9:37:9f:24:72:28:08:be:4f:00:2a:24:
                    ab:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:00:53:6A:78:34:55:CE:9D:37:CA:8D:B3:EF:4E:F1:51:01:BE:8D
            X509v3 Authority Key Identifier:
                keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/PwBTang0Vc6dN8qNs-9O8VEBvo0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199399

    Signature Algorithm: sha256WithRSAEncryption
         96:bf:ef:f9:9f:97:bf:84:37:60:8a:ed:ed:88:74:29:31:2b:
         96:46:59:5b:92:67:0c:dc:60:d7:e6:e6:28:ac:ae:e1:a0:06:
         e8:07:1e:7b:9b:3f:d1:6a:c3:67:cc:ba:b6:69:18:3a:a7:fe:
         5c:a8:24:bd:08:f0:f3:fc:79:2c:8b:d8:21:96:d7:05:b2:b0:
         2f:4e:c6:9f:22:c0:5e:e8:71:25:02:3b:60:83:e7:6d:f1:e3:
         ca:26:72:11:ef:52:e9:f5:26:75:e6:2a:cc:a7:08:bb:af:f4:
         d2:3d:39:c5:c0:1f:54:ae:76:5e:4f:12:79:3e:8f:9f:96:64:
         a5:9e:c7:79:35:3e:fb:f0:83:71:44:93:8d:06:40:4a:57:18:
         1a:34:4e:24:93:b5:28:85:aa:67:53:55:89:59:60:1a:26:3c:
         e1:40:c3:75:71:3d:39:41:d4:e0:2c:df:2f:bc:9d:82:bf:79:
         42:9f:34:e3:ac:a3:a2:16:41:62:33:f1:88:b2:37:f5:61:88:
         00:31:d4:37:cb:eb:2a:9c:86:0c:a4:fc:92:05:75:5b:d0:06:
         09:de:0e:39:75:fa:a5:56:ea:62:f7:64:14:e4:5f:64:4d:91:
         5e:b3:66:b8:16:f7:38:c4:3f:e4:2a:ad:d1:84:f8:91:e1:b4:
         61:fc:90:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:04 2026 by rpki-client