Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/c49e22-1de7-4367-993b-4ef4064eb423/1/2dAZPzGep5Pw2kcial6ZZsCljDU.asa
File:                     2dAZPzGep5Pw2kcial6ZZsCljDU.asa (raw, json)
Hash identifier:          PSFWBJ0QX8IskFWzeuqwArmVhOM53UoATMnv0gtE41M=
Subject key identifier:   D9:D0:19:3F:31:9E:A7:93:F0:DA:47:22:6A:5E:99:66:C0:A5:8C:35
Certificate issuer:       /CN=b82beffc4391d5b3bbd5fd4b0fc32af5db2006ca
Certificate serial:       019E1142E87121BC1F866ED03487B5636F8A
Authority key identifier: B8:2B:EF:FC:43:91:D5:B3:BB:D5:FD:4B:0F:C3:2A:F5:DB:20:06:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uCvv_EOR1bO71f1LD8Mq9dsgBso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/c49e22-1de7-4367-993b-4ef4064eb423/1/2dAZPzGep5Pw2kcial6ZZsCljDU.asa
Signing time:             Sun 10 May 2026 09:40:58 +0000
ASPA not before:          Sun 10 May 2026 09:40:58 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            199180
Providers:                AS: 58212
                          AS: 137409
                          AS: 199529
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/c49e22-1de7-4367-993b-4ef4064eb423/1/uCvv_EOR1bO71f1LD8Mq9dsgBso.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/c49e22-1de7-4367-993b-4ef4064eb423/1/uCvv_EOR1bO71f1LD8Mq9dsgBso.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uCvv_EOR1bO71f1LD8Mq9dsgBso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:11:42:e8:71:21:bc:1f:86:6e:d0:34:87:b5:63:6f:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b82beffc4391d5b3bbd5fd4b0fc32af5db2006ca
        Validity
            Not Before: May 10 09:40:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d9d0193f319ea793f0da47226a5e9966c0a58c35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b2:c1:e7:e9:d2:2d:ca:bd:9d:5f:df:54:e8:
                    0e:73:a5:76:6e:36:24:4a:d8:e4:34:1c:01:e1:a5:
                    bf:a1:eb:2d:de:6e:64:05:c8:11:fc:25:6c:7b:9e:
                    05:a0:d7:b7:f5:95:8a:1f:26:bd:ab:02:57:44:8d:
                    9f:75:52:57:6c:f2:93:71:af:1d:30:a4:7a:b5:b7:
                    55:f9:64:17:a0:a2:19:bc:60:c2:2d:60:49:82:cb:
                    00:9a:b8:1a:b3:ec:ec:50:03:2a:c5:51:f0:b7:58:
                    0d:16:31:bb:a9:c3:60:3f:bb:3d:fe:a6:35:45:99:
                    88:ea:ac:49:90:07:f8:24:36:e0:2f:13:f6:7c:22:
                    00:36:d8:7b:5f:01:8b:a7:7d:a3:1c:66:a3:e3:55:
                    f4:6a:31:33:19:3a:da:1c:cd:46:1b:af:cf:ed:b5:
                    4c:b0:8f:dc:32:ee:91:12:48:3c:3b:05:ee:55:15:
                    1b:16:dd:f1:78:5e:ea:f5:66:6e:1d:88:5c:22:16:
                    7f:d1:39:47:04:d2:ed:20:fd:9e:ab:7a:4d:a3:75:
                    8c:cb:46:bb:60:82:02:d9:94:4f:bd:e5:2f:b3:85:
                    e0:d4:a8:1d:13:03:b7:9c:5b:e3:3b:cf:01:bc:ba:
                    ce:68:f7:0b:20:8e:6d:6a:04:42:07:05:e9:b5:be:
                    33:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D0:19:3F:31:9E:A7:93:F0:DA:47:22:6A:5E:99:66:C0:A5:8C:35
            X509v3 Authority Key Identifier:
                keyid:B8:2B:EF:FC:43:91:D5:B3:BB:D5:FD:4B:0F:C3:2A:F5:DB:20:06:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCvv_EOR1bO71f1LD8Mq9dsgBso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c49e22-1de7-4367-993b-4ef4064eb423/1/2dAZPzGep5Pw2kcial6ZZsCljDU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c49e22-1de7-4367-993b-4ef4064eb423/1/uCvv_EOR1bO71f1LD8Mq9dsgBso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199180

    Signature Algorithm: sha256WithRSAEncryption
         8c:50:17:ff:47:a4:3d:a9:66:42:dd:c9:af:f6:93:8d:f6:9b:
         82:f0:69:f8:3c:70:d6:66:90:ea:99:43:bd:b9:99:62:01:8d:
         af:18:21:9a:70:72:20:a3:4d:84:4a:b2:69:a9:09:09:00:72:
         a0:a7:bb:a9:41:b9:cf:7b:52:48:88:44:c9:66:e8:b5:b9:b8:
         e9:01:86:e5:08:2e:9e:22:85:66:53:49:a4:c6:18:b9:c5:b1:
         46:57:d3:6c:a7:67:68:da:3d:f3:42:23:e5:a1:5b:59:af:9b:
         46:3a:32:b0:54:62:78:6c:24:9d:1b:43:6f:9e:50:10:42:7c:
         ae:ba:95:ad:f8:41:e3:02:70:ba:87:13:0a:e8:6c:3d:ba:07:
         8d:bd:a5:bb:77:c2:6d:dc:33:22:9d:b0:a1:09:7c:ba:33:56:
         ef:83:45:32:33:b6:13:b8:61:93:d8:f9:c9:bd:0d:74:5c:0f:
         ca:5b:a7:e8:87:b0:9e:06:59:69:1e:34:94:e2:5b:98:ce:23:
         5e:ba:e1:4b:31:ac:82:43:30:77:16:8f:45:ef:48:0f:59:6b:
         9e:03:94:bb:72:12:64:cd:f4:94:50:4c:de:51:34:ce:85:b6:
         12:84:fa:e5:3e:82:39:11:d1:4d:d2:48:85:fa:86:12:58:76:
         97:9f:ad:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:18:27 2026 by rpki-client