Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/Y1BBsDkkWgEF03wDI0HCnPosmio.asa
File:                     Y1BBsDkkWgEF03wDI0HCnPosmio.asa (raw, json)
Hash identifier:          IevDpGbfjZ+T3hHUsK1Etx0/ZUjksfcbztMdQzNnqY8=
Subject key identifier:   63:50:41:B0:39:24:5A:01:05:D3:7C:03:23:41:C2:9C:FA:2C:9A:2A
Certificate issuer:       /CN=089b4d6f7a0a33b0180411ed74f87a7cfed96521
Certificate serial:       019F5A2295CA2465D401CCA5BDEBEBDB08A5
Authority key identifier: 08:9B:4D:6F:7A:0A:33:B0:18:04:11:ED:74:F8:7A:7C:FE:D9:65:21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/Y1BBsDkkWgEF03wDI0HCnPosmio.asa
Signing time:             Mon 13 Jul 2026 06:20:43 +0000
ASPA not before:          Mon 13 Jul 2026 06:20:43 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            201988
Providers:                AS: 44486
                          AS: 49581
                          AS: 209693
                          AS: 210457
                          AS: 215730
                          AS: 401152
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:5a:22:95:ca:24:65:d4:01:cc:a5:bd:eb:eb:db:08:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=089b4d6f7a0a33b0180411ed74f87a7cfed96521
        Validity
            Not Before: Jul 13 06:20:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=635041b039245a0105d37c032341c29cfa2c9a2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:45:c3:ed:73:1a:86:9b:5e:00:7e:a9:a2:d4:
                    9a:c0:0d:ba:b0:3b:e3:28:dc:59:82:0c:c3:df:6c:
                    17:0a:04:a6:a1:8c:27:35:2c:20:f2:08:8e:8b:5b:
                    62:85:ef:cd:96:a1:84:11:bd:7e:32:80:de:09:68:
                    66:96:19:cd:f0:20:57:b6:fb:15:63:53:82:a3:9a:
                    0a:b2:99:24:ac:36:10:03:be:d8:f3:3f:79:40:45:
                    8f:ba:7f:2f:50:06:85:77:b8:7c:10:2e:0c:c1:dd:
                    ba:4a:16:fd:99:43:e3:a8:65:cb:c5:51:12:36:65:
                    11:78:96:87:56:63:c4:3a:84:16:40:2d:60:fc:57:
                    55:af:98:fd:ee:15:43:89:47:6d:f0:72:ea:54:08:
                    23:c1:c4:ca:15:89:6e:d2:09:f8:5d:fd:ef:0c:f3:
                    19:5b:66:d7:e2:0d:63:9b:9e:6c:91:d2:f1:be:14:
                    e0:f8:b8:9f:79:4f:03:97:0f:f0:3f:97:55:61:e3:
                    2d:30:17:8e:94:08:b9:41:9d:85:3c:38:40:bf:29:
                    fe:fb:34:b7:b9:d0:87:66:6b:ce:cc:c9:a2:bb:db:
                    6b:cc:ec:4f:da:ed:b0:e5:28:73:66:c5:59:e5:5e:
                    71:74:3f:a3:56:cf:b4:3a:8a:0e:b3:77:9f:47:ac:
                    52:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:50:41:B0:39:24:5A:01:05:D3:7C:03:23:41:C2:9C:FA:2C:9A:2A
            X509v3 Authority Key Identifier:
                keyid:08:9B:4D:6F:7A:0A:33:B0:18:04:11:ED:74:F8:7A:7C:FE:D9:65:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/Y1BBsDkkWgEF03wDI0HCnPosmio.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201988

    Signature Algorithm: sha256WithRSAEncryption
         6e:e4:53:07:8b:a6:c8:5d:e4:00:b1:df:e4:99:d3:54:33:4c:
         33:04:19:c6:d0:27:40:c4:cf:85:0c:ed:26:52:aa:2b:99:2a:
         8c:8d:50:3e:47:da:28:07:0d:74:b4:35:fe:50:90:66:fa:09:
         12:e0:17:e1:54:cd:df:33:99:54:00:9b:69:ab:ea:36:f4:c2:
         86:02:43:48:ee:9c:99:22:f8:f6:2c:f2:67:ce:89:21:55:c8:
         cc:67:85:f5:20:80:6f:55:d0:5b:8e:25:8e:a8:0f:b8:4b:5c:
         78:7d:74:05:bc:f2:7c:ae:8d:3d:ad:5d:2d:18:2c:c8:3a:9e:
         b2:eb:e5:e8:67:8f:ea:60:f5:c2:79:94:19:ef:c1:ea:e9:1e:
         be:6d:92:1c:f6:18:4b:1d:2e:4b:ce:ec:82:7a:d6:a6:bd:5f:
         ff:5c:ab:e2:e2:7a:88:80:78:bb:11:69:6f:47:55:14:bd:5b:
         95:57:15:4c:38:6a:4e:16:10:b0:aa:80:89:12:0f:8e:75:91:
         1d:26:79:78:bd:82:67:d1:f0:48:ce:7c:04:b5:01:89:e3:3a:
         d5:3b:86:9d:24:c1:96:cf:5e:f9:75:ad:b7:c4:1d:bd:e4:59:
         fc:f4:9c:c9:8e:f0:1c:78:74:38:6f:7f:01:c4:f9:9c:09:03:
         7a:f8:0f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:15:19 2026 by rpki-client