Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/ekljz6keL0jMzgXLL61-BbfOA_o.asa
File:                     ekljz6keL0jMzgXLL61-BbfOA_o.asa (raw, json)
Hash identifier:          6SVDUniDMkK7s4GO2Jl3pm29NsYfbDB+Ywpn4YNVyP0=
Subject key identifier:   7A:49:63:CF:A9:1E:2F:48:CC:CE:05:CB:2F:AD:7E:05:B7:CE:03:FA
Certificate issuer:       /CN=6ffe7b21b62183d5e3d4ae1b93ff00909282c912
Certificate serial:       019F1901439BB6C10CDAB28EE578D93C0953
Authority key identifier: 6F:FE:7B:21:B6:21:83:D5:E3:D4:AE:1B:93:FF:00:90:92:82:C9:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/ekljz6keL0jMzgXLL61-BbfOA_o.asa
Signing time:             Tue 30 Jun 2026 14:49:00 +0000
ASPA not before:          Tue 30 Jun 2026 14:49:00 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            197942
Providers:                AS: 1257
                          AS: 3301
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:43:9b:b6:c1:0c:da:b2:8e:e5:78:d9:3c:09:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ffe7b21b62183d5e3d4ae1b93ff00909282c912
        Validity
            Not Before: Jun 30 14:49:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7a4963cfa91e2f48ccce05cb2fad7e05b7ce03fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d3:88:77:9b:f7:d6:9b:41:9f:ce:8f:9d:cc:
                    69:ef:1c:97:a6:ad:86:23:81:15:55:88:68:72:8a:
                    51:49:d9:a0:be:77:7f:9a:a9:dd:fa:0a:70:e7:10:
                    18:bd:84:c1:8e:43:1b:6a:63:80:f7:11:68:0a:33:
                    6e:ab:37:62:a3:ef:99:ca:43:cf:f8:88:8e:bd:ca:
                    2c:3b:79:5f:31:e3:84:38:6e:8b:7e:5c:20:6a:32:
                    1d:d9:ed:2b:27:68:26:59:0b:a4:75:5d:94:f8:5f:
                    a4:91:08:ce:78:42:24:a0:b7:1d:a7:1b:89:fb:ec:
                    c9:9f:ea:18:29:af:5c:2a:c3:b2:29:c5:e8:19:a0:
                    9c:00:9c:02:e8:04:36:d4:4a:65:0f:94:b7:c2:71:
                    81:b6:40:77:c9:b3:5e:e3:61:f0:17:41:1c:55:cd:
                    7f:43:b8:60:8f:0c:5b:50:f0:af:a0:9c:dc:12:d9:
                    90:62:2b:e3:30:c1:30:5b:e4:6a:0f:e1:89:df:59:
                    6a:e2:6c:b2:2e:b0:9f:cf:19:91:39:cb:85:97:a7:
                    e5:78:6f:60:2a:c8:ca:e2:4b:88:f7:9c:a5:cf:38:
                    8c:f4:28:44:b0:9c:8d:51:5f:ee:f3:c3:e5:8e:ef:
                    f7:a9:cb:1b:2f:21:fc:28:88:ff:4a:09:2a:e0:67:
                    38:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:49:63:CF:A9:1E:2F:48:CC:CE:05:CB:2F:AD:7E:05:B7:CE:03:FA
            X509v3 Authority Key Identifier:
                keyid:6F:FE:7B:21:B6:21:83:D5:E3:D4:AE:1B:93:FF:00:90:92:82:C9:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/ekljz6keL0jMzgXLL61-BbfOA_o.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197942

    Signature Algorithm: sha256WithRSAEncryption
         5b:84:f0:7e:10:ac:96:c7:4d:d3:16:4a:92:4d:f7:5b:88:ca:
         24:36:21:34:37:c1:42:ca:34:48:d4:c7:b2:cc:cf:6b:07:09:
         73:d2:c2:94:ec:9f:fb:0a:9a:bf:1b:c8:19:1e:b0:57:94:72:
         58:65:32:1d:2c:ef:f3:f8:65:73:21:ec:6e:83:86:18:41:e9:
         f1:8a:61:44:38:b3:0e:c7:e1:b8:f6:20:36:b4:5c:10:31:7f:
         10:30:2d:e3:a4:0c:19:dd:ae:b2:20:3c:9e:f7:71:12:b0:73:
         66:07:bd:5f:e3:f0:e0:83:86:34:0f:f3:7a:82:08:28:98:6b:
         15:4b:38:ab:50:f0:a1:1d:ff:7c:bf:63:d3:1a:c1:98:27:b8:
         89:3f:20:49:9c:c1:6a:46:8b:26:07:0f:ec:b9:12:de:55:8f:
         bc:10:53:b4:4b:ff:88:32:c5:77:2c:c0:89:3d:1d:b9:03:c5:
         9b:f1:a3:83:4d:48:3d:d7:cb:7d:f6:ce:6b:08:c3:df:75:b3:
         17:00:41:08:16:0a:20:ff:a2:76:4e:16:37:5c:13:42:2c:74:
         ba:73:ad:e1:3b:85:54:36:d5:bd:c1:7d:b9:e6:c4:5c:95:fd:
         15:b1:e5:94:b2:c1:13:de:70:5f:4f:bc:da:b3:c9:a6:9c:21:
         1e:99:49:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:49:55 2026 by rpki-client