Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/wvfBOreCybbt9afiUMU5R2NBdJQ.asa
File:                     wvfBOreCybbt9afiUMU5R2NBdJQ.asa (raw, json)
Hash identifier:          IVFtZ0X879D2RM6GVRG/lhLBfD0N96F/6jJoFE+cRr0=
Subject key identifier:   C2:F7:C1:3A:B7:82:C9:B6:ED:F5:A7:E2:50:C5:39:47:63:41:74:94
Certificate issuer:       /CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
Certificate serial:       019F190103CBFEF845CCD8578462FB9EE516
Authority key identifier: A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/wvfBOreCybbt9afiUMU5R2NBdJQ.asa
Signing time:             Tue 30 Jun 2026 14:48:44 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:44 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            39525
Providers:                AS: 0
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:03:cb:fe:f8:45:cc:d8:57:84:62:fb:9e:e5:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
        Validity
            Not Before: Jun 30 14:48:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c2f7c13ab782c9b6edf5a7e250c5394763417494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b0:02:79:a1:7d:b9:ee:7a:41:d3:aa:98:0b:
                    d1:ab:6b:ba:3d:cf:80:b2:56:60:4e:e0:0d:b2:10:
                    1a:70:67:4e:19:ae:75:35:03:97:f4:24:26:c7:35:
                    91:02:73:d5:72:95:b6:9e:9d:11:81:c2:fd:ea:d6:
                    8c:53:37:30:1d:fd:3e:08:a6:c0:f4:45:07:dc:15:
                    1c:d1:60:d8:8c:ad:a4:fe:fb:1a:c9:bd:2d:3e:27:
                    11:88:55:54:b0:b6:7d:d7:cd:f4:d0:02:b1:86:32:
                    45:51:6f:ef:ea:ad:8e:5f:36:04:56:cc:df:a3:59:
                    26:31:e0:17:40:3c:b4:76:c7:1f:3b:5f:69:96:44:
                    d9:cb:4c:9e:a6:07:8d:77:ba:15:a7:14:8e:06:a7:
                    92:1c:54:57:42:6e:5a:83:c5:61:8e:85:9a:aa:ac:
                    38:1c:e2:b0:64:01:74:62:96:fc:b7:3e:ce:6b:dd:
                    dc:59:9a:89:e8:84:be:56:af:33:b9:17:e6:1b:a4:
                    a1:46:4f:f4:68:ba:1b:5d:38:ea:05:1b:12:64:54:
                    05:42:60:1b:08:7d:d3:49:0a:45:ed:81:de:7a:d7:
                    75:51:f7:fd:03:70:bc:0f:db:94:62:0f:34:3a:66:
                    84:e2:84:57:b6:fb:2f:29:e0:f6:d8:b2:f1:78:b0:
                    b9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F7:C1:3A:B7:82:C9:B6:ED:F5:A7:E2:50:C5:39:47:63:41:74:94
            X509v3 Authority Key Identifier:
                keyid:A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/wvfBOreCybbt9afiUMU5R2NBdJQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39525

    Signature Algorithm: sha256WithRSAEncryption
         18:ec:98:f6:9d:ff:46:a1:52:e0:68:28:df:57:da:6e:90:ca:
         8c:3b:0f:0d:f2:87:a5:4a:08:f1:06:c8:f6:77:e7:43:28:8d:
         8e:c2:91:45:97:15:0b:89:69:b0:f5:9d:7b:ad:4d:02:89:6d:
         8e:22:26:8a:e0:cd:e1:db:a4:31:a8:a7:eb:df:b8:04:54:a9:
         e0:b5:c8:ce:d5:ff:6d:f3:13:1f:41:6d:ee:da:6c:36:bd:7e:
         f2:68:8b:27:71:e6:b8:17:b3:bd:fd:d5:2e:c8:2b:1a:04:ee:
         80:3a:1a:2e:8d:92:af:0a:de:e5:25:00:62:16:9e:02:a4:49:
         d9:09:fc:bc:38:30:d7:55:ea:e4:9c:94:51:9d:75:89:78:cc:
         05:df:d1:13:b1:f0:c2:e3:88:76:c9:9b:3e:b5:22:57:3d:9e:
         41:f5:90:a2:23:6c:cf:47:04:31:21:e5:7a:17:25:3b:97:85:
         ca:1c:a8:55:cd:fa:00:b3:cb:aa:9c:86:f2:67:11:58:f7:2a:
         4a:9b:2c:09:d8:8e:f6:22:8e:f9:4d:b7:b0:da:f0:6c:64:3a:
         6f:b7:e8:80:24:7f:a7:2d:ef:ab:28:e7:27:f5:f3:4e:e9:f9:
         d1:11:63:f4:5d:6e:80:85:a4:6f:e1:9c:4f:f6:c4:c8:cc:88:
         04:bc:56:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 18:58:29 2026 by rpki-client