Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/PVaZHZBezI9Ji-35jkA_nsJIDXk.asa
File:                     PVaZHZBezI9Ji-35jkA_nsJIDXk.asa (raw, json)
Hash identifier:          DvdDkxAw9Upq75+H0lqqq/AWKRnHcmlBBJI8X1yTLH4=
Subject key identifier:   3D:56:99:1D:90:5E:CC:8F:49:8B:ED:F9:8E:40:3F:9E:C2:48:0D:79
Certificate issuer:       /CN=3787b324b0d32fb1a3678b02c482286d4c26ba0f
Certificate serial:       019DFF0667CD7BE422783DDD1FD792565292
Authority key identifier: 37:87:B3:24:B0:D3:2F:B1:A3:67:8B:02:C4:82:28:6D:4C:26:BA:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N4ezJLDTL7GjZ4sCxIIobUwmug8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/PVaZHZBezI9Ji-35jkA_nsJIDXk.asa
Signing time:             Wed 06 May 2026 20:41:42 +0000
ASPA not before:          Wed 06 May 2026 20:41:42 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            205315
Providers:                AS: 20473
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N4ezJLDTL7GjZ4sCxIIobUwmug8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 11:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ff:06:67:cd:7b:e4:22:78:3d:dd:1f:d7:92:56:52:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3787b324b0d32fb1a3678b02c482286d4c26ba0f
        Validity
            Not Before: May  6 20:41:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3d56991d905ecc8f498bedf98e403f9ec2480d79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7b:03:8a:70:ea:fe:c5:0c:44:a1:2c:dd:78:
                    84:1e:41:46:77:5f:ac:b6:7f:3c:ed:bc:1c:28:42:
                    b1:a5:16:a5:b9:21:01:20:33:0e:a2:ff:24:c0:89:
                    dc:90:cb:03:61:69:48:6f:67:70:39:e4:de:13:ca:
                    33:48:b7:f9:62:b9:64:84:42:90:e9:f8:e2:6e:00:
                    22:fd:5b:51:d8:1c:79:72:b3:6c:71:ef:14:5a:16:
                    f2:af:c1:2b:65:2d:fe:48:73:e2:9b:b6:93:aa:76:
                    45:3e:ce:66:29:f7:ff:c1:01:1e:e7:73:f5:ff:65:
                    58:48:3e:84:b6:29:9e:d0:3c:8f:4f:09:a1:8d:3c:
                    a7:3c:f0:b4:24:7c:2f:46:4f:aa:11:50:ea:7b:6e:
                    0a:d6:d3:a6:12:e0:cc:81:11:38:9c:32:27:49:da:
                    6c:9d:1e:8c:b3:52:c5:4d:52:f1:9d:2c:e3:ee:e4:
                    b4:c6:0b:cc:dd:24:ac:2f:ec:55:9c:c6:04:64:37:
                    ca:23:9c:c9:a7:98:89:09:03:9b:b9:6f:fb:9c:c6:
                    95:c1:07:55:60:6a:2a:5e:e3:aa:85:b2:85:bb:15:
                    da:7c:52:77:8b:1b:2b:5c:09:a8:e3:02:2f:a1:61:
                    8e:11:0f:46:fa:3c:0f:48:87:9c:d8:36:d5:c5:8c:
                    11:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:56:99:1D:90:5E:CC:8F:49:8B:ED:F9:8E:40:3F:9E:C2:48:0D:79
            X509v3 Authority Key Identifier:
                keyid:37:87:B3:24:B0:D3:2F:B1:A3:67:8B:02:C4:82:28:6D:4C:26:BA:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4ezJLDTL7GjZ4sCxIIobUwmug8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/PVaZHZBezI9Ji-35jkA_nsJIDXk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205315

    Signature Algorithm: sha256WithRSAEncryption
         87:a5:32:ae:81:50:f8:ae:36:90:4f:5f:b3:bd:41:e0:7f:05:
         22:55:85:c9:7e:07:5a:e9:a1:1e:17:b6:2d:49:36:36:43:63:
         0d:d2:4d:df:9a:1d:13:b5:21:14:da:14:06:2f:7a:7d:31:9a:
         0f:46:c4:da:95:97:0c:62:31:eb:4b:61:b5:c9:d0:88:3a:34:
         7f:8d:51:16:ed:ce:5a:27:bb:4d:39:8a:ed:35:f6:cc:c1:9e:
         1b:04:c7:0b:d5:87:5d:0b:a6:c6:e8:72:df:5a:c7:0c:01:4a:
         46:5c:21:e9:a4:ce:82:02:a9:bb:e4:b1:0d:a0:5c:b6:33:9d:
         08:82:8a:df:2e:e3:0d:c4:82:e9:f4:2e:28:9b:f2:05:27:8a:
         05:2d:65:c3:8c:c4:47:2d:65:ff:21:0a:b8:97:33:bc:23:8c:
         14:c6:b3:74:98:88:26:59:91:53:69:11:e8:40:c4:11:fd:2e:
         83:d3:e2:0d:ba:90:9d:a7:7f:65:19:14:c4:ee:34:f2:c0:a7:
         10:bc:e1:40:cf:f3:30:31:c0:8d:13:fc:4f:17:2a:3d:a8:61:
         e9:70:e7:2b:bd:66:2e:0e:56:73:10:cd:99:f3:06:2d:e6:82:
         3b:0c:1a:3a:13:a6:b3:b5:81:2c:f0:33:ee:21:d1:b1:a0:98:
         05:8a:b3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:13:13 2026 by rpki-client