Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/PSXgbstGMyjW_mMkM7IVEqdHJ1A.asa
File:                     PSXgbstGMyjW_mMkM7IVEqdHJ1A.asa (raw, json)
Hash identifier:          eV63GJ9ipiimjdW8Etph0ZZ2mFMgDuXa4HBBJK921ZI=
Subject key identifier:   3D:25:E0:6E:CB:46:33:28:D6:FE:63:24:33:B2:15:12:A7:47:27:50
Certificate issuer:       /CN=647664ba5773614a3c44f90c12ae725548a75cd4
Certificate serial:       019F65D551C6E6403840BEF5123D14A2886C
Authority key identifier: 64:76:64:BA:57:73:61:4A:3C:44:F9:0C:12:AE:72:55:48:A7:5C:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/PSXgbstGMyjW_mMkM7IVEqdHJ1A.asa
Signing time:             Wed 15 Jul 2026 12:51:46 +0000
ASPA not before:          Wed 15 Jul 2026 12:51:46 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            213449
Providers:                AS: 47536
                          AS: 49600
                          AS: 203446
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 09:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:65:d5:51:c6:e6:40:38:40:be:f5:12:3d:14:a2:88:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647664ba5773614a3c44f90c12ae725548a75cd4
        Validity
            Not Before: Jul 15 12:51:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3d25e06ecb463328d6fe632433b21512a7472750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:50:ad:c9:fd:6d:d2:cc:8f:b7:ea:f0:5f:cb:
                    55:bc:aa:a8:40:f8:b6:a8:58:93:f5:bc:c2:38:82:
                    08:bf:c5:ba:26:ec:24:f0:66:a7:f1:50:77:de:83:
                    13:26:24:2b:b8:09:07:0b:e5:8b:99:41:35:91:a3:
                    75:9f:32:47:d8:1c:1e:0e:d3:c5:48:7b:04:b8:65:
                    10:50:e7:17:10:f6:8a:e6:8e:c4:95:b1:3c:ad:ba:
                    94:f6:24:07:16:18:41:41:a9:6d:c7:2e:31:ee:18:
                    fa:7a:f3:56:5a:d0:bc:07:51:34:bd:45:09:2d:d5:
                    ca:cf:76:25:70:eb:11:18:6c:59:e5:52:76:3b:9b:
                    bf:e4:f5:61:92:eb:ef:27:73:f7:6a:42:ba:e9:42:
                    07:cc:72:e6:68:25:f5:e4:a4:b1:cc:5b:a2:e2:74:
                    ef:2d:a5:b5:3e:ef:80:e6:4b:56:78:e9:b3:c5:3d:
                    f1:3b:8f:cf:58:15:60:52:ee:63:e9:45:0a:ac:e5:
                    bd:bb:87:5b:fc:a0:30:3f:0b:5b:42:da:1e:f6:75:
                    f2:88:3a:e5:c5:0b:d0:92:ad:83:80:4f:5e:ce:c0:
                    cd:31:fa:cf:21:e5:66:b6:c2:6a:bc:b4:b0:aa:85:
                    33:4f:81:b5:4d:be:72:6e:be:10:e9:e9:8e:80:c2:
                    a7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:25:E0:6E:CB:46:33:28:D6:FE:63:24:33:B2:15:12:A7:47:27:50
            X509v3 Authority Key Identifier:
                keyid:64:76:64:BA:57:73:61:4A:3C:44:F9:0C:12:AE:72:55:48:A7:5C:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/PSXgbstGMyjW_mMkM7IVEqdHJ1A.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213449

    Signature Algorithm: sha256WithRSAEncryption
         23:8c:d1:22:61:1b:d8:86:72:45:91:14:5b:fa:1a:73:88:ca:
         50:eb:b0:c0:c7:61:03:74:28:37:df:ff:c3:fb:9c:af:5c:d4:
         03:18:3a:53:e8:32:5e:94:b5:d3:fc:5a:31:06:c9:cb:63:3a:
         94:11:e1:64:d3:4e:5b:34:e3:28:7b:6b:3d:ef:62:51:9c:9a:
         af:6b:49:46:53:29:ce:c9:69:53:bc:ab:f8:63:e8:79:05:6f:
         04:fb:68:62:8b:18:10:b0:06:a8:9a:d7:dc:9d:02:cc:62:27:
         82:07:97:8e:40:f2:24:c6:8d:70:62:67:16:c1:04:a8:aa:18:
         a9:ba:00:59:4b:0d:80:6e:14:cb:f3:b4:fb:aa:ed:8a:8f:8e:
         79:49:08:24:ef:70:a2:24:b4:20:4b:25:ad:54:5b:ee:cf:0d:
         34:30:a2:6b:f7:38:f9:75:fa:d7:34:77:bb:8f:94:2d:a2:8e:
         bb:98:b5:d0:79:da:83:f9:71:41:00:51:56:63:e9:eb:64:b9:
         92:e0:2d:48:26:fd:2d:d8:bd:bb:15:1a:c6:6c:84:3b:00:dc:
         ca:d5:51:c6:0f:cf:38:e8:73:58:b9:02:27:74:c6:91:79:f9:
         ea:ec:5b:12:12:b3:40:08:52:5e:47:88:04:b8:3e:ea:33:51:
         8b:d3:81:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:02 2026 by rpki-client