Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/666099-db59-4d33-9887-91f31008a2eb/1/yeXW_YTNCb28ui0glUomJkKeHCk.asa
File:                     yeXW_YTNCb28ui0glUomJkKeHCk.asa (raw, json)
Hash identifier:          vdoh5rReyHOdjiVdFljYmY00V/dpR9j9Pzzhrb2/aMU=
Subject key identifier:   C9:E5:D6:FD:84:CD:09:BD:BC:BA:2D:20:95:4A:26:26:42:9E:1C:29
Certificate issuer:       /CN=8a7d82bfa6cbf983b970349401bdef78ed6682b8
Certificate serial:       019F847E8DCBB76493BFA63B10ACE69CAE26
Authority key identifier: 8A:7D:82:BF:A6:CB:F9:83:B9:70:34:94:01:BD:EF:78:ED:66:82:B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/in2Cv6bL-YO5cDSUAb3veO1mgrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/666099-db59-4d33-9887-91f31008a2eb/1/yeXW_YTNCb28ui0glUomJkKeHCk.asa
Signing time:             Tue 21 Jul 2026 11:45:14 +0000
ASPA not before:          Tue 21 Jul 2026 11:45:14 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            204084
Providers:                AS: 62160
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/666099-db59-4d33-9887-91f31008a2eb/1/in2Cv6bL-YO5cDSUAb3veO1mgrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/666099-db59-4d33-9887-91f31008a2eb/1/in2Cv6bL-YO5cDSUAb3veO1mgrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/in2Cv6bL-YO5cDSUAb3veO1mgrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:84:7e:8d:cb:b7:64:93:bf:a6:3b:10:ac:e6:9c:ae:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a7d82bfa6cbf983b970349401bdef78ed6682b8
        Validity
            Not Before: Jul 21 11:45:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c9e5d6fd84cd09bdbcba2d20954a2626429e1c29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d3:c5:a1:f3:71:e4:ed:f8:89:fc:8a:f6:8c:
                    f0:69:bb:ed:61:33:65:a5:d4:f2:4d:b7:d7:08:0b:
                    df:97:f1:9c:55:88:a1:67:04:5b:4c:18:07:c2:e6:
                    89:24:4e:af:e6:95:2b:02:f6:1d:fd:54:66:19:d1:
                    a9:4d:9e:db:1b:2f:14:e6:cd:d0:c9:74:c8:c6:e3:
                    ba:ac:d6:1a:ff:ff:9d:a1:9e:f2:af:09:21:61:49:
                    8f:6f:42:d5:34:18:a3:60:98:55:ef:84:db:14:2a:
                    dc:af:03:39:6b:9e:9a:f0:8b:20:af:f9:07:8e:c6:
                    41:3e:55:8f:73:58:f1:d8:c5:6f:d7:53:f4:c9:d2:
                    16:0e:53:cc:d6:29:69:47:c4:56:4e:b4:8e:50:d6:
                    bf:9f:e8:f1:60:35:86:10:be:c0:4b:93:88:d8:23:
                    59:9d:f7:f4:8a:c1:6b:a3:22:06:6b:b4:e1:3e:02:
                    64:2b:e8:3a:9d:0c:1a:b1:d2:98:c2:39:6c:66:5f:
                    21:1a:39:49:e1:3b:b7:50:63:f8:f6:13:d8:a4:1c:
                    78:24:91:3f:7e:9d:b9:91:bd:02:a2:84:64:11:a9:
                    5a:74:8d:82:87:62:4d:33:3e:bc:a3:cb:0e:be:4b:
                    71:a5:a6:b1:20:c0:8b:c5:b0:79:b5:61:65:2a:ab:
                    75:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E5:D6:FD:84:CD:09:BD:BC:BA:2D:20:95:4A:26:26:42:9E:1C:29
            X509v3 Authority Key Identifier:
                keyid:8A:7D:82:BF:A6:CB:F9:83:B9:70:34:94:01:BD:EF:78:ED:66:82:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/in2Cv6bL-YO5cDSUAb3veO1mgrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/666099-db59-4d33-9887-91f31008a2eb/1/yeXW_YTNCb28ui0glUomJkKeHCk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/666099-db59-4d33-9887-91f31008a2eb/1/in2Cv6bL-YO5cDSUAb3veO1mgrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204084

    Signature Algorithm: sha256WithRSAEncryption
         55:a5:a3:30:2e:1b:bc:02:35:4d:79:1f:a8:58:b7:91:7a:c9:
         9f:43:51:ed:6e:bd:7e:29:a8:71:0c:25:92:4f:e3:b9:82:f0:
         8c:e5:23:72:1c:fc:e2:34:7e:d1:d6:cd:72:09:0b:2c:82:33:
         44:d3:4b:c4:c0:3f:7f:47:60:b4:bc:14:7e:15:08:ba:08:9b:
         01:e4:bb:ad:da:33:32:21:a7:4f:9d:3b:4f:6b:19:5c:dc:dc:
         ac:75:dd:86:d2:8a:72:5f:90:6a:63:82:08:ad:b7:c6:ec:e6:
         c7:02:f2:0a:d6:5c:dc:6f:8a:7a:dd:d2:07:ff:99:d8:a8:34:
         b2:e7:78:cf:b9:54:f4:5b:99:9d:cb:1e:d9:86:22:33:00:48:
         45:9a:e5:4b:64:a6:76:55:6e:f5:27:78:99:65:85:2f:e7:42:
         08:bb:85:95:c1:a2:60:e2:cc:97:b3:3a:1e:59:1d:76:db:2e:
         3c:69:04:bc:91:c8:bc:5f:09:f1:6c:b2:cc:d0:c5:60:f8:ca:
         88:85:d1:94:45:55:3b:93:02:c6:61:5b:70:20:6d:8f:96:c9:
         59:f9:c4:30:60:b5:a2:d2:f0:4b:8b:87:b1:f0:d1:31:c9:42:
         53:47:a9:9d:b4:a9:1c:28:4a:75:ec:d7:7a:2a:99:c8:68:0e:
         04:40:97:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:00:08 2026 by rpki-client