Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/jWXlavsE52YTVFZOpNefWWU1i6k.asa
File:                     jWXlavsE52YTVFZOpNefWWU1i6k.asa (raw, json)
Hash identifier:          vEyTlENGA5Gaf1l2XTZgXp/m9z8nLu21MiVt4HAmg+4=
Subject key identifier:   8D:65:E5:6A:FB:04:E7:66:13:54:56:4E:A4:D7:9F:59:65:35:8B:A9
Certificate issuer:       /CN=267d9ecb9964825d44dd266bbd32aa0804bc10f7
Certificate serial:       019F6B65E0DE2B1BB4B75D49E6108AE9F5B1
Authority key identifier: 26:7D:9E:CB:99:64:82:5D:44:DD:26:6B:BD:32:AA:08:04:BC:10:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/jWXlavsE52YTVFZOpNefWWU1i6k.asa
Signing time:             Thu 16 Jul 2026 14:47:46 +0000
ASPA not before:          Thu 16 Jul 2026 14:47:46 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            199534
Providers:                AS: 50293
                          AS: 205996
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 08:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:6b:65:e0:de:2b:1b:b4:b7:5d:49:e6:10:8a:e9:f5:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=267d9ecb9964825d44dd266bbd32aa0804bc10f7
        Validity
            Not Before: Jul 16 14:47:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8d65e56afb04e7661354564ea4d79f5965358ba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:61:62:71:74:a5:b8:87:f6:a9:8d:00:34:80:
                    e5:14:d1:fa:c9:98:eb:bd:6f:d8:8c:ba:3a:50:f9:
                    7d:95:70:07:04:95:35:04:3a:30:db:87:99:d9:88:
                    54:57:7d:d3:c3:1d:c5:3b:0a:33:9f:3c:02:41:01:
                    11:c1:dc:bc:c3:18:61:0d:72:d6:16:37:30:2d:bf:
                    64:27:42:5d:dd:c6:fa:be:36:1f:74:d5:db:44:75:
                    f6:dd:20:17:98:6e:d4:37:40:1d:57:65:a0:d7:fd:
                    ca:6d:0d:f2:c6:53:19:1b:23:ac:ce:5f:1d:fe:4e:
                    54:e2:06:7b:a2:c4:e3:91:a0:42:02:6e:ad:f5:fc:
                    cb:e3:fe:a6:2d:4d:f5:b1:e0:26:bd:5d:e8:bb:50:
                    77:79:6d:6b:53:85:26:56:94:65:4a:27:1d:f5:b9:
                    2b:20:57:fa:45:7c:7e:57:5d:00:45:f9:61:16:2a:
                    9c:fd:12:af:55:8d:e2:40:07:7b:a4:91:6d:88:cb:
                    5f:92:59:c8:05:8f:b9:0c:3e:e2:87:5f:0a:5e:75:
                    47:7c:d5:79:ba:92:0a:16:e9:97:df:0d:69:f9:00:
                    43:1c:c5:9a:3a:1d:7a:18:ad:ae:0e:9c:b3:2b:ca:
                    40:e9:cc:7a:14:aa:9f:82:70:12:e8:70:54:66:33:
                    3f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:65:E5:6A:FB:04:E7:66:13:54:56:4E:A4:D7:9F:59:65:35:8B:A9
            X509v3 Authority Key Identifier:
                keyid:26:7D:9E:CB:99:64:82:5D:44:DD:26:6B:BD:32:AA:08:04:BC:10:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/jWXlavsE52YTVFZOpNefWWU1i6k.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199534

    Signature Algorithm: sha256WithRSAEncryption
         3b:83:3a:64:77:1d:8c:7f:70:c4:30:8d:da:f7:c4:3a:2d:c9:
         ea:9a:04:6f:55:c6:96:e6:f6:19:27:cc:a0:51:8d:fb:1d:e2:
         22:54:85:d8:c6:32:99:24:29:78:8e:46:96:21:c6:78:a1:d1:
         16:20:f7:d0:82:4a:59:4f:57:8c:e2:2f:98:a9:5b:41:bc:5d:
         36:04:60:4f:59:79:69:2f:17:91:80:6d:2a:d1:50:c7:dd:8f:
         f7:85:48:0a:e6:e9:eb:d3:73:76:db:16:c3:2b:2a:91:ae:7e:
         3f:b6:7d:53:8e:6f:7a:d3:73:96:02:87:ae:88:2d:a0:f0:f6:
         02:da:e5:03:19:f3:39:35:d5:41:41:44:fa:b9:e7:d9:73:e2:
         a6:21:fd:83:03:b7:d6:6b:38:59:bf:3b:bf:bb:e6:cf:a7:f9:
         85:0c:55:ff:82:a4:ea:33:5a:51:66:67:89:68:3d:0b:1a:dc:
         7a:ae:ab:b2:59:a6:8e:e8:dd:d0:dd:65:63:76:43:ae:7a:96:
         85:3a:47:f5:8d:0c:d8:a9:f9:c5:b6:85:4b:65:2a:54:22:23:
         d9:7f:45:8d:01:08:f7:40:ca:bb:e6:bb:4f:3e:0e:06:84:b6:
         8d:47:bc:ff:3c:9b:9a:a9:dc:47:83:5c:0a:98:4c:03:24:c2:
         09:c4:80:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:12 2026 by rpki-client