Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/20sKUViZ_Hjr1_tKwt6E16rEi4A.asa
File:                     20sKUViZ_Hjr1_tKwt6E16rEi4A.asa (raw, json)
Hash identifier:          +8vZKz+2gviXypf2joFi3QZPabFG5GEATLlv5LqXS4o=
Subject key identifier:   DB:4B:0A:51:58:99:FC:78:EB:D7:FB:4A:C2:DE:84:D7:AA:C4:8B:80
Certificate issuer:       /CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
Certificate serial:       019F19013BED807C85D2773885F4D319C241
Authority key identifier: 97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/20sKUViZ_Hjr1_tKwt6E16rEi4A.asa
Signing time:             Tue 30 Jun 2026 14:48:58 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:58 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            4492
Providers:                AS: 0
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:3b:ed:80:7c:85:d2:77:38:85:f4:d3:19:c2:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
        Validity
            Not Before: Jun 30 14:48:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=db4b0a515899fc78ebd7fb4ac2de84d7aac48b80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ce:e8:ce:3f:1f:c4:a7:d5:42:26:5b:d3:87:
                    db:62:44:5c:a3:9d:93:c1:37:91:ce:e0:b9:a2:01:
                    cf:80:22:a9:6b:48:52:d9:c6:48:30:d3:a1:27:46:
                    f3:3e:a2:7f:3b:95:5d:0e:a9:48:bb:6c:4f:f0:6a:
                    46:59:43:72:ee:e4:8c:04:b6:5e:79:38:05:b2:59:
                    a1:f2:bb:e4:61:69:58:56:38:36:55:de:ea:05:ac:
                    ea:69:54:80:44:4f:53:22:0b:d9:19:6f:e1:df:ad:
                    b5:cc:c9:61:cb:b3:77:28:30:2f:54:82:2b:70:a0:
                    cf:34:9d:cd:ac:70:0c:61:12:58:fe:39:66:4d:d0:
                    bb:50:08:64:3b:bd:88:2c:38:45:04:7c:93:2f:26:
                    0c:f6:45:92:28:a7:0a:99:7c:be:56:89:b7:2f:66:
                    4e:25:6d:5d:bf:0b:c9:94:a3:6f:c7:6a:b2:92:9c:
                    d3:24:a8:ce:02:6a:e1:e5:e0:14:d3:8e:e8:03:0b:
                    31:e7:13:d6:96:df:f0:6f:14:c4:fd:0e:b6:80:11:
                    df:b8:30:a5:4d:90:8f:4e:15:c7:c5:77:06:78:2c:
                    d5:e0:4d:d0:4b:71:27:5e:6a:30:72:0f:a7:a0:09:
                    31:ff:ae:76:ef:03:0e:90:2b:52:1d:c0:63:04:49:
                    8e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:4B:0A:51:58:99:FC:78:EB:D7:FB:4A:C2:DE:84:D7:AA:C4:8B:80
            X509v3 Authority Key Identifier:
                keyid:97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/20sKUViZ_Hjr1_tKwt6E16rEi4A.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  4492

    Signature Algorithm: sha256WithRSAEncryption
         5e:71:7f:9c:35:cb:bf:b3:23:db:83:64:f1:b9:c0:2c:02:12:
         0d:93:a7:43:88:31:c5:31:ce:8b:ac:58:76:9f:e0:fe:c3:b5:
         83:c1:12:2f:8d:83:dd:df:b4:68:93:b6:35:33:df:bc:ed:2d:
         bc:83:bb:8d:cf:72:f0:7a:8c:35:f5:9a:f8:c3:c8:53:06:56:
         cc:a3:f9:49:ec:3b:ad:5b:24:38:3b:c4:af:59:a4:be:85:aa:
         8d:fb:8a:51:61:0b:c2:0c:e6:5c:90:26:f3:ee:39:9a:f6:54:
         8e:56:ff:e6:18:9b:cf:68:b1:ad:ca:fc:b7:a8:98:d8:f3:f3:
         1c:72:d2:65:df:ff:59:02:6a:8b:45:b4:cf:8a:40:2a:3d:05:
         90:0d:fc:f8:c0:31:c0:29:70:2a:61:6d:88:da:28:a0:80:e5:
         cf:89:1e:fe:8f:31:81:50:cd:aa:9d:8a:81:50:bf:9d:70:2d:
         34:44:f9:3a:38:ea:c0:8b:8c:5b:47:00:b0:da:3f:32:ec:ff:
         fc:4e:60:36:92:fb:a8:ae:d3:b4:49:4a:a5:b8:89:b3:79:67:
         73:13:29:a5:60:d7:87:54:47:6d:0e:3a:a2:b0:da:a3:77:fc:
         a2:6c:c0:e2:2a:ab:ff:71:2a:d0:d7:38:4d:7b:51:d0:01:dd:
         9a:cf:e3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:15:16 2026 by rpki-client