Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/jZQNv-yh5eCwU2Kirw-Z5gHvj-c.asa
File:                     jZQNv-yh5eCwU2Kirw-Z5gHvj-c.asa (raw, json)
Hash identifier:          thfnHHqjTl52Y1pCia3Qv6HUHVqsAuWoPD4pOKWanAE=
Subject key identifier:   8D:94:0D:BF:EC:A1:E5:E0:B0:53:62:A2:AF:0F:99:E6:01:EF:8F:E7
Certificate issuer:       /CN=0d25cfd526aad72a4c8f4733faca0f4db7f9f767
Certificate serial:       019F1901218F5594D71EAAF00F987024B4E9
Authority key identifier: 0D:25:CF:D5:26:AA:D7:2A:4C:8F:47:33:FA:CA:0F:4D:B7:F9:F7:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DSXP1Saq1ypMj0cz-soPTbf592c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/jZQNv-yh5eCwU2Kirw-Z5gHvj-c.asa
Signing time:             Tue 30 Jun 2026 14:48:52 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:52 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            205079
Providers:                AS: 8283
                          AS: 34872
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DSXP1Saq1ypMj0cz-soPTbf592c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:21:8f:55:94:d7:1e:aa:f0:0f:98:70:24:b4:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d25cfd526aad72a4c8f4733faca0f4db7f9f767
        Validity
            Not Before: Jun 30 14:48:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8d940dbfeca1e5e0b05362a2af0f99e601ef8fe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bf:cb:44:8f:f0:1e:fa:d2:dd:ee:40:f6:b2:
                    d0:c3:e6:bd:be:f1:33:db:2a:72:e8:6b:df:85:ff:
                    30:4d:32:59:10:dc:bd:52:84:c6:26:55:7d:30:20:
                    eb:fa:3f:b5:74:0b:51:03:d5:2f:7d:b6:a0:4f:ef:
                    c6:a7:56:08:d2:08:47:d4:e7:b9:ec:71:8f:ca:dd:
                    4d:f4:ad:b7:a7:57:09:56:09:4c:82:a6:fc:3c:3d:
                    36:c2:14:90:b3:2c:0f:5f:bf:e5:8b:20:52:4f:95:
                    c0:93:bd:b2:6c:fd:fe:c2:d3:88:29:63:57:8c:15:
                    74:98:a1:db:ab:c2:b7:28:4f:dc:5d:5f:94:d7:9c:
                    a5:30:63:f0:70:13:10:fe:f6:b0:02:1d:41:57:35:
                    7a:14:2a:7c:dd:93:12:c2:bc:4f:0b:fa:7e:b3:da:
                    b8:33:b6:8c:16:5e:2e:40:61:a1:62:85:66:ef:81:
                    43:74:88:0a:a0:31:64:c4:c8:22:c9:4c:10:8f:c7:
                    dc:12:92:67:ca:93:e7:2c:ac:a6:57:ca:93:ab:69:
                    f4:7c:d5:a2:81:f1:53:56:32:40:b5:5d:87:76:55:
                    55:d4:8d:cf:5b:13:ea:34:2d:0f:f3:c0:07:02:ff:
                    52:99:60:33:52:7e:f4:47:54:e1:42:8f:45:93:c3:
                    9d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:94:0D:BF:EC:A1:E5:E0:B0:53:62:A2:AF:0F:99:E6:01:EF:8F:E7
            X509v3 Authority Key Identifier:
                keyid:0D:25:CF:D5:26:AA:D7:2A:4C:8F:47:33:FA:CA:0F:4D:B7:F9:F7:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSXP1Saq1ypMj0cz-soPTbf592c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/jZQNv-yh5eCwU2Kirw-Z5gHvj-c.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205079

    Signature Algorithm: sha256WithRSAEncryption
         cb:70:48:c5:f8:13:9d:79:be:26:8d:69:fc:98:fc:ab:ba:be:
         9a:39:57:d0:c6:b3:9c:00:6e:95:2d:25:6c:0a:c1:ba:b8:e1:
         f3:a7:50:45:92:84:34:03:5f:fb:6c:d0:3e:b2:df:07:96:7c:
         0d:96:fc:ee:8f:82:b8:e0:d4:19:0f:67:14:c8:c6:af:87:7a:
         2b:f6:0b:50:99:2a:34:2e:8c:0c:fd:26:f3:ac:e0:7c:66:dc:
         11:89:16:2a:59:cc:d5:a5:55:9c:61:11:52:dc:92:d1:b5:bb:
         7d:39:7d:7e:f1:1d:f9:23:29:1f:5c:fc:67:bd:02:30:ed:31:
         d0:dc:ed:ed:c7:2b:78:f6:8a:d6:f6:80:0b:5d:76:ef:47:0a:
         ca:32:09:83:33:45:e7:93:af:4f:01:a1:d5:9a:97:fa:6c:87:
         f1:88:b4:c0:d2:57:43:58:fc:7e:d7:d7:2a:7e:10:4c:21:78:
         31:d6:a4:9f:65:b2:64:33:b2:a5:ab:07:1c:23:3f:69:ec:25:
         ed:dc:7e:8e:96:ac:1c:8b:4f:a0:a5:4d:1b:62:20:fb:e9:30:
         08:c8:33:89:98:87:06:96:0a:ff:df:9d:41:f8:89:3e:ae:c2:
         d6:c3:58:a7:f3:0f:ff:81:30:59:6d:e5:a3:b8:3f:4d:5c:7b:
         52:36:a7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:15:05 2026 by rpki-client