Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/987UGQBHlhAIBmJTT98LsfM70nU.asa
File:                     987UGQBHlhAIBmJTT98LsfM70nU.asa (raw, json)
Hash identifier:          /Hx349Kl9/8y8esH0xOTWfAlCzS+ip2tVIt9KgmRjp8=
Subject key identifier:   F7:CE:D4:19:00:47:96:10:08:06:62:53:4F:DF:0B:B1:F3:3B:D2:75
Certificate issuer:       /CN=14ac20acf2902071e72f67ca06b09cda38247b2b
Certificate serial:       019E1CDCDCC6BE31C816A4993DE7BECE886B
Authority key identifier: 14:AC:20:AC:F2:90:20:71:E7:2F:67:CA:06:B0:9C:DA:38:24:7B:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FKwgrPKQIHHnL2fKBrCc2jgkeys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/987UGQBHlhAIBmJTT98LsfM70nU.asa
Signing time:             Tue 12 May 2026 15:44:56 +0000
ASPA not before:          Tue 12 May 2026 15:44:56 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            198138
Providers:                AS: 917
                          AS: 16276
                          AS: 49418
                          AS: 57695
                          AS: 137409
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/FKwgrPKQIHHnL2fKBrCc2jgkeys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/FKwgrPKQIHHnL2fKBrCc2jgkeys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FKwgrPKQIHHnL2fKBrCc2jgkeys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:dc:dc:c6:be:31:c8:16:a4:99:3d:e7:be:ce:88:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14ac20acf2902071e72f67ca06b09cda38247b2b
        Validity
            Not Before: May 12 15:44:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f7ced41900479610080662534fdf0bb1f33bd275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0e:dd:c1:bc:9c:58:72:ad:73:18:ff:03:d1:
                    42:ec:0d:fa:f9:02:d4:6a:80:65:5a:15:2a:f9:ca:
                    48:f9:60:33:ce:4d:9e:88:49:95:16:6c:55:2e:a9:
                    52:ca:bf:59:ee:e3:5f:e0:f5:09:46:66:d9:1f:6a:
                    2d:b9:4b:cd:1d:31:34:5e:78:b6:12:76:30:6c:61:
                    01:d9:06:f4:d4:ce:c9:eb:3a:3c:b0:3c:2d:64:c3:
                    8a:80:b1:fc:3d:76:19:1f:a7:c9:4c:1b:c9:95:41:
                    c6:66:d5:ba:9b:bd:be:84:db:7e:98:8d:3a:c8:c3:
                    ea:1e:33:3c:ec:20:93:af:4d:94:04:26:ec:99:4b:
                    09:c0:d5:70:c6:03:5e:4b:6d:33:fe:c7:77:3f:cf:
                    93:65:84:f6:98:ef:bd:ec:bf:6b:63:6a:25:a6:37:
                    5a:8c:55:28:df:73:71:57:e8:06:24:ec:c5:8b:11:
                    3b:77:b2:09:9e:64:78:8d:c7:70:b5:66:f8:f6:37:
                    f2:86:d9:86:cb:a4:c5:48:08:c0:db:80:fc:b6:ca:
                    fa:00:ad:69:d2:82:2c:3a:33:65:61:f4:26:a1:68:
                    b0:cc:71:01:c9:b9:65:67:f9:85:01:2b:8d:81:57:
                    5b:00:36:76:f3:72:aa:90:39:98:44:d8:fc:7e:c7:
                    7f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:CE:D4:19:00:47:96:10:08:06:62:53:4F:DF:0B:B1:F3:3B:D2:75
            X509v3 Authority Key Identifier:
                keyid:14:AC:20:AC:F2:90:20:71:E7:2F:67:CA:06:B0:9C:DA:38:24:7B:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKwgrPKQIHHnL2fKBrCc2jgkeys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/987UGQBHlhAIBmJTT98LsfM70nU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/FKwgrPKQIHHnL2fKBrCc2jgkeys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198138

    Signature Algorithm: sha256WithRSAEncryption
         ad:6d:45:d5:9d:13:2c:50:8f:7b:80:fc:7f:90:cd:c0:c7:d4:
         7c:da:70:ce:11:ae:41:b6:19:ab:8f:7c:be:64:b7:6b:dc:54:
         92:cf:fa:eb:66:b6:35:f9:e4:8a:f5:01:ea:bd:ec:52:69:0b:
         43:57:f3:99:db:52:69:26:42:90:b4:53:9c:34:96:7e:a3:1e:
         58:6b:d4:78:c6:b1:91:54:40:52:da:c4:5c:4d:73:49:aa:5e:
         3b:50:ab:12:b4:6b:e6:af:01:24:ad:0a:71:0e:47:18:38:e8:
         72:f4:97:7a:48:51:63:e0:1f:66:4f:50:ba:04:fb:ff:52:9e:
         1b:ea:64:1d:81:b7:a5:42:f1:70:81:3f:c0:36:ea:ae:57:30:
         49:36:32:fb:4e:49:9d:94:9e:00:5d:bf:d4:94:3c:e3:5e:a0:
         de:2d:6d:5e:92:97:35:49:33:87:45:5f:70:40:f2:6f:80:46:
         5c:4b:62:d6:a8:34:87:36:9d:c3:18:29:aa:8d:fd:7f:f7:7c:
         be:f3:c6:aa:88:a0:92:77:29:07:af:0b:41:00:ed:dd:d4:24:
         90:3a:8b:e9:88:00:00:eb:88:a9:c3:85:f3:b1:05:4e:61:69:
         fa:fa:37:ee:72:8b:4d:b6:eb:1f:11:40:9d:d1:16:eb:f9:03:
         82:83:69:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:18:26 2026 by rpki-client