Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/5yU150CYFgmc1HknqQyGIZoghLc.asa
File:                     5yU150CYFgmc1HknqQyGIZoghLc.asa (raw, json)
Hash identifier:          +sPV0wEE3/G/TLyCFBEC22Hxf7c2lJSk/W51oGGyXzc=
Subject key identifier:   E7:25:35:E7:40:98:16:09:9C:D4:79:27:A9:0C:86:21:9A:20:84:B7
Certificate issuer:       /CN=71e80bc29cf9f2b40ac3024e0f7235dba2d57a54
Certificate serial:       01A09F261FD20DACAB5F39A656055C37022A
Authority key identifier: 71:E8:0B:C2:9C:F9:F2:B4:0A:C3:02:4E:0F:72:35:DB:A2:D5:7A:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cegLwpz58rQKwwJOD3I126LVelQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/5yU150CYFgmc1HknqQyGIZoghLc.asa
Signing time:             Mon 14 Sep 2026 09:01:10 +0000
ASPA not before:          Mon 14 Sep 2026 09:01:10 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            215382
Providers:                AS: 212514
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cegLwpz58rQKwwJOD3I126LVelQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 00:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:9f:26:1f:d2:0d:ac:ab:5f:39:a6:56:05:5c:37:02:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71e80bc29cf9f2b40ac3024e0f7235dba2d57a54
        Validity
            Not Before: Sep 14 09:01:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e72535e7409816099cd47927a90c86219a2084b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:88:1c:34:fd:f1:00:73:b0:39:21:ca:8a:fe:
                    91:43:de:fa:db:3c:93:d2:eb:00:cd:6b:9b:29:82:
                    c5:2d:23:79:ad:c2:b6:13:33:5b:33:5d:64:42:da:
                    27:59:e4:ac:a5:e3:6c:6d:8c:a6:e4:ea:df:84:ad:
                    6f:68:df:67:63:5c:43:fb:d1:0a:cd:66:31:25:a1:
                    df:97:9d:fe:ae:85:62:65:f3:9a:1e:f4:c2:3c:65:
                    fb:2a:02:a3:b3:b2:78:dc:c7:e3:17:1b:50:b8:fa:
                    32:f5:e6:55:dc:fe:10:47:82:91:81:1f:9d:95:79:
                    53:b3:12:84:dc:27:4d:57:67:b5:60:bd:69:29:0d:
                    a9:b1:58:84:75:6e:9d:60:fb:28:8a:e8:b3:75:96:
                    f1:4f:45:a5:76:b5:aa:73:81:77:06:83:2c:ad:cf:
                    ab:35:ab:96:e3:cd:04:ce:6a:72:7d:3b:0f:e7:8b:
                    56:f4:58:28:12:e6:fb:19:fc:ef:39:be:9b:7e:48:
                    f3:53:7d:c4:19:b3:a7:9a:96:63:53:54:08:ae:cc:
                    cc:9d:bd:2f:24:03:6b:ad:b9:e4:c8:61:30:96:f7:
                    9c:09:51:a6:df:71:26:7e:71:15:90:1f:d5:3b:63:
                    cd:97:f2:58:3d:29:ea:12:7b:a5:96:20:b5:4c:2e:
                    74:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:25:35:E7:40:98:16:09:9C:D4:79:27:A9:0C:86:21:9A:20:84:B7
            X509v3 Authority Key Identifier:
                keyid:71:E8:0B:C2:9C:F9:F2:B4:0A:C3:02:4E:0F:72:35:DB:A2:D5:7A:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cegLwpz58rQKwwJOD3I126LVelQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/5yU150CYFgmc1HknqQyGIZoghLc.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215382

    Signature Algorithm: sha256WithRSAEncryption
         73:b9:88:b2:89:5f:7b:45:ab:2a:cb:3a:db:24:b0:1d:f3:e3:
         8e:15:09:ba:e9:12:11:61:d5:fd:55:3f:80:7f:f6:fa:1e:bc:
         46:25:bf:28:5d:f9:b6:8b:9b:7c:68:d3:cf:c4:06:0f:5c:ac:
         e5:25:70:90:91:cb:05:5f:7e:44:78:b4:d6:1c:ba:ce:77:1d:
         ea:a8:01:26:6e:0f:5b:50:1e:4f:ae:af:be:86:7e:fa:f6:c2:
         a6:ec:27:f1:a3:41:6e:b6:71:9f:c7:fc:22:a2:2d:44:fb:fe:
         5b:4e:05:e4:67:42:09:1a:9e:42:00:5c:08:7e:ff:f7:ae:64:
         f7:1c:da:d8:38:60:66:09:4f:b4:a1:6c:ba:d8:85:da:3e:de:
         75:b8:f6:90:1f:93:e6:6f:71:af:a1:4d:1a:2d:65:45:65:14:
         c9:1a:79:62:df:a9:55:ac:aa:99:e0:ee:1e:9a:1c:b1:9b:5c:
         34:46:17:d7:66:fb:1e:b7:43:ac:15:db:cb:01:07:7b:9d:35:
         a0:eb:e6:49:90:14:bb:db:ff:57:68:68:4b:ca:71:8a:80:e2:
         7c:a5:24:c7:c9:de:98:a5:40:8f:d9:32:d2:32:c3:3b:c1:0a:
         bb:5e:f4:aa:2e:c3:b3:16:4b:05:3e:2c:60:6d:27:77:fb:57:
         f6:db:9c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:55:21 2026 by rpki-client