Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/I1JpGCaCnd74s6YyFhtsQo4ffys.asa
File:                     I1JpGCaCnd74s6YyFhtsQo4ffys.asa (raw, json)
Hash identifier:          8s5VDkoq2eGGIU5mP2xC+brcRoLXH1bqb0SZr2FGNMI=
Subject key identifier:   23:52:69:18:26:82:9D:DE:F8:B3:A6:32:16:1B:6C:42:8E:1F:7F:2B
Certificate issuer:       /CN=d1c4913094a21268c73a67653a3738d73e5c59a7
Certificate serial:       019E50F41FD108811BD163E3ED7143C19879
Authority key identifier: D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/I1JpGCaCnd74s6YyFhtsQo4ffys.asa
Signing time:             Fri 22 May 2026 18:30:36 +0000
ASPA not before:          Fri 22 May 2026 18:30:36 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            204176
Providers:                AS: 39120
                          AS: 56376
                          AS: 56911
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:50:f4:1f:d1:08:81:1b:d1:63:e3:ed:71:43:c1:98:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1c4913094a21268c73a67653a3738d73e5c59a7
        Validity
            Not Before: May 22 18:30:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2352691826829ddef8b3a632161b6c428e1f7f2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3b:d0:80:be:3c:ef:ec:9b:45:0d:3d:d9:b1:
                    86:7b:91:d2:6d:c5:c7:de:bd:00:66:19:77:fa:64:
                    68:48:56:d8:b4:02:24:56:7c:fa:1f:65:f9:4c:3a:
                    15:f3:e0:bf:50:83:16:1b:b9:c4:86:07:9e:1f:b5:
                    a8:f5:07:b6:61:6a:a7:e6:e8:7a:f5:b9:07:5f:89:
                    2d:8a:db:b4:bc:e3:0d:d0:c3:71:f3:e0:f6:ac:6d:
                    64:ed:6b:1c:47:19:82:7f:b8:5f:07:7f:66:11:fb:
                    f8:8a:82:dd:98:8a:74:13:26:25:10:ba:d0:50:49:
                    be:d9:ad:ec:68:b6:7a:e3:79:a1:c1:4d:c5:33:8c:
                    40:0c:f2:0e:4a:d8:e1:73:e3:b8:1f:d2:e1:06:6a:
                    2f:8d:6e:96:33:32:6b:a6:a3:df:89:81:c6:bd:15:
                    28:37:74:0d:25:54:d8:6c:7a:81:2e:78:42:e3:c0:
                    62:e9:5c:a4:61:f9:d4:79:8a:f6:a6:7a:6c:63:e3:
                    98:b3:0e:8f:16:f0:0a:03:be:21:22:5f:d1:2b:86:
                    48:75:c9:a5:19:23:36:c5:b8:50:d1:e2:72:3d:9a:
                    a1:f6:d0:ab:54:44:9a:16:09:c3:5a:fa:88:da:6c:
                    84:49:24:6d:fa:25:cc:be:66:d0:68:64:a2:48:ac:
                    08:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:52:69:18:26:82:9D:DE:F8:B3:A6:32:16:1B:6C:42:8E:1F:7F:2B
            X509v3 Authority Key Identifier:
                keyid:D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/I1JpGCaCnd74s6YyFhtsQo4ffys.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204176

    Signature Algorithm: sha256WithRSAEncryption
         30:86:8b:b7:c1:d3:9a:e9:7e:50:1e:f0:01:68:20:42:0a:c7:
         9b:7a:0a:43:2e:84:48:7e:a9:38:e0:cd:75:a5:a4:7a:fa:84:
         89:f2:7b:75:a3:bf:cf:a1:8b:2a:83:56:2e:13:d6:ed:38:80:
         08:61:67:76:03:3a:3a:62:84:e9:96:fc:da:c0:34:2a:fc:b8:
         a9:f5:d8:b1:46:29:f7:bd:81:73:57:ad:65:37:81:8c:5f:ac:
         9d:6e:51:a3:a6:ea:82:7d:3f:d9:e3:ea:a7:d8:65:d6:3b:5d:
         ad:53:d4:ca:9a:18:c0:2c:e4:97:0c:4d:1c:0b:a8:0a:52:87:
         7e:aa:a0:d8:77:36:87:44:a9:07:6d:36:e2:ff:4a:ba:e8:52:
         16:eb:56:81:33:c5:63:f8:e2:9e:ac:80:5f:1d:4a:98:df:25:
         ba:48:9c:1a:ab:9b:2a:10:41:7c:90:9c:21:d5:4a:63:7a:04:
         d3:53:b6:df:be:c8:f5:2b:a5:3d:87:61:ec:ca:ac:7a:d1:5f:
         f7:5e:37:28:10:90:67:c7:d0:d7:f8:34:cb:16:30:d7:61:7a:
         44:94:09:b6:41:57:e4:b9:9b:25:e2:35:5d:24:38:cc:0f:19:
         a7:b6:d0:aa:57:fc:3f:b6:b6:6e:50:58:a9:b8:ae:a7:37:3c:
         a2:c9:e9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:45:20 2026 by rpki-client