Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/ytydS8iceftOnYaB5-5LVqpPFZo.asa
File:                     ytydS8iceftOnYaB5-5LVqpPFZo.asa (raw, json)
Hash identifier:          DW5PX1MGoo1+t2QgyExciwvbXJdSvCnWIToame1qzqQ=
Subject key identifier:   CA:DC:9D:4B:C8:9C:79:FB:4E:9D:86:81:E7:EE:4B:56:AA:4F:15:9A
Certificate issuer:       /CN=951d493b1bc0a8c852dd11cfc937891dac3f07c2
Certificate serial:       01A0AD790F627F2EA7DB5564AC99C70E67AE
Authority key identifier: 95:1D:49:3B:1B:C0:A8:C8:52:DD:11:CF:C9:37:89:1D:AC:3F:07:C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lR1JOxvAqMhS3RHPyTeJHaw_B8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/ytydS8iceftOnYaB5-5LVqpPFZo.asa
Signing time:             Thu 17 Sep 2026 03:46:27 +0000
ASPA not before:          Thu 17 Sep 2026 03:46:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            204180
Providers:                AS: 174
                          AS: 12874
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lR1JOxvAqMhS3RHPyTeJHaw_B8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 06:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ad:79:0f:62:7f:2e:a7:db:55:64:ac:99:c7:0e:67:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=951d493b1bc0a8c852dd11cfc937891dac3f07c2
        Validity
            Not Before: Sep 17 03:46:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=cadc9d4bc89c79fb4e9d8681e7ee4b56aa4f159a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6a:53:54:73:a7:52:9f:cc:fa:69:f3:d7:04:
                    52:92:c8:f1:95:27:58:ba:10:09:07:dd:2c:4b:99:
                    46:3e:14:10:8b:06:9e:e4:1a:ab:e8:c6:46:8c:44:
                    46:a8:ea:6f:ce:59:ac:2a:99:61:59:86:47:28:58:
                    da:1f:6e:92:bf:a4:b5:14:59:d2:1d:e9:ac:98:2e:
                    8a:4b:6d:bc:48:1a:51:53:ac:71:3a:1c:ff:65:5c:
                    5b:93:a7:62:8f:b1:73:ed:ac:0a:0c:38:03:36:ce:
                    bb:1b:15:85:fa:97:09:4d:24:d9:d8:b4:3c:fe:21:
                    1d:15:75:4d:02:c0:8d:cf:89:39:a0:ca:63:0b:82:
                    d0:0b:c1:8f:c6:13:74:62:c8:95:e9:e3:da:a2:45:
                    e0:f3:04:02:c7:33:88:48:cd:89:9e:c1:31:85:0f:
                    e8:48:24:1a:09:34:a5:dd:33:f7:eb:f3:6f:6d:d6:
                    ba:92:a9:ae:23:6b:64:56:e8:e1:c0:fa:fa:ec:c0:
                    8c:8d:8d:f7:ad:37:d8:60:d7:8c:b4:c4:08:61:17:
                    f3:f0:64:09:fe:1e:86:cf:cc:58:f4:c9:71:6b:c6:
                    0e:b1:b7:15:0a:ec:fd:0d:ce:ec:cc:d0:bc:e7:0a:
                    73:e4:b7:2f:65:6c:f7:1f:76:b5:6d:7a:ec:27:63:
                    5a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:DC:9D:4B:C8:9C:79:FB:4E:9D:86:81:E7:EE:4B:56:AA:4F:15:9A
            X509v3 Authority Key Identifier:
                keyid:95:1D:49:3B:1B:C0:A8:C8:52:DD:11:CF:C9:37:89:1D:AC:3F:07:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lR1JOxvAqMhS3RHPyTeJHaw_B8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/ytydS8iceftOnYaB5-5LVqpPFZo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204180

    Signature Algorithm: sha256WithRSAEncryption
         11:f1:b3:92:bf:01:69:ff:ce:18:93:92:20:9c:09:30:25:81:
         e5:31:9a:9e:6d:2b:de:c9:95:45:e5:09:74:77:72:a8:4f:c9:
         99:ff:3b:a9:55:a7:2b:17:28:35:75:31:3d:e6:cb:fb:26:a1:
         eb:b1:b9:d8:9b:33:15:02:81:93:85:de:f1:c8:65:07:72:e6:
         70:e9:ec:17:aa:26:bd:6a:65:10:4d:8f:35:fc:10:ed:8c:2e:
         bf:01:a8:60:bf:7f:c5:d5:09:a4:24:e0:6a:a8:12:46:86:cc:
         05:79:a0:77:84:76:a5:55:bb:04:36:1c:db:63:99:0f:b5:7f:
         fe:06:49:30:46:b3:3e:28:0c:a6:51:e3:07:fa:1f:7c:10:49:
         da:89:c8:ac:29:5d:d2:68:eb:40:fd:be:a7:fb:fa:2f:e2:95:
         6b:eb:2d:20:dc:42:1c:3e:08:8c:1f:74:c8:1a:87:32:2e:89:
         4a:05:9c:27:86:0b:5b:66:57:e4:25:ae:bd:58:62:e3:9d:12:
         e4:d6:1e:cd:c1:57:4b:50:d4:da:fa:ef:5d:ac:6c:b0:b1:03:
         01:4d:70:dc:b9:e5:b4:e1:86:2b:23:52:1a:a1:a0:f7:4a:e5:
         47:19:6d:f3:5b:b5:09:01:2a:2a:e5:35:19:16:d7:3d:91:6b:
         20:8e:42:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:59:45 2026 by rpki-client