Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/6tGAKZ4MqV5UFZsBV8e4qQ1jPyc.asa
File:                     6tGAKZ4MqV5UFZsBV8e4qQ1jPyc.asa (raw, json)
Hash identifier:          jqj3okaRwVOd/+fc0bu7LbkMLkFPhaWH+EIGRkgApVo=
Subject key identifier:   EA:D1:80:29:9E:0C:A9:5E:54:15:9B:01:57:C7:B8:A9:0D:63:3F:27
Certificate issuer:       /CN=2c2d883449f67ad4709d5cabb406ea8bc3873421
Certificate serial:       019DA528B128D7B2BD9CA1FDB4CDEAC736FD
Authority key identifier: 2C:2D:88:34:49:F6:7A:D4:70:9D:5C:AB:B4:06:EA:8B:C3:87:34:21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LC2INEn2etRwnVyrtAbqi8OHNCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/6tGAKZ4MqV5UFZsBV8e4qQ1jPyc.asa
Signing time:             Sun 19 Apr 2026 09:53:20 +0000
ASPA not before:          Sun 19 Apr 2026 09:53:20 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            198834
Providers:                AS: 8283
                          AS: 212635
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LC2INEn2etRwnVyrtAbqi8OHNCE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a5:28:b1:28:d7:b2:bd:9c:a1:fd:b4:cd:ea:c7:36:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c2d883449f67ad4709d5cabb406ea8bc3873421
        Validity
            Not Before: Apr 19 09:53:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ead180299e0ca95e54159b0157c7b8a90d633f27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:56:57:a4:72:f5:a8:f3:18:b3:30:be:37:6d:
                    d1:6e:be:78:3b:ad:3f:94:97:ea:20:ea:74:59:3c:
                    96:63:a0:d1:b0:4a:ff:5e:2a:06:a5:4d:09:81:00:
                    60:06:44:98:bd:92:67:7f:67:cb:c9:b6:d8:79:b3:
                    fe:5d:c3:60:b7:4d:91:66:3c:92:62:e6:14:a8:9b:
                    8a:46:16:4c:84:21:df:63:59:c8:00:ee:89:2b:93:
                    0a:36:73:75:22:18:ad:5a:2f:59:94:31:56:10:55:
                    2a:c7:df:87:eb:39:9c:f5:ee:28:2a:12:96:9f:0b:
                    9f:6f:d4:18:77:69:df:2b:1f:b1:36:2e:ad:c3:08:
                    e0:e7:cf:5e:07:fa:ec:63:6b:77:6e:c7:48:d6:a4:
                    a5:fe:5d:31:34:2c:53:fe:15:53:3f:e3:0e:6f:e5:
                    64:d7:44:ad:ae:4e:4a:16:e9:8c:0f:bd:3a:16:2d:
                    aa:19:89:70:8e:28:88:a9:95:8b:98:03:f2:9e:a6:
                    1c:57:5b:11:ad:a7:8a:bd:92:46:18:0d:6f:42:c7:
                    6f:25:96:e6:52:b0:35:4a:40:2d:9b:c2:0f:57:03:
                    52:75:40:dc:88:5c:4b:10:43:27:62:e4:67:f2:98:
                    af:5f:47:0e:cb:9c:a2:a0:0c:bb:de:80:dd:92:a6:
                    2d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D1:80:29:9E:0C:A9:5E:54:15:9B:01:57:C7:B8:A9:0D:63:3F:27
            X509v3 Authority Key Identifier:
                keyid:2C:2D:88:34:49:F6:7A:D4:70:9D:5C:AB:B4:06:EA:8B:C3:87:34:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LC2INEn2etRwnVyrtAbqi8OHNCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/6tGAKZ4MqV5UFZsBV8e4qQ1jPyc.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198834

    Signature Algorithm: sha256WithRSAEncryption
         20:47:14:fd:f2:f8:3d:2b:61:da:8f:e8:9c:8c:96:de:4f:0b:
         43:1b:50:ab:28:bd:6a:73:19:c4:ef:fe:de:21:e8:9d:54:3a:
         df:0c:fd:9c:5c:6c:15:3d:58:27:c0:f6:67:43:10:4d:cb:cb:
         47:f4:cb:f0:83:e8:d9:a4:13:96:fe:db:64:e4:8a:09:bc:e2:
         91:07:94:89:9d:06:da:be:ec:11:e7:a3:c7:23:19:c4:b7:0c:
         71:4c:f2:a6:b6:ee:10:53:87:e3:63:6e:41:ec:78:1d:99:e7:
         9c:6c:30:cd:97:3b:68:ae:f9:46:42:f4:b1:43:60:f1:6d:43:
         11:0b:ec:45:0c:dc:a3:6f:73:34:43:53:7c:0b:04:03:3e:f4:
         e5:0e:1d:df:c7:99:f9:9b:b5:7f:29:13:60:53:20:22:70:ea:
         55:72:7e:42:b9:fc:1b:6b:13:2a:b1:e6:3b:a0:fd:20:08:9d:
         14:51:21:fe:83:38:79:37:14:ca:4e:c5:b9:5c:83:ac:1f:20:
         70:ce:a7:5e:5e:fe:5f:b3:92:84:bd:03:1e:de:fc:c4:52:04:
         81:b2:2a:8d:6b:71:8a:dd:3d:9d:24:44:be:d6:c7:63:ba:2a:
         fb:b5:44:82:0d:1c:d1:67:d0:82:c1:90:42:65:2e:ad:c1:1c:
         1d:ea:a3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:27:14 2026 by rpki-client