Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/DUTKvgCWNSpJ9WtUyM6-cuSD6Ak.asa
File:                     DUTKvgCWNSpJ9WtUyM6-cuSD6Ak.asa (raw, json)
Hash identifier:          rtcyTQ/Ax9wwExDNQkJRPvzSkGydZo7p02EHK5G1rUA=
Subject key identifier:   0D:44:CA:BE:00:96:35:2A:49:F5:6B:54:C8:CE:BE:72:E4:83:E8:09
Certificate issuer:       /CN=2baee7ea482d62a671063eac83789af39f390b74
Certificate serial:       01A0AAEB60167E4961BC9510AD3E0607519C
Authority key identifier: 2B:AE:E7:EA:48:2D:62:A6:71:06:3E:AC:83:78:9A:F3:9F:39:0B:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/DUTKvgCWNSpJ9WtUyM6-cuSD6Ak.asa
Signing time:             Wed 16 Sep 2026 15:52:27 +0000
ASPA not before:          Wed 16 Sep 2026 15:52:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            197885
Providers:                AS: 41051
                          AS: 209533
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:aa:eb:60:16:7e:49:61:bc:95:10:ad:3e:06:07:51:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2baee7ea482d62a671063eac83789af39f390b74
        Validity
            Not Before: Sep 16 15:52:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0d44cabe0096352a49f56b54c8cebe72e483e809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:a8:23:39:76:a8:a4:5c:95:12:3c:43:28:3c:
                    d8:1c:ca:9f:a1:98:2f:99:7d:78:16:06:81:a0:ef:
                    14:3c:af:16:e2:09:e9:17:fe:70:f6:33:08:32:00:
                    24:b6:18:4c:1a:cd:bd:65:6d:22:e2:5b:0b:9a:6e:
                    02:38:d7:58:b4:1b:cd:65:89:da:f4:ca:64:74:3b:
                    e2:2f:39:ad:ff:ad:75:89:e2:3f:0d:84:36:a8:60:
                    3d:05:29:6b:2e:0f:d2:9d:ac:7f:15:37:46:d3:59:
                    59:47:01:cf:7a:5c:b5:62:5e:55:6c:97:a1:9c:83:
                    b4:39:55:9a:93:6e:6c:a2:9d:54:41:e0:d0:89:de:
                    64:40:d6:a8:82:32:1d:ce:8a:fe:72:23:85:43:bc:
                    d6:07:44:80:7d:5e:89:14:be:8f:79:7a:71:39:dd:
                    8b:b5:60:a0:e5:d9:35:31:82:72:6a:4a:1b:9b:7a:
                    bc:e4:01:5a:19:cb:62:00:fb:76:6f:33:17:ec:7d:
                    9e:b3:e2:1f:62:eb:b7:69:63:79:9b:66:82:34:7d:
                    e0:12:f8:df:0b:b6:1e:b8:41:0e:ad:49:13:96:25:
                    0c:43:25:39:e8:1a:fe:23:90:3d:9f:b0:8c:4e:74:
                    54:15:4d:31:c3:3e:84:9a:dd:15:02:38:45:b3:dc:
                    d3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:44:CA:BE:00:96:35:2A:49:F5:6B:54:C8:CE:BE:72:E4:83:E8:09
            X509v3 Authority Key Identifier:
                keyid:2B:AE:E7:EA:48:2D:62:A6:71:06:3E:AC:83:78:9A:F3:9F:39:0B:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/DUTKvgCWNSpJ9WtUyM6-cuSD6Ak.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197885

    Signature Algorithm: sha256WithRSAEncryption
         83:49:aa:17:9d:d8:0b:e7:6a:b3:31:d5:e7:f8:78:54:3b:17:
         12:b6:fa:20:c8:78:96:62:06:5e:10:76:ed:94:79:62:b1:cd:
         61:cd:d3:ac:97:dc:55:3c:93:9a:dc:76:ea:85:b7:b1:59:b8:
         57:a9:ac:8a:e6:99:5b:22:e3:2f:ef:94:a0:fa:56:8c:24:65:
         19:82:74:ad:0e:a7:bc:0a:6c:e2:20:c1:86:a6:1a:c4:24:59:
         a9:59:d5:a0:c4:bd:4f:51:7b:22:41:98:03:03:95:64:38:ad:
         46:9e:70:82:9e:c0:c2:1a:94:db:20:a5:94:05:ad:56:bc:4e:
         3b:2a:7e:44:8d:3a:fe:7d:53:50:74:18:c5:79:71:11:a4:c4:
         76:23:31:57:51:2b:5f:44:68:73:22:4e:8b:07:b2:e0:c6:72:
         fa:4d:85:9d:e7:82:4e:3c:0b:be:f4:74:8b:cd:ef:2f:62:52:
         4a:8b:14:cb:a8:ca:3b:34:ef:0d:5c:f6:45:87:f1:03:7b:30:
         c4:32:bf:94:bc:60:96:b8:68:87:30:f3:d7:a2:3d:70:02:9e:
         e2:78:a7:99:ca:5e:8b:df:b4:aa:c1:71:fd:9a:62:73:50:27:
         d2:09:a2:1a:ee:10:27:6d:a7:2c:56:34:c5:6e:97:e4:3a:a8:
         21:3c:d3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 11:48:35 2026 by rpki-client