Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/j6hllAPOfjGlxSjPf2J6ZRdZpJo.asa
File:                     j6hllAPOfjGlxSjPf2J6ZRdZpJo.asa (raw, json)
Hash identifier:          U2oiN7OANfQlnqJQht1FjgSLsysseVC5VhtI3rsOfnE=
Subject key identifier:   8F:A8:65:94:03:CE:7E:31:A5:C5:28:CF:7F:62:7A:65:17:59:A4:9A
Certificate issuer:       /CN=bc9a381f8a60cc51b52990ed386948f684c3159d
Certificate serial:       019EBE200BBAD50BC4384F404F6F06A84B25
Authority key identifier: BC:9A:38:1F:8A:60:CC:51:B5:29:90:ED:38:69:48:F6:84:C3:15:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/j6hllAPOfjGlxSjPf2J6ZRdZpJo.asa
Signing time:             Fri 12 Jun 2026 23:17:11 +0000
ASPA not before:          Fri 12 Jun 2026 23:17:11 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            198831
Providers:                AS: 62000
                          AS: 203446
                          AS: 399486
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:17:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:20:0b:ba:d5:0b:c4:38:4f:40:4f:6f:06:a8:4b:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc9a381f8a60cc51b52990ed386948f684c3159d
        Validity
            Not Before: Jun 12 23:17:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8fa8659403ce7e31a5c528cf7f627a651759a49a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:60:8c:fd:e9:75:7b:75:d8:45:40:03:3c:2d:
                    1c:ca:23:c6:d3:23:2d:2c:80:0c:68:cb:a0:ab:0e:
                    6f:9c:50:42:b9:eb:a9:aa:40:18:9f:12:4a:b2:e3:
                    37:e6:4f:dd:aa:15:c7:97:6c:2d:2f:eb:82:54:d1:
                    bb:64:1e:70:ac:c9:9b:ef:3e:fd:9e:68:ac:f1:a1:
                    ab:dc:d3:9c:3f:92:00:c6:0e:c9:57:f4:9c:ba:bf:
                    1a:18:36:28:ef:d5:c4:c5:9a:33:89:9e:1a:8b:ca:
                    f2:a2:cf:2b:e2:88:86:3c:a1:6d:2b:11:6f:b0:22:
                    1c:6f:72:a3:47:03:fc:9a:12:eb:01:5a:47:71:07:
                    00:77:aa:6e:15:45:c1:10:ef:8b:2d:f3:66:e7:cf:
                    62:ba:7e:34:09:eb:9d:3e:8e:9d:5e:9e:ff:5e:e2:
                    a8:b3:56:19:d2:00:08:e6:d3:4e:6d:8e:e4:27:77:
                    30:d0:ad:89:f7:e4:bb:bd:25:b5:9d:42:d6:bd:1e:
                    91:a4:fe:d6:0e:1c:3f:24:1a:08:61:81:ea:3a:ca:
                    7d:8b:33:80:eb:a1:45:48:35:79:17:99:b0:16:14:
                    9c:6b:0b:44:90:64:bf:8e:0e:68:5f:ed:7d:43:54:
                    cd:0d:fd:dd:07:e6:80:b8:82:20:4e:91:30:74:98:
                    1e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A8:65:94:03:CE:7E:31:A5:C5:28:CF:7F:62:7A:65:17:59:A4:9A
            X509v3 Authority Key Identifier:
                keyid:BC:9A:38:1F:8A:60:CC:51:B5:29:90:ED:38:69:48:F6:84:C3:15:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/j6hllAPOfjGlxSjPf2J6ZRdZpJo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198831

    Signature Algorithm: sha256WithRSAEncryption
         1c:07:53:e7:90:18:37:af:4c:8f:be:b9:84:bd:1d:45:3b:96:
         9b:94:9c:0b:d2:8e:4b:91:d3:86:7d:04:2c:f6:c9:1e:d3:a8:
         e2:6a:c2:c8:d7:45:d4:26:13:e2:9d:08:c5:51:99:16:33:86:
         1a:cf:b2:3a:10:92:10:0d:a7:b4:86:ae:ba:45:1c:51:f4:c9:
         0d:be:e5:29:94:e4:f3:4b:e7:8f:49:27:25:bf:d1:6d:08:ac:
         61:99:9a:50:7d:f2:b0:c1:30:7f:c9:7f:fd:d9:08:10:67:29:
         7a:ad:f9:11:79:17:5f:c7:91:bc:e7:c7:18:e4:b5:c5:02:e3:
         64:28:aa:5c:29:db:45:42:fc:7e:a5:69:2e:de:c9:e5:5c:c2:
         b9:b5:b6:b9:8f:99:ef:18:e8:19:85:f1:cc:05:a4:61:5e:ab:
         f6:84:a3:75:a5:66:b2:64:69:8a:48:6e:76:18:95:e8:31:cb:
         ba:24:a3:1e:46:f9:7a:4f:c1:3a:36:8d:18:0b:9b:4d:65:6d:
         97:6b:b6:1a:ec:5c:56:3f:3f:01:27:0e:1b:a3:b4:0e:a5:77:
         5e:fd:e0:07:9c:5e:bf:97:2a:9f:e4:f0:04:11:e5:31:7a:d4:
         e5:ef:f0:b2:bd:b6:ed:53:fe:6e:17:67:82:8b:cd:fb:cb:61:
         eb:d3:3e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:35:35 2026 by rpki-client