Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/uXRaOLAunE2UdEOM1lTRedX_8jQ.asa
File:                     uXRaOLAunE2UdEOM1lTRedX_8jQ.asa (raw, json)
Hash identifier:          5LEXYsw/l0m4ESugD1zDY5cY+ORuB71qGoxgj35oZFY=
Subject key identifier:   B9:74:5A:38:B0:2E:9C:4D:94:74:43:8C:D6:54:D1:79:D5:FF:F2:34
Certificate issuer:       /CN=d3555db9f6cdcbddb052a45348ef0d6a6d5bc1c1
Certificate serial:       019D71BA7BEBF58A1F14E7FB7B46C9326027
Authority key identifier: D3:55:5D:B9:F6:CD:CB:DD:B0:52:A4:53:48:EF:0D:6A:6D:5B:C1:C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/01VdufbNy92wUqRTSO8Nam1bwcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/uXRaOLAunE2UdEOM1lTRedX_8jQ.asa
Signing time:             Thu 09 Apr 2026 10:12:20 +0000
ASPA not before:          Thu 09 Apr 2026 10:12:20 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            197794
Providers:                AS: 12886
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/01VdufbNy92wUqRTSO8Nam1bwcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 12:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:71:ba:7b:eb:f5:8a:1f:14:e7:fb:7b:46:c9:32:60:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3555db9f6cdcbddb052a45348ef0d6a6d5bc1c1
        Validity
            Not Before: Apr  9 10:12:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b9745a38b02e9c4d9474438cd654d179d5fff234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:36:b4:18:d4:16:5c:f0:e5:fb:7e:24:f2:c9:
                    59:5c:2e:85:63:0b:d8:f6:2a:e1:18:a0:37:3e:34:
                    66:a1:5e:8c:b4:df:47:87:ef:b9:66:14:2d:46:eb:
                    cc:a4:40:4f:38:cc:f8:fa:78:17:7a:b0:8f:7c:5f:
                    de:56:4b:6d:d6:65:9d:fe:7b:f1:c1:24:f1:ba:33:
                    2b:4c:d0:3e:41:69:e9:59:16:c0:da:e5:3b:66:96:
                    49:d9:33:e7:d1:fa:d0:89:e8:70:a5:ec:e1:02:bd:
                    4d:49:97:0a:87:60:27:05:bd:17:87:36:1d:9b:ee:
                    8c:a6:4b:09:fc:4d:c6:3d:32:c6:b5:54:69:e0:2b:
                    b2:d5:07:8c:6d:0b:3d:19:ca:b1:00:f9:1c:09:ce:
                    2a:86:30:15:33:dd:fe:f2:2a:4b:39:fd:ff:24:e3:
                    95:b9:e3:d1:f0:85:ec:e4:b5:34:1b:aa:79:19:f0:
                    06:6d:d0:94:54:c5:a8:5e:6c:99:09:a1:e8:b5:11:
                    55:42:96:89:69:df:51:7b:e2:d5:a0:e6:3b:85:b9:
                    c3:a0:1f:ed:82:d7:f1:fb:d8:b6:92:70:bd:c4:17:
                    57:69:51:3b:f4:07:f2:a9:f8:52:23:93:0a:80:f7:
                    26:6d:fb:8b:84:ea:6c:d0:0a:1e:56:46:ce:b7:79:
                    31:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:74:5A:38:B0:2E:9C:4D:94:74:43:8C:D6:54:D1:79:D5:FF:F2:34
            X509v3 Authority Key Identifier:
                keyid:D3:55:5D:B9:F6:CD:CB:DD:B0:52:A4:53:48:EF:0D:6A:6D:5B:C1:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01VdufbNy92wUqRTSO8Nam1bwcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/uXRaOLAunE2UdEOM1lTRedX_8jQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197794

    Signature Algorithm: sha256WithRSAEncryption
         69:2c:63:ae:93:10:cb:f7:bb:38:33:a1:86:d6:66:15:e7:c7:
         4f:1f:4d:dc:f4:d9:e5:ab:63:3c:e3:b6:21:65:ab:1d:73:5a:
         93:91:0b:55:1a:ca:8a:4e:64:38:29:a8:b7:5b:89:52:81:db:
         c2:9b:1f:80:29:47:a9:bc:94:7f:ba:b3:75:7d:b2:b6:00:c5:
         75:6e:32:f9:70:7d:d5:07:c6:89:b8:60:31:d8:08:4c:95:bd:
         b3:ce:03:d8:65:2e:7e:8a:ea:26:dc:6e:e9:05:61:08:b0:ba:
         e8:f1:04:9f:cf:38:e7:02:74:d0:74:a5:43:94:ef:d8:17:db:
         de:e9:a7:3d:bf:ff:34:cb:e4:db:05:3a:3a:29:6f:86:63:23:
         d9:6c:df:10:be:8e:3a:1e:61:1a:aa:5b:cd:d7:62:f3:29:f1:
         28:e1:4c:a0:9e:f9:fb:fd:aa:34:05:d7:f3:71:27:59:8a:ea:
         58:32:08:1e:e7:bd:00:16:55:f9:3b:c5:a4:8d:b8:43:b6:c1:
         bd:3c:31:9b:5a:ce:ae:2c:ad:cf:f6:b0:16:97:b5:d2:f8:fc:
         b4:a7:af:0e:46:2c:04:a7:39:b1:79:dc:6f:4c:70:72:c3:e4:
         90:32:98:67:b1:64:fd:e8:50:86:c4:d2:84:c8:43:37:be:3c:
         69:b1:cd:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:07:07 2026 by rpki-client