Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/gJIL-yyLSZQ86WF72F2-y7lREqA.asa
File:                     gJIL-yyLSZQ86WF72F2-y7lREqA.asa (raw, json)
Hash identifier:          1TPh56ssE+BAjyg4JEIEBgYU8LSU5sYtrun0tWfhLP0=
Subject key identifier:   80:92:0B:FB:2C:8B:49:94:3C:E9:61:7B:D8:5D:BE:CB:B9:51:12:A0
Certificate issuer:       /CN=2351c52d2373f5a5b72dc6dd12a75d13b265b904
Certificate serial:       019D7367DD60D0B49D5535426D8D72A2C9BA
Authority key identifier: 23:51:C5:2D:23:73:F5:A5:B7:2D:C6:DD:12:A7:5D:13:B2:65:B9:04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/gJIL-yyLSZQ86WF72F2-y7lREqA.asa
Signing time:             Thu 09 Apr 2026 18:01:19 +0000
ASPA not before:          Thu 09 Apr 2026 18:01:19 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            204059
Providers:                AS: 6696
                          AS: 20562
                          AS: 24785
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:73:67:dd:60:d0:b4:9d:55:35:42:6d:8d:72:a2:c9:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2351c52d2373f5a5b72dc6dd12a75d13b265b904
        Validity
            Not Before: Apr  9 18:01:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=80920bfb2c8b49943ce9617bd85dbecbb95112a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d7:e1:4a:c8:9c:2d:5f:75:b6:6d:41:3e:b5:
                    79:e0:4a:dc:68:34:62:a5:14:08:ae:2c:b5:ab:f8:
                    4f:91:6d:89:01:97:b8:2b:a7:9d:86:e6:a8:4f:b1:
                    e6:53:cf:50:34:c8:70:1b:2f:a0:d6:59:aa:c7:9d:
                    bb:af:bf:41:4e:71:a9:88:f4:ee:77:9a:f3:88:53:
                    0e:1b:19:03:8a:27:d7:59:1c:07:ae:21:e1:d8:31:
                    e2:30:98:b1:8c:42:b5:9f:8a:12:66:d5:a0:17:f2:
                    83:d3:e7:5c:9f:12:42:5f:38:99:5a:a7:a0:2c:f4:
                    38:2c:2b:1f:1a:2b:09:23:8b:29:55:fd:1b:ef:07:
                    88:6d:4a:62:43:26:b7:9d:5e:82:be:c1:b1:90:42:
                    11:38:ae:d6:6a:d4:32:20:ee:ac:34:08:da:32:c6:
                    f2:0c:e7:fa:e8:0b:c1:cf:4b:d4:dc:2a:29:68:e5:
                    6c:f9:b0:37:e8:52:34:ba:db:20:23:de:a7:b3:5e:
                    41:c5:6a:9a:2d:ef:14:e6:96:cb:f8:f6:0a:5b:ce:
                    2d:6f:63:6c:80:b2:c6:ac:df:ec:f8:ff:48:d1:3d:
                    23:82:03:23:09:cf:e8:56:54:db:30:db:29:a2:f1:
                    49:3f:21:b4:c0:a5:5e:21:0a:e0:b4:4e:ee:1c:8a:
                    3f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:92:0B:FB:2C:8B:49:94:3C:E9:61:7B:D8:5D:BE:CB:B9:51:12:A0
            X509v3 Authority Key Identifier:
                keyid:23:51:C5:2D:23:73:F5:A5:B7:2D:C6:DD:12:A7:5D:13:B2:65:B9:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/gJIL-yyLSZQ86WF72F2-y7lREqA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204059

    Signature Algorithm: sha256WithRSAEncryption
         35:c1:88:12:87:c5:27:7b:ce:61:13:e7:7c:f7:c8:2b:65:1e:
         6f:23:8b:df:c6:43:2c:fe:21:80:01:88:0a:57:e0:26:21:70:
         c9:41:be:75:29:30:d8:48:d8:10:70:86:f8:ba:2b:5d:37:3b:
         fc:70:d2:c4:07:80:69:42:25:02:46:76:97:fb:23:cc:02:18:
         8b:41:98:02:ad:e3:9a:d9:78:cc:3f:d6:47:36:65:5f:81:b5:
         b2:7a:27:ab:5b:ea:a0:56:94:1e:a8:6b:9b:6a:89:49:89:f5:
         2d:36:e2:b2:6f:56:42:99:06:ac:33:2f:d1:57:1b:5d:1e:eb:
         55:7a:8d:92:a3:9b:16:31:fc:57:32:47:11:fa:e1:9f:fa:fd:
         3a:ab:b5:a1:ad:4f:fc:62:86:0c:e7:e5:42:3a:40:b6:ce:4b:
         d3:e4:f4:0d:ae:75:e8:b5:0b:47:32:96:76:1f:ce:af:95:32:
         bc:4b:89:c9:c1:48:2d:5e:6f:87:ad:15:7b:05:33:67:43:49:
         71:a8:32:da:35:c3:25:f5:6a:28:d2:8a:3e:54:87:8a:31:6a:
         29:23:42:26:ea:01:b0:fe:8c:61:77:65:59:1a:ee:fd:e3:86:
         df:1d:92:e0:ab:77:18:21:73:b2:64:60:47:40:71:d1:14:db:
         0b:4b:e0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:57:17 2026 by rpki-client