Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/MaIKlII8OqQMUgcccB9oH2ZcXoQ.asa
File:                     MaIKlII8OqQMUgcccB9oH2ZcXoQ.asa (raw, json)
Hash identifier:          F5TME2g2H+4oztuAWuswsZ8BHq80CCL87upK2MSDfeA=
Subject key identifier:   31:A2:0A:94:82:3C:3A:A4:0C:52:07:1C:70:1F:68:1F:66:5C:5E:84
Certificate issuer:       /CN=fe784aac7d1e6d11cc6ba3a42740cbc9fa85c884
Certificate serial:       019D8C45D5CF531253CF54AF97A56073E24E
Authority key identifier: FE:78:4A:AC:7D:1E:6D:11:CC:6B:A3:A4:27:40:CB:C9:FA:85:C8:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/MaIKlII8OqQMUgcccB9oH2ZcXoQ.asa
Signing time:             Tue 14 Apr 2026 13:54:40 +0000
ASPA not before:          Tue 14 Apr 2026 13:54:40 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            207152
Providers:                AS: 206774
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 01:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:8c:45:d5:cf:53:12:53:cf:54:af:97:a5:60:73:e2:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe784aac7d1e6d11cc6ba3a42740cbc9fa85c884
        Validity
            Not Before: Apr 14 13:54:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=31a20a94823c3aa40c52071c701f681f665c5e84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2d:ae:cb:8e:a2:17:29:ef:d8:73:21:fd:8f:
                    a8:52:9d:1f:eb:89:ed:a6:27:1d:86:4a:d6:2d:02:
                    fe:b0:8f:51:4d:0c:2d:f7:17:60:ca:26:43:28:20:
                    7f:2b:7c:75:06:af:b0:eb:65:f8:e1:7f:bc:2b:dc:
                    c2:73:1a:8d:cc:94:40:25:ee:09:58:02:23:42:8d:
                    88:0f:d4:2b:37:90:fb:7a:d8:b1:48:93:06:81:77:
                    e0:a6:1e:81:5d:95:86:c3:62:5e:d0:81:2f:da:b2:
                    ed:4e:2b:30:ad:c7:de:33:fe:a6:da:ac:eb:c8:dc:
                    37:22:c4:95:64:d4:fe:99:a3:1c:17:07:2b:14:9c:
                    92:32:04:73:3f:60:47:41:bb:87:df:36:06:e6:be:
                    ac:dc:73:f7:48:b2:3f:8b:44:63:e2:5a:77:48:50:
                    7f:e7:e6:61:35:f0:a4:1a:fe:bd:96:fe:ec:d6:98:
                    12:e8:4c:9b:d0:55:10:21:77:6e:87:62:4f:b6:f3:
                    af:60:a7:ca:a5:bb:65:6a:9f:9a:4b:26:4a:0d:82:
                    ef:2e:c5:8d:ba:5d:2d:70:2d:82:9b:c9:fb:c4:6e:
                    d7:d0:c6:52:b8:f3:09:30:09:60:75:5b:7b:86:07:
                    21:7b:c4:95:ea:84:31:2c:89:1d:79:2b:47:76:f1:
                    18:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A2:0A:94:82:3C:3A:A4:0C:52:07:1C:70:1F:68:1F:66:5C:5E:84
            X509v3 Authority Key Identifier:
                keyid:FE:78:4A:AC:7D:1E:6D:11:CC:6B:A3:A4:27:40:CB:C9:FA:85:C8:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/MaIKlII8OqQMUgcccB9oH2ZcXoQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207152

    Signature Algorithm: sha256WithRSAEncryption
         0a:83:ee:57:99:4f:b7:5c:f8:d8:eb:50:7e:b5:6c:16:2a:b9:
         77:bc:4e:eb:cd:cf:5b:0b:55:79:b7:50:78:20:28:d8:e9:a5:
         36:4a:e8:2e:98:2f:1a:39:67:fb:15:e7:c8:17:5b:48:42:aa:
         b9:bb:19:02:19:ad:4c:be:d6:87:c7:8c:58:07:96:dc:22:b5:
         c3:f0:6d:7f:ec:fe:a5:50:9f:34:59:8a:f2:e6:54:de:a4:ff:
         3d:62:63:ae:96:e8:5b:9f:e8:81:a1:01:7c:d5:d1:ea:ba:89:
         2a:8c:7c:26:06:8e:d0:67:91:1d:4c:83:38:1e:ce:3c:19:18:
         61:73:f3:ac:17:7c:28:6e:05:f6:fc:c6:5c:d8:76:6f:36:e4:
         01:99:ac:b8:9d:6a:26:15:71:c2:46:39:14:86:28:92:67:e2:
         c1:b4:c3:c8:87:cc:9a:97:e3:b0:25:5d:52:69:e6:6f:6a:cb:
         eb:6d:f8:01:b9:c7:f2:34:74:2b:cd:15:50:ff:5b:f1:f9:eb:
         27:c8:ab:09:0f:d5:63:a8:41:c2:0d:00:7b:a4:9a:de:74:ee:
         00:58:f4:5c:12:6a:f2:d3:5f:f8:1d:20:e9:c5:c0:8d:7f:54:
         88:dd:2f:6b:af:97:a8:c6:99:62:ff:03:86:fb:c1:45:0f:c4:
         5c:12:6e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:50:49 2026 by rpki-client