Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/hFukJ1Me328-WPvDybOfx7SqLNM.asa
File:                     hFukJ1Me328-WPvDybOfx7SqLNM.asa (raw, json)
Hash identifier:          HFJhYuc006ijF+saTkFV1K0a6wbtr7JpRGOKmayJt1Q=
Subject key identifier:   84:5B:A4:27:53:1E:DF:6F:3E:58:FB:C3:C9:B3:9F:C7:B4:AA:2C:D3
Certificate issuer:       /CN=2747c171786e883167d862be101f352135b923b4
Certificate serial:       019D77AFC0BFEF133B35256991F67AD03EFA
Authority key identifier: 27:47:C1:71:78:6E:88:31:67:D8:62:BE:10:1F:35:21:35:B9:23:B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J0fBcXhuiDFn2GK-EB81ITW5I7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/hFukJ1Me328-WPvDybOfx7SqLNM.asa
Signing time:             Fri 10 Apr 2026 13:58:19 +0000
ASPA not before:          Fri 10 Apr 2026 13:58:19 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            199211
Providers:                AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J0fBcXhuiDFn2GK-EB81ITW5I7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:77:af:c0:bf:ef:13:3b:35:25:69:91:f6:7a:d0:3e:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2747c171786e883167d862be101f352135b923b4
        Validity
            Not Before: Apr 10 13:58:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=845ba427531edf6f3e58fbc3c9b39fc7b4aa2cd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ac:06:73:35:ce:7b:8f:f4:1a:ee:0d:5d:3b:
                    44:4d:81:c8:64:9e:af:37:ec:74:92:bb:56:79:83:
                    90:6e:02:30:35:cd:da:b6:a1:92:4b:8a:fc:4d:62:
                    e0:30:d1:70:bb:2c:f6:c3:fb:ab:94:34:b2:68:da:
                    b2:27:4e:74:e5:35:5f:d5:04:4b:b5:bc:31:f2:0d:
                    6f:b0:1f:cb:ce:80:cb:d3:ec:21:27:07:ec:c9:a4:
                    07:c7:28:17:f5:8c:d2:df:4b:21:c1:97:6d:c3:cf:
                    36:ea:80:f2:99:b4:1c:0e:f9:2c:2b:7d:c8:b2:53:
                    2f:cd:70:d0:78:14:25:e2:bd:2f:99:97:90:16:15:
                    8a:7a:7e:96:6a:4b:20:c9:a9:99:a0:98:a4:81:be:
                    fc:e3:11:b1:77:d8:13:6c:8c:6c:0d:bb:f1:95:42:
                    a7:d5:56:98:e5:49:dd:13:05:5a:4b:93:cf:c8:21:
                    27:9e:3e:e8:c0:30:91:aa:43:c3:73:06:fa:31:28:
                    68:9d:ce:43:28:b0:5b:93:72:23:a2:bc:a2:56:9c:
                    00:44:84:c3:5a:f5:92:99:20:e9:0a:78:cb:4e:a6:
                    f6:5d:94:d4:95:de:c7:74:85:93:fb:a3:57:42:2c:
                    69:e4:41:a0:e9:df:a8:85:f4:8b:10:5e:fe:de:c2:
                    bf:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:5B:A4:27:53:1E:DF:6F:3E:58:FB:C3:C9:B3:9F:C7:B4:AA:2C:D3
            X509v3 Authority Key Identifier:
                keyid:27:47:C1:71:78:6E:88:31:67:D8:62:BE:10:1F:35:21:35:B9:23:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0fBcXhuiDFn2GK-EB81ITW5I7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/hFukJ1Me328-WPvDybOfx7SqLNM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199211

    Signature Algorithm: sha256WithRSAEncryption
         4f:13:5a:73:cf:51:15:48:ef:7d:21:fb:51:10:f5:e7:84:4b:
         04:8b:ef:78:c4:18:25:50:14:ae:98:46:5b:15:1e:f1:ee:39:
         8e:cd:3b:5f:d1:f0:0d:7d:50:f4:88:28:53:84:27:0f:75:54:
         d0:d3:65:81:43:f9:6d:64:56:f1:00:bb:fd:31:cf:5e:69:1f:
         97:1a:a2:4f:53:1e:63:03:da:b4:94:61:63:59:7d:51:77:58:
         00:73:2a:60:dd:5d:dd:de:a1:09:cc:3b:80:2f:1d:5a:4b:9d:
         e3:4a:d3:ee:c4:a2:1c:30:c1:17:1a:1a:d3:59:75:65:37:81:
         7f:d4:89:11:b3:c8:a3:b6:f0:11:01:2f:80:2f:a8:a0:06:44:
         e5:43:27:07:19:ad:f5:6c:cb:2c:7f:60:60:71:1f:fd:96:25:
         19:28:6f:83:78:de:eb:7d:ed:e2:a5:78:6d:94:6b:5b:bb:65:
         e8:8e:7c:e4:2d:3a:7a:e2:45:28:3d:6d:2b:34:bf:28:d8:9c:
         f5:9b:b2:d2:17:b9:39:3a:9d:ff:3a:8e:0f:75:a5:3c:1a:13:
         11:93:05:22:61:e0:9d:24:1a:72:d2:5e:23:d0:c9:31:f1:3c:
         ad:24:90:bf:da:ab:e1:39:38:8e:72:8d:75:f2:4d:38:c2:d5:
         4c:cd:78:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:27:11 2026 by rpki-client