Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/f8997f-426f-418d-bf76-8ccd89c18d1e/1/UJZpG357k7EGbknZSHdOivaa5_0.asa
File:                     UJZpG357k7EGbknZSHdOivaa5_0.asa (raw, json)
Hash identifier:          JQnhb+8OI2Shir+TzUBTBrDHCyb9Kq2uxUwWX8hwOcE=
Subject key identifier:   50:96:69:1B:7E:7B:93:B1:06:6E:49:D9:48:77:4E:8A:F6:9A:E7:FD
Certificate issuer:       /CN=2fa6a653700148dad68a196b436b0b2005cce789
Certificate serial:       01A0A5153BD85273E85039C8C644E41AC004
Authority key identifier: 2F:A6:A6:53:70:01:48:DA:D6:8A:19:6B:43:6B:0B:20:05:CC:E7:89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L6amU3ABSNrWihlrQ2sLIAXM54k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/f8997f-426f-418d-bf76-8ccd89c18d1e/1/UJZpG357k7EGbknZSHdOivaa5_0.asa
Signing time:             Tue 15 Sep 2026 12:40:27 +0000
ASPA not before:          Tue 15 Sep 2026 12:40:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            215955
Providers:                AS: 174
                          AS: 2914
                          AS: 5405
                          AS: 5511
                          AS: 6939
                          AS: 29075
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/f8997f-426f-418d-bf76-8ccd89c18d1e/1/L6amU3ABSNrWihlrQ2sLIAXM54k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/f8997f-426f-418d-bf76-8ccd89c18d1e/1/L6amU3ABSNrWihlrQ2sLIAXM54k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L6amU3ABSNrWihlrQ2sLIAXM54k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 00:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:a5:15:3b:d8:52:73:e8:50:39:c8:c6:44:e4:1a:c0:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa6a653700148dad68a196b436b0b2005cce789
        Validity
            Not Before: Sep 15 12:40:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5096691b7e7b93b1066e49d948774e8af69ae7fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e5:f0:49:36:0b:94:75:df:64:1e:66:e2:45:
                    15:28:61:93:ec:eb:69:40:61:3b:ee:b5:bf:5d:1c:
                    84:df:b8:49:da:ab:e9:d2:62:c2:5c:a7:e2:1b:3f:
                    29:84:55:53:06:c3:ec:1a:7b:c1:76:c4:83:e6:33:
                    73:24:74:59:eb:a9:44:71:55:08:63:e9:0f:64:03:
                    e9:fd:6c:28:44:65:8d:2a:c7:e5:e6:56:fb:75:d9:
                    e3:d9:b9:7f:d5:5d:03:63:11:c5:61:99:d4:ca:16:
                    eb:0e:8f:42:b7:98:ca:3b:c9:b7:08:c4:af:8f:4c:
                    fe:fa:8a:c4:38:30:35:08:17:9b:70:b4:f8:ec:52:
                    06:89:45:e3:21:ab:b9:e9:6b:00:6d:ce:87:44:05:
                    d9:b4:50:3e:7b:04:62:4f:43:ad:93:13:a6:98:a9:
                    a0:91:83:f1:e0:83:04:41:d8:a2:83:38:f9:69:32:
                    42:0d:6a:62:97:a5:bd:c6:63:92:62:c1:97:16:23:
                    2b:de:c3:49:b4:9e:b1:27:a3:0a:be:72:50:0f:8e:
                    39:62:94:19:8b:05:7e:be:be:91:d1:b2:1f:03:25:
                    72:3b:82:08:a4:2c:ea:cb:86:72:76:48:63:0f:da:
                    bf:55:2e:2c:cc:f2:25:d4:46:57:ab:9d:4d:23:32:
                    a6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:96:69:1B:7E:7B:93:B1:06:6E:49:D9:48:77:4E:8A:F6:9A:E7:FD
            X509v3 Authority Key Identifier:
                keyid:2F:A6:A6:53:70:01:48:DA:D6:8A:19:6B:43:6B:0B:20:05:CC:E7:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6amU3ABSNrWihlrQ2sLIAXM54k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f8997f-426f-418d-bf76-8ccd89c18d1e/1/UJZpG357k7EGbknZSHdOivaa5_0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f8997f-426f-418d-bf76-8ccd89c18d1e/1/L6amU3ABSNrWihlrQ2sLIAXM54k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215955

    Signature Algorithm: sha256WithRSAEncryption
         08:8c:a5:fc:77:39:f6:5b:42:5f:f6:e2:89:ac:07:0f:c8:0a:
         9e:33:58:28:e1:6c:33:f0:95:cd:0c:16:51:d1:40:2e:2d:a2:
         52:bc:5e:15:30:32:71:ec:e8:32:5f:d2:29:e5:9d:04:96:04:
         3c:9f:28:ef:fa:84:39:87:69:e9:38:07:06:75:ca:22:e7:8d:
         ec:a4:6a:7d:70:fe:7a:02:6a:5d:8b:46:cb:43:17:63:e7:9c:
         b1:b5:b3:ec:56:a0:af:30:30:ea:b7:e9:3b:74:96:af:c6:82:
         1d:34:66:14:c0:d5:93:59:39:92:81:87:58:bd:b2:19:ec:e0:
         07:bd:91:eb:0f:54:8a:9e:bf:a7:7d:38:84:2b:fc:12:77:14:
         26:61:c0:f6:35:87:4e:40:66:47:fa:fb:6b:37:0a:20:d3:43:
         7d:49:cd:d9:a1:72:21:a4:b1:ec:e0:b2:ed:82:c8:e1:eb:16:
         ac:3d:c4:c4:9a:f4:91:00:bd:b8:1c:9b:35:41:f4:82:94:eb:
         b9:7f:f7:e2:6c:62:dd:06:32:3b:ef:91:c8:d2:26:4f:8c:29:
         2a:f8:69:10:c4:ec:05:86:14:b5:5c:6d:21:5a:4c:aa:22:0c:
         24:fe:be:6b:8b:84:5f:e8:4b:e6:33:f2:b5:59:12:3f:16:e6:
         ea:a0:75:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:53:13 2026 by rpki-client