Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/kU9GqHcXl45RgiPyUS3ISp5Cc_Y.asa
File:                     kU9GqHcXl45RgiPyUS3ISp5Cc_Y.asa (raw, json)
Hash identifier:          ZmLbO9DmawxzpYBHp5/UPtX0wgTeNFkuZ4t4mqLYLd8=
Subject key identifier:   91:4F:46:A8:77:17:97:8E:51:82:23:F2:51:2D:C8:4A:9E:42:73:F6
Certificate issuer:       /CN=70bab3268085308a1f8d57084b9daa1ebf95e0dc
Certificate serial:       01A0C01094526AC9BAAC5B1D8742D9780564
Authority key identifier: 70:BA:B3:26:80:85:30:8A:1F:8D:57:08:4B:9D:AA:1E:BF:95:E0:DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cLqzJoCFMIofjVcIS52qHr-V4Nw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/kU9GqHcXl45RgiPyUS3ISp5Cc_Y.asa
Signing time:             Sun 20 Sep 2026 18:25:07 +0000
ASPA not before:          Sun 20 Sep 2026 18:25:07 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            207445
Providers:                AS: 6939
                          AS: 41051
                          AS: 58057
                          AS: 209533
                          AS: 212895
                          AS: 214205
                          AS: 214757
                          AS: 219331
                          AS: 393577
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cLqzJoCFMIofjVcIS52qHr-V4Nw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c0:10:94:52:6a:c9:ba:ac:5b:1d:87:42:d9:78:05:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70bab3268085308a1f8d57084b9daa1ebf95e0dc
        Validity
            Not Before: Sep 20 18:25:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=914f46a87717978e518223f2512dc84a9e4273f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:50:e2:96:53:bf:81:a5:6f:30:3d:6b:83:39:
                    21:0b:e4:97:fe:9b:d6:20:c3:80:61:24:41:57:ad:
                    b7:7e:bc:f0:51:81:89:62:01:24:87:ee:dd:26:54:
                    11:54:b3:56:f2:b1:74:9e:3e:95:2d:3a:9f:b9:bd:
                    07:46:a6:09:95:cd:f2:fd:2f:0d:b7:0d:75:66:15:
                    eb:f3:fc:6d:ea:c8:d6:fb:61:4b:6b:21:18:22:47:
                    ac:cb:95:86:2b:9f:ca:03:3c:df:c6:59:db:be:4b:
                    cc:f5:9f:88:d6:4f:78:91:8d:32:44:17:4c:13:39:
                    4a:83:b5:3f:e3:69:71:23:0f:02:66:6e:bf:30:97:
                    6c:54:31:cd:3f:24:3b:c5:c8:09:55:e9:f4:d1:e4:
                    1c:26:06:c6:fc:8a:b4:89:22:49:65:a9:cd:9a:3c:
                    28:c7:2c:d8:fb:93:08:46:e4:33:76:17:b0:57:62:
                    84:de:93:6c:34:c4:5f:e4:74:3e:04:f4:50:e4:2b:
                    da:5a:7c:49:5d:1b:19:78:63:79:0e:d0:e5:05:b7:
                    ff:6a:9b:23:61:ec:c9:24:4f:a2:46:f6:96:fa:ab:
                    2e:5b:2c:0a:58:94:47:51:bc:fb:60:50:27:f5:0b:
                    eb:55:29:5c:f3:0b:27:11:cd:26:06:b9:f0:9a:2f:
                    ba:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:4F:46:A8:77:17:97:8E:51:82:23:F2:51:2D:C8:4A:9E:42:73:F6
            X509v3 Authority Key Identifier:
                keyid:70:BA:B3:26:80:85:30:8A:1F:8D:57:08:4B:9D:AA:1E:BF:95:E0:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLqzJoCFMIofjVcIS52qHr-V4Nw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/kU9GqHcXl45RgiPyUS3ISp5Cc_Y.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207445

    Signature Algorithm: sha256WithRSAEncryption
         0c:50:a7:f8:7a:91:51:44:c4:ac:da:78:4d:9d:2b:5f:ec:77:
         58:41:b5:b6:2d:e2:00:21:1c:de:b5:68:0c:54:92:81:86:4c:
         cf:9d:6c:c0:d9:47:bd:d1:35:e2:c1:22:81:29:8d:2c:cb:be:
         9c:df:0b:c6:21:09:25:d2:6e:d5:4c:b2:2b:a6:cd:f0:b0:27:
         47:13:4a:c6:9f:9b:58:16:99:4b:32:25:dd:4f:f4:4f:b7:b5:
         37:fc:46:96:cd:81:f9:f5:74:63:e7:8a:3d:7b:b1:c7:eb:8d:
         0c:14:27:fc:64:f3:5e:68:cb:ad:c7:51:4c:54:a6:97:ed:d5:
         41:49:e3:bf:dd:43:51:1a:8e:1d:85:94:eb:4c:f5:dd:d3:f4:
         eb:1b:f6:84:96:1c:5f:ef:ff:d8:75:1a:9e:aa:74:09:d6:3f:
         48:2b:83:0c:4a:79:1d:47:b8:40:d8:53:c3:ac:fd:2e:08:5f:
         8d:a7:3b:59:e7:b6:1b:50:55:4a:bf:b1:af:f8:2e:ad:cb:ba:
         5d:15:62:b5:f8:ca:d2:61:c9:e2:e0:83:46:f1:13:f6:cd:6f:
         86:03:c6:be:60:b0:67:3c:dc:b9:a6:24:e1:aa:71:32:90:bf:
         9a:35:8f:93:2f:3a:43:f4:23:36:1a:92:25:4d:2b:f6:6f:8a:
         e2:05:0e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:30:51 2026 by rpki-client