Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/e40GPVZTDeirYIdOqaP1aapsCXg.asa
File:                     e40GPVZTDeirYIdOqaP1aapsCXg.asa (raw, json)
Hash identifier:          h+tl9RH2sA+blXZerCx7ZNM5+m8vY3pFl3hXGBoDo4w=
Subject key identifier:   7B:8D:06:3D:56:53:0D:E8:AB:60:87:4E:A9:A3:F5:69:AA:6C:09:78
Certificate issuer:       /CN=f21153011de4586ad8a803887ee7d2b00aefd61b
Certificate serial:       019EAFE61348E944E590C4761CDC6B60F49C
Authority key identifier: F2:11:53:01:1D:E4:58:6A:D8:A8:03:88:7E:E7:D2:B0:0A:EF:D6:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/e40GPVZTDeirYIdOqaP1aapsCXg.asa
Signing time:             Wed 10 Jun 2026 04:59:11 +0000
ASPA not before:          Wed 10 Jun 2026 04:59:11 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            59682
Providers:                AS: 3326
                          AS: 8772
                          AS: 49706
                          AS: 50392
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:af:e6:13:48:e9:44:e5:90:c4:76:1c:dc:6b:60:f4:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f21153011de4586ad8a803887ee7d2b00aefd61b
        Validity
            Not Before: Jun 10 04:59:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7b8d063d56530de8ab60874ea9a3f569aa6c0978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c5:a6:3f:70:35:14:45:9f:87:d8:9b:d4:88:
                    6e:9e:14:ab:22:f4:ca:15:62:f1:66:f7:34:62:a8:
                    3e:40:86:eb:b3:aa:f5:69:1a:c6:53:47:68:32:02:
                    c0:6a:ec:0e:d9:ba:4f:e1:24:d5:5e:8b:94:f1:71:
                    40:4b:43:9f:80:69:52:70:a0:4c:4b:bf:d1:87:ce:
                    99:1c:05:cb:29:ba:a0:7e:52:3a:3b:cc:79:99:44:
                    75:55:1e:ea:b8:f7:dd:5c:c0:dd:b0:31:46:c7:7a:
                    4c:df:07:aa:5d:22:a6:ad:74:22:a4:cf:fa:40:52:
                    af:4f:6e:b9:9a:00:a7:55:e0:e3:55:4d:5a:d8:4e:
                    ac:40:cf:5d:39:85:7e:6d:15:ba:9a:77:ed:c4:2f:
                    fb:63:e0:93:22:b7:9f:8e:23:ef:db:d5:5a:46:23:
                    66:de:6a:00:ea:ba:38:dc:45:1d:cf:25:13:37:8a:
                    72:8d:55:33:80:69:97:b9:86:b0:80:70:73:ec:f7:
                    e2:44:34:48:f1:25:96:a2:dd:e9:5c:4e:2d:d5:6f:
                    23:a7:06:d2:37:fd:4b:81:bf:12:d1:00:c3:9c:7d:
                    84:5b:ab:5c:b1:4c:a2:9f:09:f9:86:4d:c7:d9:c5:
                    46:89:81:2d:92:d2:36:b2:b9:dd:28:06:7f:e5:97:
                    b3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:8D:06:3D:56:53:0D:E8:AB:60:87:4E:A9:A3:F5:69:AA:6C:09:78
            X509v3 Authority Key Identifier:
                keyid:F2:11:53:01:1D:E4:58:6A:D8:A8:03:88:7E:E7:D2:B0:0A:EF:D6:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/e40GPVZTDeirYIdOqaP1aapsCXg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59682

    Signature Algorithm: sha256WithRSAEncryption
         5f:82:1a:90:48:53:b1:76:8d:5d:2b:58:29:9a:da:d6:df:87:
         61:61:bb:26:9d:47:15:66:7a:f2:ab:6c:f6:56:a9:00:de:c2:
         6f:27:ef:49:08:74:e7:22:19:8a:2e:f7:6e:0d:64:5c:20:55:
         a1:4e:ac:cd:11:70:b0:15:35:64:f6:b9:5c:82:89:cc:86:a3:
         65:22:d7:4b:3b:3c:c5:40:29:db:34:60:81:f3:dc:c9:2f:40:
         5c:00:d9:1d:84:df:92:0e:3e:a1:5c:9b:76:a8:22:1a:90:c4:
         48:fe:b7:3d:4a:49:db:6c:d5:52:a4:4b:ce:fe:be:32:e5:25:
         3a:d5:8e:44:5b:a4:b7:59:c3:43:e5:5c:2b:02:db:e8:b2:34:
         e3:d4:db:48:4f:88:6b:d7:da:7f:90:d7:17:de:b7:cd:f1:f8:
         4e:2d:f7:03:8f:7d:eb:e1:33:53:71:0b:22:84:bb:13:6d:94:
         c5:24:e6:56:d9:51:56:c4:2d:ea:58:bc:ba:b5:b8:2f:99:41:
         fb:dc:1c:76:c1:8d:a8:c5:cf:2c:39:0d:17:6e:fc:cf:fb:c9:
         1c:aa:e2:f2:39:0f:50:e0:94:65:75:c1:3b:31:d2:d6:18:59:
         8a:90:b3:91:54:77:38:27:fb:bc:28:9d:b1:a5:f7:7e:c3:99:
         a9:f8:c9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:55:07 2026 by rpki-client