Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/eBvOcPc94TyvILGqHKvTDoMdG8c.asa
File:                     eBvOcPc94TyvILGqHKvTDoMdG8c.asa (raw, json)
Hash identifier:          tkdxw+1V9UvokM8aGYSRDXSz9Kd2tdbJUPMjzayWr5c=
Subject key identifier:   78:1B:CE:70:F7:3D:E1:3C:AF:20:B1:AA:1C:AB:D3:0E:83:1D:1B:C7
Certificate issuer:       /CN=70c6d535b0f275a26185f8f4dca580d26d7a9746
Certificate serial:       01A07C3841C52C300D3C6EDFF9856A46336C
Authority key identifier: 70:C6:D5:35:B0:F2:75:A2:61:85:F8:F4:DC:A5:80:D2:6D:7A:97:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cMbVNbDydaJhhfj03KWA0m16l0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/eBvOcPc94TyvILGqHKvTDoMdG8c.asa
Signing time:             Mon 07 Sep 2026 14:14:16 +0000
ASPA not before:          Mon 07 Sep 2026 14:14:16 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            204183
Providers:                AS: 21430
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/cMbVNbDydaJhhfj03KWA0m16l0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/cMbVNbDydaJhhfj03KWA0m16l0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cMbVNbDydaJhhfj03KWA0m16l0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:7c:38:41:c5:2c:30:0d:3c:6e:df:f9:85:6a:46:33:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70c6d535b0f275a26185f8f4dca580d26d7a9746
        Validity
            Not Before: Sep  7 14:14:16 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=781bce70f73de13caf20b1aa1cabd30e831d1bc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:13:bd:88:f7:da:f5:e7:3d:cf:c9:ce:86:19:
                    a8:9a:ee:54:46:46:62:df:f2:ec:fd:e0:e2:f0:d1:
                    b2:eb:30:e4:b0:0c:85:83:4f:fc:17:f2:42:07:b9:
                    88:ad:21:f0:6b:8d:65:ec:50:c9:6f:b6:68:04:38:
                    ba:6a:98:06:b8:4c:07:cf:15:7c:7f:b6:93:ff:89:
                    11:67:c6:d6:b3:13:2e:fb:ae:a8:25:a2:8e:b8:12:
                    f4:dc:0a:fc:17:8c:93:39:ac:db:3c:07:8e:0d:a9:
                    53:1f:61:ae:63:ea:5b:e7:3c:a3:95:3d:c3:8b:97:
                    46:33:27:99:c8:2a:7a:1b:30:ff:0a:85:9e:1b:af:
                    a9:00:aa:59:95:a1:8c:33:b3:1a:0b:e5:56:8f:cb:
                    c0:cc:c9:ae:30:e1:55:ff:b9:9e:23:85:02:46:cf:
                    59:e5:98:70:69:78:cf:d7:ce:35:7a:aa:d7:19:aa:
                    ff:ef:70:4a:67:a4:f7:7d:3d:c8:65:15:50:ea:29:
                    71:da:7f:05:52:24:64:71:66:d6:66:ff:3e:74:d7:
                    11:23:4c:a6:bf:aa:32:59:51:cf:51:aa:b9:92:df:
                    df:43:70:ce:81:4a:44:62:36:98:9b:e9:76:a7:cf:
                    41:72:e8:ce:cb:73:b2:ca:5f:b4:e8:57:ae:e9:a7:
                    53:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:1B:CE:70:F7:3D:E1:3C:AF:20:B1:AA:1C:AB:D3:0E:83:1D:1B:C7
            X509v3 Authority Key Identifier:
                keyid:70:C6:D5:35:B0:F2:75:A2:61:85:F8:F4:DC:A5:80:D2:6D:7A:97:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMbVNbDydaJhhfj03KWA0m16l0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/eBvOcPc94TyvILGqHKvTDoMdG8c.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/cMbVNbDydaJhhfj03KWA0m16l0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204183

    Signature Algorithm: sha256WithRSAEncryption
         3a:22:c3:8b:f0:f1:51:4f:32:05:f6:7c:c3:cc:e6:e9:2a:82:
         f7:22:87:e9:af:f1:14:10:41:62:ea:0e:bd:64:56:6e:5c:69:
         7b:49:bc:ea:18:09:2d:6e:46:8d:1d:94:c4:5a:30:27:9d:59:
         8c:b9:ab:12:11:50:ec:09:e2:84:b6:61:05:11:f2:84:14:94:
         74:32:87:6c:be:02:78:a4:1b:8f:da:63:42:53:26:54:c6:39:
         92:e3:51:60:9d:66:90:c6:6e:c6:ad:b1:f1:5f:dc:07:cd:d7:
         78:78:65:13:40:9f:7c:ad:fa:63:a9:9e:c4:c3:21:ec:e8:b2:
         a5:5a:08:07:41:cc:a3:3b:26:8e:81:2a:3e:31:29:9a:da:4b:
         30:ee:49:c4:f4:7d:ec:95:b7:f5:fd:bc:b2:74:30:25:89:e2:
         52:79:f5:29:bb:cb:6d:f9:91:6b:5d:eb:59:d3:91:bf:42:a5:
         91:54:a6:29:13:40:90:d2:76:6e:df:e2:4a:f3:51:87:8d:d4:
         d1:df:1b:d1:ee:a6:02:53:2f:18:68:40:1c:07:7f:9f:2c:24:
         e1:4d:b6:4f:bf:8c:ff:31:37:20:0d:b7:90:1f:c2:c2:e1:90:
         7f:af:22:90:50:cd:7f:46:81:5d:c6:aa:20:2d:8a:5e:ea:aa:
         61:81:37:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:54:18 2026 by rpki-client