Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/Z5HQd2VmGvdvOf7t3Ho1pKxlgXE.asa
File:                     Z5HQd2VmGvdvOf7t3Ho1pKxlgXE.asa (raw, json)
Hash identifier:          gfL13FB4bnR0D1Y6SJGLKvYmhF/HLaJxqtVHMWK6VJY=
Subject key identifier:   67:91:D0:77:65:66:1A:F7:6F:39:FE:ED:DC:7A:35:A4:AC:65:81:71
Certificate issuer:       /CN=f943c02c6f7bf9792aee485a337b4c7852d6ac4c
Certificate serial:       019F982CB3A1FD0BE0B9C449762B304FB757
Authority key identifier: F9:43:C0:2C:6F:7B:F9:79:2A:EE:48:5A:33:7B:4C:78:52:D6:AC:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-UPALG97-Xkq7khaM3tMeFLWrEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/Z5HQd2VmGvdvOf7t3Ho1pKxlgXE.asa
Signing time:             Sat 25 Jul 2026 07:28:14 +0000
ASPA not before:          Sat 25 Jul 2026 07:28:14 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214380
Providers:                AS: 1101
                          AS: 1103
                          AS: 6939
                          AS: 8283
                          AS: 31561
                          AS: 44854
                          AS: 50869
                          AS: 200132
                          AS: 212635
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/1-UPALG97-Xkq7khaM3tMeFLWrEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/1-UPALG97-Xkq7khaM3tMeFLWrEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-UPALG97-Xkq7khaM3tMeFLWrEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:98:2c:b3:a1:fd:0b:e0:b9:c4:49:76:2b:30:4f:b7:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f943c02c6f7bf9792aee485a337b4c7852d6ac4c
        Validity
            Not Before: Jul 25 07:28:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6791d07765661af76f39feeddc7a35a4ac658171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:13:72:4c:ed:98:4a:4c:ac:15:9f:46:6b:de:
                    d9:21:83:5e:ab:ce:71:4a:73:d5:e3:c3:4f:d9:f8:
                    3e:85:f2:f3:7b:23:46:ab:ad:bf:13:ad:43:83:8f:
                    46:b6:e8:3f:34:64:17:4f:85:cc:f6:a2:34:bc:cd:
                    5a:b8:f1:cd:68:2d:20:14:0c:27:b4:dd:34:49:4c:
                    cc:0d:75:0a:f4:67:36:12:90:43:23:91:0f:c9:ba:
                    d7:34:24:3c:20:19:37:50:bd:8a:fe:02:f5:52:49:
                    16:5a:9a:47:3c:ae:4e:1e:5c:6c:8c:9b:c6:38:a0:
                    20:c2:99:cb:21:1a:b1:35:92:18:ed:59:4d:5d:82:
                    b9:79:f8:da:0e:9c:6d:a9:28:7a:a5:fb:c8:0f:74:
                    19:15:00:f2:cf:bb:08:9e:33:85:a9:b2:46:3e:35:
                    19:ac:df:0a:b0:66:cb:a4:30:23:2d:e4:15:0f:fe:
                    d7:1c:3a:7b:25:fb:56:fe:f2:de:aa:ce:d9:02:1b:
                    e1:fc:25:58:e0:ef:5c:91:b1:01:fb:ae:2d:0c:78:
                    4c:68:d1:0e:25:36:93:80:5f:30:0a:65:8b:c0:6b:
                    78:4f:fa:9b:94:30:89:1c:05:f5:cd:86:5d:82:7e:
                    c4:69:1c:d5:b3:73:06:d0:6e:8a:26:d5:88:ea:0d:
                    e0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:91:D0:77:65:66:1A:F7:6F:39:FE:ED:DC:7A:35:A4:AC:65:81:71
            X509v3 Authority Key Identifier:
                keyid:F9:43:C0:2C:6F:7B:F9:79:2A:EE:48:5A:33:7B:4C:78:52:D6:AC:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-UPALG97-Xkq7khaM3tMeFLWrEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/Z5HQd2VmGvdvOf7t3Ho1pKxlgXE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/1-UPALG97-Xkq7khaM3tMeFLWrEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214380

    Signature Algorithm: sha256WithRSAEncryption
         30:53:2d:4d:51:18:d3:72:cb:80:6f:58:8a:9b:74:38:8a:c6:
         2f:c6:ed:62:75:de:66:57:9c:e8:c7:40:34:ed:a1:ca:9d:a7:
         09:dd:02:4a:68:24:ec:cc:8e:2d:36:ac:8e:97:0a:ee:1b:76:
         ed:f3:16:e9:dd:8d:96:6f:ba:f1:ba:52:ad:f9:90:62:1e:a2:
         48:88:b3:f1:22:e1:41:47:ee:bf:52:2f:1e:25:8e:8a:e1:fe:
         c5:61:4b:5a:4a:05:f3:c4:92:88:28:74:1f:c2:36:a8:5e:e2:
         25:5f:b4:ac:d0:3e:16:a7:be:39:1e:b7:4a:03:ed:35:a3:75:
         57:d1:57:75:c0:d7:6b:97:88:42:cc:a7:6f:54:a3:31:4a:de:
         e0:d7:49:1d:8a:f1:86:b4:6b:46:f6:37:65:ff:22:43:d1:53:
         43:cd:7e:b8:ec:20:c4:29:89:52:86:ca:58:63:51:49:18:d3:
         01:d6:2b:4c:b3:af:f2:fe:29:ad:58:5b:dd:72:ee:d5:09:93:
         c3:3d:72:7c:1b:68:f5:f7:b6:2e:14:ea:c5:e9:fc:dc:7b:02:
         b5:d6:1f:bc:32:e6:5d:53:9f:92:f5:6e:5b:3c:bd:f1:19:3c:
         8d:db:94:e5:70:bb:4c:d2:ae:fc:4b:47:5f:1c:a8:24:b2:e8:
         ab:4b:f7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:41:19 2026 by rpki-client