Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/9g1OqI30FQh7cjImbuWXwZ1zeCs.asa
File:                     9g1OqI30FQh7cjImbuWXwZ1zeCs.asa (raw, json)
Hash identifier:          LDG1XLZaTfiRrOMhMOCyLrZ4QwxtVeRzA55nYUHJQfc=
Subject key identifier:   F6:0D:4E:A8:8D:F4:15:08:7B:72:32:26:6E:E5:97:C1:9D:73:78:2B
Certificate issuer:       /CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e
Certificate serial:       01A0A43D2BB5B20E9AF7D8FC444FCEEAAD26
Authority key identifier: 57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/9g1OqI30FQh7cjImbuWXwZ1zeCs.asa
Signing time:             Tue 15 Sep 2026 08:44:27 +0000
ASPA not before:          Tue 15 Sep 2026 08:44:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200993
Providers:                AS: 6939
                          AS: 31500
                          AS: 35598
                          AS: 56584
                          AS: 56740
                          AS: 61400
                          AS: 62255
                          AS: 213753
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:a4:3d:2b:b5:b2:0e:9a:f7:d8:fc:44:4f:ce:ea:ad:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e
        Validity
            Not Before: Sep 15 08:44:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f60d4ea88df415087b7232266ee597c19d73782b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c8:c4:aa:68:cd:57:ea:18:c5:c4:6d:60:9a:
                    10:13:1d:93:ef:a1:bc:56:4a:f2:81:df:6c:8a:c8:
                    fb:af:af:b7:1b:7b:25:ed:5e:59:86:11:d8:f1:ba:
                    ee:69:fa:02:59:7c:1b:c0:f5:43:5c:af:ea:db:55:
                    b5:f1:f6:4a:dd:f9:21:7f:7f:ff:94:53:f8:c9:c7:
                    29:f3:c7:c9:b1:bd:e8:56:63:2f:6e:03:84:ec:bb:
                    86:24:b0:0d:bf:9b:16:92:4d:cc:6a:2d:b8:dc:9a:
                    9e:ee:f6:b0:9f:a0:72:0a:41:b8:68:fb:8d:3d:33:
                    f8:7b:46:b9:3e:80:da:42:55:41:a4:50:32:68:24:
                    09:f8:db:e3:15:e9:e4:c3:90:a2:61:d4:64:80:05:
                    01:8a:ad:8a:8a:e2:0e:82:cf:45:b1:e2:95:ad:ac:
                    44:d8:16:a9:39:ad:f9:e4:d6:e6:96:ac:0a:e0:ce:
                    02:e0:7f:c8:2d:e8:6c:79:96:ec:32:7b:fd:f5:33:
                    a0:32:8d:60:75:cc:52:99:db:a3:36:81:68:53:36:
                    6e:85:21:71:a3:ec:36:61:d3:ab:74:5a:c8:3b:da:
                    79:49:49:7c:4e:b1:da:8c:c5:a2:f5:df:1e:a7:83:
                    87:cd:d4:97:90:9e:33:a4:85:0a:5b:81:d8:34:c0:
                    20:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:0D:4E:A8:8D:F4:15:08:7B:72:32:26:6E:E5:97:C1:9D:73:78:2B
            X509v3 Authority Key Identifier:
                keyid:57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/9g1OqI30FQh7cjImbuWXwZ1zeCs.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200993

    Signature Algorithm: sha256WithRSAEncryption
         40:f0:b2:3e:5d:c7:3c:8d:6b:fb:43:5c:3d:41:17:f2:1b:ab:
         70:4c:9e:23:1e:45:e3:70:dd:09:a7:16:09:84:06:71:a4:2c:
         ea:61:1b:71:c0:ab:27:a7:56:be:37:02:5a:1a:72:ae:6e:98:
         c8:5f:c4:05:cc:ef:dd:91:b9:c9:6f:10:40:d4:48:a2:e0:41:
         4a:ac:95:23:af:26:35:b2:d5:6c:43:b8:47:25:90:7a:56:d5:
         61:11:5d:5a:ea:32:ad:d3:87:1d:e6:a9:ef:f3:cb:f5:7c:5b:
         ed:b7:28:12:e3:6a:51:5a:5f:6e:f2:e3:3d:18:7f:1e:29:e5:
         ae:d6:68:1e:d6:9a:9f:0e:8c:65:60:02:5b:e7:c0:97:09:7d:
         0b:c4:93:d2:c6:8f:d4:1b:9f:6b:e9:60:fd:4c:44:8a:c9:29:
         a8:fd:25:db:4d:e8:72:d1:cf:e2:16:cc:46:78:f0:ad:a0:6c:
         14:b3:60:67:f9:b4:c5:50:85:0d:fb:af:78:82:d1:1b:cc:44:
         9d:77:72:7d:80:aa:c1:e9:1e:95:9e:8d:c9:53:96:a8:37:49:
         d6:e3:21:65:b5:b2:0f:d4:64:f9:30:de:4d:11:b8:68:f4:33:
         1d:d5:6b:b7:cc:3c:ec:2c:c9:fe:3c:b4:3d:0a:6d:20:82:4d:
         34:9f:8d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:37:19 2026 by rpki-client