Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/LiklnKyGrQ1N8swmJUP8MTgMhcs.asa
File:                     LiklnKyGrQ1N8swmJUP8MTgMhcs.asa (raw, json)
Hash identifier:          YnfSS7Rq+wWXwWH2x0GgIjhpjhncpiH/Ro2Xlq96x7Q=
Subject key identifier:   2E:29:25:9C:AC:86:AD:0D:4D:F2:CC:26:25:43:FC:31:38:0C:85:CB
Certificate issuer:       /CN=5d41d330dc8c7293e729451db2646383838e3f8c
Certificate serial:       01A073E45A44977CD95DDBD587222A9572FC
Authority key identifier: 5D:41:D3:30:DC:8C:72:93:E7:29:45:1D:B2:64:63:83:83:8E:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XUHTMNyMcpPnKUUdsmRjg4OOP4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/LiklnKyGrQ1N8swmJUP8MTgMhcs.asa
Signing time:             Sat 05 Sep 2026 23:25:40 +0000
ASPA not before:          Sat 05 Sep 2026 23:25:40 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            207994
Providers:                AS: 6830
                          AS: 35133
                          AS: 41441
                          AS: 50263
                          AS: 50629
                          AS: 50952
                          AS: 56393
                          AS: 56584
                          AS: 64289
                          AS: 197195
                          AS: 203323
                          AS: 206221
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XUHTMNyMcpPnKUUdsmRjg4OOP4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:73:e4:5a:44:97:7c:d9:5d:db:d5:87:22:2a:95:72:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d41d330dc8c7293e729451db2646383838e3f8c
        Validity
            Not Before: Sep  5 23:25:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2e29259cac86ad0d4df2cc262543fc31380c85cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:72:fd:09:e5:e4:71:7a:c4:07:dc:2f:2b:69:
                    54:96:bb:de:c3:2f:4e:cd:e3:17:1b:ac:b3:00:28:
                    ce:a7:39:24:d2:9b:27:a4:85:b3:60:2a:bd:7c:92:
                    67:3a:ea:52:13:da:3e:5c:72:df:7c:fe:ce:93:dd:
                    97:a5:43:42:ca:a7:01:25:11:23:f8:fc:1a:ae:c6:
                    6e:52:4d:bd:dc:95:e6:37:c2:71:80:ad:5a:0e:bb:
                    24:ed:95:85:7e:25:d2:e1:04:21:75:22:46:af:75:
                    6a:e7:b9:8c:e3:38:65:15:04:06:c4:0f:86:13:41:
                    b4:c5:ee:f2:9c:b7:77:b2:74:ea:9c:93:31:56:d6:
                    0c:5c:4b:6e:ed:71:be:fc:b7:72:ec:62:98:ea:68:
                    db:af:f4:5b:6b:8d:43:14:8c:d0:36:6b:e7:00:19:
                    39:44:b5:68:a4:7f:8b:8d:3e:ce:31:1e:dc:5b:a9:
                    09:bc:6a:82:13:4e:68:25:af:db:12:7f:bf:f3:d1:
                    88:a2:70:fd:26:8f:eb:8e:65:a9:1e:ab:37:2a:15:
                    9d:db:4f:c0:e3:d4:38:b6:41:ab:d2:7e:b4:28:84:
                    09:53:ea:73:fb:8f:ab:24:4a:9a:15:b9:25:43:0a:
                    b9:d0:46:b8:dc:4b:ae:46:5d:b1:9f:da:f2:5d:c6:
                    c9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:29:25:9C:AC:86:AD:0D:4D:F2:CC:26:25:43:FC:31:38:0C:85:CB
            X509v3 Authority Key Identifier:
                keyid:5D:41:D3:30:DC:8C:72:93:E7:29:45:1D:B2:64:63:83:83:8E:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XUHTMNyMcpPnKUUdsmRjg4OOP4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/LiklnKyGrQ1N8swmJUP8MTgMhcs.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207994

    Signature Algorithm: sha256WithRSAEncryption
         0e:74:3e:b0:08:da:24:ad:3f:39:c3:8c:b7:09:a8:75:a7:bf:
         6f:68:1c:45:16:1f:3e:81:2f:17:fe:9d:5e:a5:91:cd:b3:6e:
         1c:4c:cf:bc:af:8f:f3:b6:68:de:dc:40:a0:56:b8:fb:70:6e:
         73:45:c5:5b:8a:67:ce:ce:b2:92:43:ad:2a:85:37:12:37:8f:
         e5:53:fc:11:3e:d0:a0:66:72:c3:e2:26:57:ac:ee:3d:86:33:
         2a:a6:a7:71:56:b5:57:f2:26:a1:39:e7:94:44:16:21:84:40:
         89:39:82:3f:55:77:4d:c7:ca:c2:75:ca:83:59:fa:0b:8b:a7:
         c7:6f:32:d4:fb:5b:ae:36:ca:84:80:16:2d:88:ed:b3:ea:ad:
         06:7e:74:b7:62:cd:67:0f:4c:27:1c:fd:e2:4a:24:4e:95:22:
         8f:83:d3:e0:ba:83:89:34:43:b7:04:93:bf:1d:6f:b4:6d:55:
         ac:05:78:17:9e:a5:f2:21:ab:b6:b0:2e:57:67:d8:e4:0a:01:
         38:f7:6b:7b:23:da:db:da:df:75:7c:c3:17:4c:90:82:4a:d4:
         61:ff:fb:14:18:bb:14:be:6b:34:54:bb:db:cb:86:16:da:09:
         0a:5e:f7:c7:7b:8e:05:74:0c:45:c8:e8:e8:5e:c5:fb:be:a5:
         a3:c2:4a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:02:02 2026 by rpki-client