Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/xrp0HnIK2w9afEJM1GDVJOl5JvA.asa
File:                     xrp0HnIK2w9afEJM1GDVJOl5JvA.asa (raw, json)
Hash identifier:          55HCFpG/ZJNwGEZUAcO2TsiWkfEa5pv4wg7vR6XeG3w=
Subject key identifier:   C6:BA:74:1E:72:0A:DB:0F:5A:7C:42:4C:D4:60:D5:24:E9:79:26:F0
Certificate issuer:       /CN=7698c999e7f0493ee36634e892b37c9f3bf9407d
Certificate serial:       019EACF92CD78A972FBBFB62E8F6EF8A29F0
Authority key identifier: 76:98:C9:99:E7:F0:49:3E:E3:66:34:E8:92:B3:7C:9F:3B:F9:40:7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/xrp0HnIK2w9afEJM1GDVJOl5JvA.asa
Signing time:             Tue 09 Jun 2026 15:21:11 +0000
ASPA not before:          Tue 09 Jun 2026 15:21:11 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            35627
Providers:                AS: 11967
                          AS: 50156
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ac:f9:2c:d7:8a:97:2f:bb:fb:62:e8:f6:ef:8a:29:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7698c999e7f0493ee36634e892b37c9f3bf9407d
        Validity
            Not Before: Jun  9 15:21:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c6ba741e720adb0f5a7c424cd460d524e97926f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:05:a7:4f:0d:26:6d:8b:d6:7d:09:66:e2:76:
                    49:cf:89:1b:14:c2:18:ae:20:66:c6:f0:f9:a2:ab:
                    53:e5:63:3f:fd:a1:b8:93:df:d9:17:45:c5:06:9f:
                    cc:e1:d5:e4:2d:a0:98:db:60:8b:93:6d:f8:b4:17:
                    4d:55:1d:f4:3a:88:52:ef:fb:e3:e5:22:49:29:b1:
                    92:4c:59:83:89:cd:7e:a9:35:ae:56:fd:72:26:14:
                    a1:97:d0:39:da:0b:3b:4c:2f:3a:8f:88:a7:c3:ca:
                    41:f3:9e:d0:7a:64:50:68:3c:82:3c:11:e1:54:cb:
                    4c:ee:8a:83:e3:22:bb:5f:0c:4f:2f:a9:0f:23:9f:
                    54:bf:ca:9f:69:82:ab:41:5d:0b:17:83:81:4f:5e:
                    17:ce:a8:47:f2:11:a5:c4:4b:85:d8:0f:cd:4e:e7:
                    95:e1:dd:7a:01:da:5f:8f:64:8b:99:35:92:1b:5b:
                    0f:2b:69:07:e1:b3:4e:e0:5a:24:e0:db:9e:03:5c:
                    1c:5e:78:63:62:db:62:60:06:14:c8:b7:8b:b1:5d:
                    66:b4:73:75:69:a8:f2:55:7c:92:55:9c:72:4a:ab:
                    1e:d1:ce:70:22:46:71:a1:45:d4:81:1b:d1:60:55:
                    84:eb:3f:cc:37:71:76:27:ef:fe:d3:b3:22:80:e0:
                    7a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:BA:74:1E:72:0A:DB:0F:5A:7C:42:4C:D4:60:D5:24:E9:79:26:F0
            X509v3 Authority Key Identifier:
                keyid:76:98:C9:99:E7:F0:49:3E:E3:66:34:E8:92:B3:7C:9F:3B:F9:40:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/xrp0HnIK2w9afEJM1GDVJOl5JvA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  35627

    Signature Algorithm: sha256WithRSAEncryption
         7d:90:a2:5a:f6:a2:a6:89:56:98:1c:fb:c2:cd:ae:2c:e9:3b:
         a0:27:44:61:e2:0f:89:70:b9:c3:36:98:8e:ef:63:57:ea:d9:
         38:4a:dd:be:5a:30:36:78:ee:d7:0e:d0:d0:68:a8:6c:d3:99:
         78:a0:fb:f3:fe:31:e4:f8:da:03:ea:e6:d7:5b:fa:65:44:44:
         c7:ca:c7:dc:69:a4:ed:46:12:38:74:ac:4b:da:6d:b6:15:df:
         e5:55:c1:fe:ad:b5:ea:c7:0f:75:d3:55:18:59:04:b7:41:6e:
         3b:8c:1f:39:d5:14:00:ac:19:97:af:e6:8f:47:77:f6:b3:3b:
         e6:58:0b:f1:b6:e6:1c:fd:68:65:ce:04:e4:9d:2b:fa:59:d0:
         0f:ec:d0:58:95:73:8d:1e:75:27:5d:b5:86:37:d3:fc:fe:e2:
         ac:79:18:45:3d:5e:02:47:5d:8d:d0:36:c2:df:7f:c4:02:4b:
         77:94:91:c2:76:a7:f9:78:9d:b8:ae:2b:8e:dc:bb:b0:6f:88:
         05:6e:82:e3:b4:8f:48:94:0c:e2:74:c9:81:3a:6a:67:7a:53:
         b1:5b:08:ce:94:ed:fd:10:3a:d5:5f:ac:0e:a3:70:ce:63:71:
         02:40:01:2c:1e:95:06:17:b0:20:cd:8a:79:bb:fa:85:bc:22:
         de:e3:99:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:51:27 2026 by rpki-client