Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/9276c8-94ba-4ae1-ac52-bc1ba0a48140/1/fOw93NQ54fHKmnOokgNp9f_FGR8.asa
File:                     fOw93NQ54fHKmnOokgNp9f_FGR8.asa (raw, json)
Hash identifier:          C4FmaMhFhqwSsxNQqIZDGYzhfTxD/l6bXS+k4pCf9WM=
Subject key identifier:   7C:EC:3D:DC:D4:39:E1:F1:CA:9A:73:A8:92:03:69:F5:FF:C5:19:1F
Certificate issuer:       /CN=7831c6912f11c2dfe92fee149353aa8e6d9809bd
Certificate serial:       019EB074E64753526213E9F1233F5B30B43F
Authority key identifier: 78:31:C6:91:2F:11:C2:DF:E9:2F:EE:14:93:53:AA:8E:6D:98:09:BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eDHGkS8Rwt_pL-4Uk1Oqjm2YCb0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/9276c8-94ba-4ae1-ac52-bc1ba0a48140/1/fOw93NQ54fHKmnOokgNp9f_FGR8.asa
Signing time:             Wed 10 Jun 2026 07:35:11 +0000
ASPA not before:          Wed 10 Jun 2026 07:35:11 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            216058
Providers:                AS: 8932
                          AS: 49800
                          AS: 199673
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/9276c8-94ba-4ae1-ac52-bc1ba0a48140/1/eDHGkS8Rwt_pL-4Uk1Oqjm2YCb0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/9276c8-94ba-4ae1-ac52-bc1ba0a48140/1/eDHGkS8Rwt_pL-4Uk1Oqjm2YCb0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eDHGkS8Rwt_pL-4Uk1Oqjm2YCb0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b0:74:e6:47:53:52:62:13:e9:f1:23:3f:5b:30:b4:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7831c6912f11c2dfe92fee149353aa8e6d9809bd
        Validity
            Not Before: Jun 10 07:35:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7cec3ddcd439e1f1ca9a73a8920369f5ffc5191f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:46:04:eb:27:d4:5b:7b:31:d4:79:ff:38:c5:
                    a2:3c:42:2c:3c:7b:51:2a:21:fe:47:53:77:40:0d:
                    0e:ce:97:23:00:3d:0d:c4:a2:fa:c6:16:f7:b5:1f:
                    b0:09:29:cf:43:7e:5a:f0:b8:60:1b:e3:ba:d9:f0:
                    dd:6c:fe:f4:20:95:9e:3f:74:3c:07:f2:bc:bd:42:
                    46:a4:47:1d:51:3f:ee:21:c8:4d:b4:48:d5:8a:36:
                    08:c9:83:47:a7:b6:b4:cc:cb:d5:dd:85:83:35:d6:
                    dc:b3:60:8b:14:db:91:1f:f8:7d:b8:82:08:ce:ec:
                    73:44:5b:16:6a:f9:cb:fe:55:0b:a8:40:1f:90:fd:
                    a5:3d:f6:cc:2e:be:52:29:c9:67:8f:69:b6:7f:36:
                    09:b0:7e:f5:3f:b5:e4:be:53:ac:98:cd:7b:de:1a:
                    f8:5f:8d:e2:78:29:34:4b:10:22:d9:5d:6a:25:29:
                    92:55:f9:92:a3:12:e0:5a:4d:a8:97:8f:88:e0:68:
                    89:dc:3b:1e:ef:1b:0b:10:9e:ff:77:58:21:64:cf:
                    f1:be:0f:97:95:ee:02:58:40:95:d1:9b:95:4f:de:
                    10:27:17:61:01:c4:00:cb:68:a4:40:29:70:6f:0e:
                    ff:d3:ef:86:5c:d0:9d:a8:1c:dd:0b:8b:43:01:0e:
                    a3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:EC:3D:DC:D4:39:E1:F1:CA:9A:73:A8:92:03:69:F5:FF:C5:19:1F
            X509v3 Authority Key Identifier:
                keyid:78:31:C6:91:2F:11:C2:DF:E9:2F:EE:14:93:53:AA:8E:6D:98:09:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDHGkS8Rwt_pL-4Uk1Oqjm2YCb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/9276c8-94ba-4ae1-ac52-bc1ba0a48140/1/fOw93NQ54fHKmnOokgNp9f_FGR8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/9276c8-94ba-4ae1-ac52-bc1ba0a48140/1/eDHGkS8Rwt_pL-4Uk1Oqjm2YCb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216058

    Signature Algorithm: sha256WithRSAEncryption
         57:eb:79:19:2e:94:c1:8c:f1:07:22:50:21:12:9a:77:87:91:
         4f:f8:02:9a:3c:60:17:45:48:1b:c7:06:77:08:77:6c:c4:c2:
         42:be:e8:83:fa:a6:cf:43:b9:95:67:d7:b9:c1:d4:85:e8:1e:
         3a:b5:a9:53:1e:a3:ed:74:ae:b3:2c:fb:5c:30:bc:ac:ea:15:
         13:23:28:3e:9c:93:24:8b:ac:78:f7:97:64:02:dd:a5:30:b3:
         91:8b:a3:f9:e7:85:ef:8d:16:50:d0:aa:e3:f9:58:d7:ef:00:
         28:73:e9:b8:80:bb:0e:81:b5:11:ee:cd:92:36:eb:02:00:63:
         0d:6b:5f:9a:4d:15:f4:2b:ad:19:72:e1:d8:c9:2d:a0:d0:28:
         0c:46:d7:65:4f:8d:39:9b:34:fa:94:9f:22:ee:0e:af:b7:7a:
         53:ce:4f:b8:76:c0:fd:9c:7e:70:03:13:c7:12:31:fa:a2:1e:
         02:30:ec:2b:fb:0f:03:11:a1:ef:de:44:5a:09:74:1f:e9:f0:
         88:b6:1f:40:e0:bb:6b:2e:d9:78:fc:59:5e:97:5b:7e:27:5e:
         a3:a6:6c:38:e3:b6:c4:05:29:a7:c3:5b:8b:20:81:56:c5:69:
         f6:94:b7:10:34:79:35:fd:b2:dd:6d:b2:03:93:2e:bb:86:7b:
         99:a8:46:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:31:11 2026 by rpki-client