Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/GmNXmiq5iVl3LlLazdx_LHN3boE.asa
File:                     GmNXmiq5iVl3LlLazdx_LHN3boE.asa (raw, json)
Hash identifier:          YRVbgQn0SaBqEvSThmW75OyzWKprF8xX5w+6esDiBi4=
Subject key identifier:   1A:63:57:9A:2A:B9:89:59:77:2E:52:DA:CD:DC:7F:2C:73:77:6E:81
Certificate issuer:       /CN=bac4a089f8e68a830eb98a5c1fe2560651e5b39b
Certificate serial:       019E4A816D944B36EAD9547192CCD6F885EF
Authority key identifier: BA:C4:A0:89:F8:E6:8A:83:0E:B9:8A:5C:1F:E2:56:06:51:E5:B3:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/usSgifjmioMOuYpcH-JWBlHls5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/GmNXmiq5iVl3LlLazdx_LHN3boE.asa
Signing time:             Thu 21 May 2026 12:27:36 +0000
ASPA not before:          Thu 21 May 2026 12:27:36 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            203019
Providers:                AS: 16276
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/usSgifjmioMOuYpcH-JWBlHls5s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:4a:81:6d:94:4b:36:ea:d9:54:71:92:cc:d6:f8:85:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bac4a089f8e68a830eb98a5c1fe2560651e5b39b
        Validity
            Not Before: May 21 12:27:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1a63579a2ab98959772e52dacddc7f2c73776e81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:35:14:c0:96:a1:23:9e:92:b6:3f:86:04:eb:
                    35:b8:f2:41:a2:e3:da:b1:54:93:ea:fe:1a:59:55:
                    72:0d:be:41:1e:bb:3f:d4:f4:2b:05:9d:3c:7a:bf:
                    ca:78:58:6f:e2:e5:83:c1:01:d1:bf:75:67:9a:d4:
                    36:a1:b9:a2:4c:35:1a:83:a5:bc:aa:14:fd:bd:17:
                    78:2c:c2:89:65:8e:f9:7e:a4:56:98:e2:58:81:1b:
                    d1:52:d1:a1:42:6a:d8:29:63:07:f5:ad:42:38:a0:
                    a6:53:85:2e:36:6a:87:67:95:21:5e:31:7e:c0:f3:
                    50:e1:b6:5c:00:4e:40:82:27:43:f7:68:9e:05:06:
                    24:63:31:26:7a:b3:44:e4:22:13:32:2d:5c:21:98:
                    5c:f0:3c:c0:4f:b5:80:7e:70:7c:74:46:9a:48:0c:
                    61:bd:cd:0d:dc:0c:47:01:78:7b:33:f7:11:56:96:
                    b5:7e:c9:79:4d:4e:bc:a1:e1:19:91:2e:91:b4:dc:
                    14:49:b1:26:ce:5f:8c:9d:12:cd:6b:a7:c2:a6:46:
                    d3:2b:94:83:32:a2:d3:22:a9:97:f7:6b:26:8a:1a:
                    eb:d0:1b:ab:45:64:bd:49:22:7c:5e:a1:8c:6f:da:
                    57:48:14:4f:30:b5:54:da:6d:de:e7:33:25:77:0a:
                    95:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:63:57:9A:2A:B9:89:59:77:2E:52:DA:CD:DC:7F:2C:73:77:6E:81
            X509v3 Authority Key Identifier:
                keyid:BA:C4:A0:89:F8:E6:8A:83:0E:B9:8A:5C:1F:E2:56:06:51:E5:B3:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/usSgifjmioMOuYpcH-JWBlHls5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/GmNXmiq5iVl3LlLazdx_LHN3boE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203019

    Signature Algorithm: sha256WithRSAEncryption
         40:c3:6f:85:6d:e9:81:11:57:2a:26:71:88:9b:92:c4:43:d7:
         08:a6:3f:76:4c:1d:de:aa:2a:0d:d4:4a:79:51:90:20:44:51:
         06:42:62:a3:d6:7e:ef:83:95:95:72:d1:3e:6f:1f:6d:1e:35:
         c0:82:4d:45:03:0b:d0:41:27:1e:3a:26:19:ee:a9:00:d9:5e:
         a6:c5:63:88:7d:31:c0:aa:fd:f7:2e:44:83:1a:cc:ea:6e:32:
         6b:a6:6c:35:cb:41:dd:b1:0b:c7:eb:be:ad:5b:38:63:0e:db:
         fc:91:c8:83:a7:ff:df:6f:e7:69:64:87:1b:ed:75:0c:29:f8:
         c1:96:1c:8d:7f:b6:61:24:23:c7:3f:8d:03:a0:29:11:71:1f:
         67:d6:2e:e0:e4:05:40:8b:42:74:ee:f2:39:f7:e6:4b:74:30:
         2e:c8:ed:ed:87:31:7e:92:cf:b1:c6:22:1d:90:2e:94:f8:88:
         6f:1a:62:69:2d:9e:0c:e5:06:f7:c4:3b:7d:05:ad:86:d9:c4:
         ea:44:3a:da:d1:c0:54:13:0c:be:ca:df:ac:1a:e3:e8:31:6d:
         fe:47:a2:d8:65:91:6e:b3:b1:94:34:f5:82:ba:0a:3c:9d:f9:
         d5:b3:8b:6c:e2:7f:b5:74:b5:12:16:ae:18:2b:a0:52:03:45:
         55:07:e0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:08:16 2026 by rpki-client