Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/VsG7dVlUV6vUTjuVP6G8KrTsnyQ.asa
File:                     VsG7dVlUV6vUTjuVP6G8KrTsnyQ.asa (raw, json)
Hash identifier:          EkuJk4PeNwUwFypv2fHrIrkEZkJzBGNr87+AlqDgMRo=
Subject key identifier:   56:C1:BB:75:59:54:57:AB:D4:4E:3B:95:3F:A1:BC:2A:B4:EC:9F:24
Certificate issuer:       /CN=501039756ccf31f64a883443e1f1732834d2b8b2
Certificate serial:       019F9F3B095AB238F5DF956BEB80B295D80B
Authority key identifier: 50:10:39:75:6C:CF:31:F6:4A:88:34:43:E1:F1:73:28:34:D2:B8:B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UBA5dWzPMfZKiDRD4fFzKDTSuLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/VsG7dVlUV6vUTjuVP6G8KrTsnyQ.asa
Signing time:             Sun 26 Jul 2026 16:21:14 +0000
ASPA not before:          Sun 26 Jul 2026 16:21:14 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200056
Providers:                AS: 35661
                          AS: 210732
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UBA5dWzPMfZKiDRD4fFzKDTSuLI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:3b:09:5a:b2:38:f5:df:95:6b:eb:80:b2:95:d8:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501039756ccf31f64a883443e1f1732834d2b8b2
        Validity
            Not Before: Jul 26 16:21:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=56c1bb75595457abd44e3b953fa1bc2ab4ec9f24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5c:0a:d3:18:19:8b:99:45:83:40:c0:2b:1d:
                    c5:f6:d0:e2:13:e3:19:fb:11:bb:c4:f4:7a:6b:d0:
                    4b:79:18:4d:25:cf:59:db:d9:8d:3f:41:7a:ba:e9:
                    41:5d:23:e7:c0:b9:a7:6a:8c:77:9e:6b:e6:90:a7:
                    22:da:04:97:50:ca:f5:85:94:47:85:06:3c:38:8d:
                    ab:7b:a9:94:21:a3:7c:d6:2b:26:32:09:d0:3b:b8:
                    e5:79:6f:d3:e5:45:ba:47:e6:2c:cd:09:f3:32:10:
                    26:f6:cf:cf:4d:3f:31:8f:76:52:bc:c1:64:bd:7f:
                    c4:a1:c5:56:41:2d:83:bd:e2:bc:8a:51:54:c1:6d:
                    55:d6:1b:37:00:fc:84:19:1c:4c:ab:eb:c4:35:e4:
                    70:56:ad:5d:91:75:44:56:64:d9:8d:5c:24:2b:f7:
                    a6:4a:be:0d:4d:b4:25:3b:7c:65:eb:f9:56:0b:41:
                    91:e8:2d:8c:0c:d1:11:77:6a:0a:20:22:b9:7e:1e:
                    3c:54:47:93:75:ee:44:ae:fd:39:94:f5:ad:e8:10:
                    60:59:32:67:6f:78:b3:b0:b5:52:2e:f4:54:60:3e:
                    5c:f6:4a:e0:a3:a8:18:88:1d:46:8f:a8:d5:8c:c1:
                    c3:c2:e7:6d:71:2e:09:ec:34:d0:72:ee:e8:5b:e1:
                    d6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C1:BB:75:59:54:57:AB:D4:4E:3B:95:3F:A1:BC:2A:B4:EC:9F:24
            X509v3 Authority Key Identifier:
                keyid:50:10:39:75:6C:CF:31:F6:4A:88:34:43:E1:F1:73:28:34:D2:B8:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBA5dWzPMfZKiDRD4fFzKDTSuLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/VsG7dVlUV6vUTjuVP6G8KrTsnyQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200056

    Signature Algorithm: sha256WithRSAEncryption
         b2:60:04:45:17:2c:92:d3:9a:a3:ea:cc:0f:ad:bb:8c:85:0a:
         07:54:27:ad:64:6f:a7:25:23:98:1c:22:ff:96:b9:8a:68:d7:
         b2:c4:39:cd:84:d0:30:9d:e2:fe:57:2d:0e:fa:e5:68:81:e9:
         b3:75:0f:55:3c:5e:d5:85:09:69:c2:85:de:83:0f:48:54:fc:
         c0:ec:bc:ba:95:af:3d:57:50:b3:32:f7:01:f9:6e:79:d1:53:
         c3:55:87:a9:75:0e:e6:a0:7d:1f:2d:84:3c:ea:89:26:c4:2c:
         e2:53:1d:51:7b:2e:1b:43:f7:0a:81:d5:0c:c2:19:34:eb:47:
         d4:2f:cf:b5:37:4a:d8:db:a8:da:c8:75:bd:a3:dc:e1:44:0a:
         cd:6d:7c:27:12:78:b6:02:82:f3:b1:9e:d3:89:3c:8c:8c:f1:
         cb:58:53:5a:3f:67:bb:25:13:62:f4:e0:45:af:0b:d5:73:97:
         7d:1f:a7:1e:60:a9:5f:05:f7:58:11:89:f8:3c:c6:da:47:48:
         fd:b0:fc:29:eb:81:dc:71:60:dc:8f:a6:7b:9e:3d:b8:a3:06:
         a1:96:bc:24:f8:5a:b8:d4:77:ea:54:5c:33:a7:fb:42:ec:7e:
         34:4d:fe:5d:8d:3e:b6:80:c3:8d:ed:70:b7:03:0f:d5:25:70:
         a0:a3:40:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:41:48 2026 by rpki-client