Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/NDzhVbz3oeZ11q9_LylV2ZPngdM.asa
File:                     NDzhVbz3oeZ11q9_LylV2ZPngdM.asa (raw, json)
Hash identifier:          DgFN6Xf/HdcvFRuAAAFfHYivxEVG4xC2XmK5Ds7rm28=
Subject key identifier:   34:3C:E1:55:BC:F7:A1:E6:75:D6:AF:7F:2F:29:55:D9:93:E7:81:D3
Certificate issuer:       /CN=88b2cb04932060569c9720687ded891c34ebb6d5
Certificate serial:       01A0635459CFE9DD81B04CC67CCF76CD277A
Authority key identifier: 88:B2:CB:04:93:20:60:56:9C:97:20:68:7D:ED:89:1C:34:EB:B6:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/NDzhVbz3oeZ11q9_LylV2ZPngdM.asa
Signing time:             Wed 02 Sep 2026 18:14:27 +0000
ASPA not before:          Wed 02 Sep 2026 18:14:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            203415
Providers:                AS: 34927
                          AS: 56655
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:63:54:59:cf:e9:dd:81:b0:4c:c6:7c:cf:76:cd:27:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88b2cb04932060569c9720687ded891c34ebb6d5
        Validity
            Not Before: Sep  2 18:14:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=343ce155bcf7a1e675d6af7f2f2955d993e781d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:92:d6:56:8b:2d:95:0d:07:d9:ae:c3:0f:02:
                    97:33:c3:99:47:d4:1c:18:c2:35:b7:0a:8b:18:97:
                    64:22:a1:5c:b7:ae:b2:7a:63:1b:a7:c7:f2:5f:47:
                    61:89:49:84:42:7a:fb:bc:bf:7e:74:8d:84:20:00:
                    6c:39:43:b3:d6:7e:18:48:de:40:59:78:10:b5:55:
                    8b:aa:d0:ae:3d:af:b3:75:f1:77:d2:41:03:25:b3:
                    c6:b0:28:5e:a3:4a:a3:19:70:0f:a2:c0:3c:36:5c:
                    bb:14:04:29:c5:75:eb:2f:06:d2:45:99:f8:b8:03:
                    f4:00:e2:fd:66:5e:b2:7f:63:e1:15:57:fe:a6:47:
                    34:15:a8:3e:1a:e9:83:79:39:c0:c9:60:aa:ca:b6:
                    90:df:7c:4a:b0:a5:fe:58:19:bd:71:1f:92:55:d9:
                    ce:9b:ca:98:40:1e:13:58:e4:d9:c5:9d:82:1f:47:
                    d0:e2:db:b6:55:d6:af:15:9a:6a:36:b0:ee:75:6b:
                    ad:5b:6f:5d:1b:82:14:84:6b:c0:89:78:20:58:41:
                    04:db:d5:36:ac:25:ff:50:1d:bb:2b:ed:8f:14:3c:
                    60:80:a2:2b:a7:6e:82:44:d4:82:04:4c:48:95:b8:
                    21:f9:48:ca:f5:d6:30:cc:1d:c1:10:0b:85:43:fb:
                    2b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:3C:E1:55:BC:F7:A1:E6:75:D6:AF:7F:2F:29:55:D9:93:E7:81:D3
            X509v3 Authority Key Identifier:
                keyid:88:B2:CB:04:93:20:60:56:9C:97:20:68:7D:ED:89:1C:34:EB:B6:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/NDzhVbz3oeZ11q9_LylV2ZPngdM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203415

    Signature Algorithm: sha256WithRSAEncryption
         bc:7e:66:50:5b:63:7e:55:b0:61:a0:fb:b9:3d:80:72:48:b3:
         4a:10:86:6f:5a:b0:9b:a2:8e:b6:d7:22:d4:f4:df:65:1b:9d:
         a8:fa:03:d6:0a:57:0e:8e:13:f7:99:31:49:a0:7e:59:32:98:
         78:33:bc:7d:57:f5:7f:ac:59:43:69:ea:35:3a:00:18:ca:2c:
         dd:ef:1d:1f:37:41:6e:e3:45:a6:0c:d0:62:e4:6e:38:69:69:
         50:32:5e:44:9e:e9:3e:0a:eb:b1:81:f5:69:f3:cf:3b:04:79:
         be:07:c1:3d:15:71:99:21:b3:76:0a:29:67:87:5f:f9:b8:a2:
         47:e6:cf:ef:b5:8c:6e:86:5f:cc:77:99:15:ec:d5:b0:3a:4d:
         7a:33:7c:01:eb:f2:88:89:58:d4:ea:60:0f:8b:95:cc:ae:20:
         00:6e:27:2d:a6:7f:30:c6:8b:cb:12:fb:45:09:c9:dd:20:d6:
         29:a2:ef:06:77:36:b7:99:48:ef:64:21:5d:10:1d:b1:00:5f:
         b5:51:77:bd:37:68:80:2c:74:a1:05:fd:94:12:5e:4f:6a:a3:
         05:92:78:bf:e4:44:6f:28:9b:42:14:61:45:47:36:96:2c:db:
         00:a6:a9:89:5c:12:2d:5b:27:17:70:e6:49:34:d8:9e:9c:9b:
         9a:eb:43:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:57:59 2026 by rpki-client