Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/ScX8zH_7YuqCeMNW6YC-9XYC7Vw.asa
File:                     ScX8zH_7YuqCeMNW6YC-9XYC7Vw.asa (raw, json)
Hash identifier:          ep4ZVxHJ8bc5+UFexh4+d3zBcyDoxg4SWNVrSmeSrtY=
Subject key identifier:   49:C5:FC:CC:7F:FB:62:EA:82:78:C3:56:E9:80:BE:F5:76:02:ED:5C
Certificate issuer:       /CN=723335b0507554ae6c6cc294750764cafd0bd688
Certificate serial:       019C6C30073F4AD70F70FD8DCB198C056625
Authority key identifier: 72:33:35:B0:50:75:54:AE:6C:6C:C2:94:75:07:64:CA:FD:0B:D6:88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cjM1sFB1VK5sbMKUdQdkyv0L1og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/ScX8zH_7YuqCeMNW6YC-9XYC7Vw.asa
Signing time:             Tue 17 Feb 2026 15:20:12 +0000
ASPA not before:          Tue 17 Feb 2026 15:20:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            208790
Providers:                AS: 47272
                          AS: 50338
                          AS: 198057
                          AS: 209533
                          AS: 212895
                          AS: 214675
                          AS: 214757
                          AS: 214809
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cjM1sFB1VK5sbMKUdQdkyv0L1og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:6c:30:07:3f:4a:d7:0f:70:fd:8d:cb:19:8c:05:66:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=723335b0507554ae6c6cc294750764cafd0bd688
        Validity
            Not Before: Feb 17 15:20:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=49c5fccc7ffb62ea8278c356e980bef57602ed5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:25:2c:d4:8d:0f:9c:32:c0:56:cb:33:ac:0a:
                    c0:14:26:00:4b:ec:8f:ba:35:ac:8f:6e:db:66:fa:
                    db:45:f5:6b:4d:e8:93:17:d7:59:8b:d8:87:59:c3:
                    98:57:8d:cf:da:13:d5:23:cf:7e:ce:e2:88:3b:3c:
                    73:1c:e1:8f:b9:a9:4a:7e:f8:21:44:b1:21:64:78:
                    c7:cc:ac:c7:cc:8d:4b:9f:9e:df:24:e5:17:a8:cf:
                    2f:49:d9:04:d8:85:e1:76:52:11:ea:2b:3b:76:16:
                    fa:e8:13:80:51:2c:34:cc:cb:1d:fb:f9:58:f5:87:
                    d7:25:12:49:5d:44:01:66:cc:24:01:54:d6:28:95:
                    57:14:fa:fa:1e:ec:96:16:f7:d0:29:2b:7e:9c:3f:
                    2b:69:20:5e:49:bb:45:77:24:5d:0d:c6:23:77:50:
                    52:16:09:13:05:a3:aa:84:88:c7:cd:8d:0b:f0:df:
                    77:dc:c1:62:2d:5c:00:a6:e3:9f:a9:93:2a:b7:2c:
                    5a:de:2d:c9:ae:d4:6d:bb:21:7a:18:71:f8:15:7a:
                    93:b5:c0:38:50:53:09:cc:7e:86:98:b0:e4:25:89:
                    54:09:16:86:b1:c6:31:6c:64:da:b2:e8:5d:ab:4b:
                    b3:4a:d6:11:c3:45:e3:b0:05:3e:4e:5e:76:1f:ac:
                    33:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C5:FC:CC:7F:FB:62:EA:82:78:C3:56:E9:80:BE:F5:76:02:ED:5C
            X509v3 Authority Key Identifier:
                keyid:72:33:35:B0:50:75:54:AE:6C:6C:C2:94:75:07:64:CA:FD:0B:D6:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cjM1sFB1VK5sbMKUdQdkyv0L1og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/ScX8zH_7YuqCeMNW6YC-9XYC7Vw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208790

    Signature Algorithm: sha256WithRSAEncryption
         72:87:39:42:c2:ce:45:20:eb:98:6c:84:cf:f4:0f:8d:33:bf:
         ea:be:43:38:cc:5c:b0:2f:5d:98:82:f1:1e:86:66:34:43:bb:
         43:e8:7b:8c:eb:88:40:ad:d3:c1:bc:12:02:60:f6:81:7f:47:
         a9:d8:04:b2:63:78:20:af:55:d8:2f:a5:41:ed:ae:de:de:e1:
         43:7e:e4:b3:52:57:5d:44:5f:8f:db:f8:ea:36:15:05:79:5a:
         9d:41:82:9d:4c:06:80:88:1e:c6:9c:ba:7f:64:2d:f1:54:61:
         36:66:6c:66:2e:f5:19:52:88:1f:1f:43:11:9c:a3:7c:be:90:
         47:9a:83:46:92:c4:e2:55:39:58:5d:22:94:05:6c:32:8b:13:
         2d:10:93:13:3e:43:20:af:17:a8:56:3a:f2:65:fe:cd:8e:2e:
         3d:9f:7b:a8:1a:01:31:2e:bb:d7:a5:6c:bd:33:da:8a:3b:eb:
         2a:ea:a5:a8:6b:ea:ee:c8:7f:77:09:17:3d:e2:4b:59:32:1c:
         d0:1f:d3:3d:91:bd:cd:27:ce:c0:98:50:d7:75:91:da:41:01:
         d3:d1:90:75:c5:4f:68:86:96:cb:f4:a5:a9:33:70:63:f9:e4:
         e5:1a:93:02:5a:fc:80:ba:18:22:43:d9:1e:5d:57:de:0f:2e:
         c0:cf:0d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:02:52 2026 by rpki-client