Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/h1AxusJ0gzCuRYNROBYE_ex13Gw.asa
File:                     h1AxusJ0gzCuRYNROBYE_ex13Gw.asa (raw, json)
Hash identifier:          RqU6DmGS5GS4oIpT5CWEZ1wznv9eazt1xRYLsNLaGg0=
Subject key identifier:   87:50:31:BA:C2:74:83:30:AE:45:83:51:38:16:04:FD:EC:75:DC:6C
Certificate issuer:       /CN=723335b0507554ae6c6cc294750764cafd0bd688
Certificate serial:       01A09C8CC9E72F7799DF079578ED1D8EE59D
Authority key identifier: 72:33:35:B0:50:75:54:AE:6C:6C:C2:94:75:07:64:CA:FD:0B:D6:88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cjM1sFB1VK5sbMKUdQdkyv0L1og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/h1AxusJ0gzCuRYNROBYE_ex13Gw.asa
Signing time:             Sun 13 Sep 2026 20:54:27 +0000
ASPA not before:          Sun 13 Sep 2026 20:54:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            208790
Providers:                AS: 50338
                          AS: 209533
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cjM1sFB1VK5sbMKUdQdkyv0L1og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:9c:8c:c9:e7:2f:77:99:df:07:95:78:ed:1d:8e:e5:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=723335b0507554ae6c6cc294750764cafd0bd688
        Validity
            Not Before: Sep 13 20:54:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=875031bac2748330ae458351381604fdec75dc6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:af:36:b1:3c:28:e2:d0:e1:c4:9f:b2:11:bd:
                    7c:8e:63:8e:69:86:75:98:cc:38:cd:58:43:70:7e:
                    2f:5f:eb:8b:d0:f3:b8:5e:2d:1f:dc:12:3e:67:e6:
                    04:6b:9f:2c:0d:12:39:88:68:19:60:6a:1d:1c:b1:
                    21:1c:cf:92:ce:af:f6:03:3b:34:e0:2e:19:52:89:
                    aa:a1:f0:6b:85:dc:5c:8c:c4:57:4b:69:ac:eb:36:
                    a5:57:dc:52:d3:bd:c4:ae:a7:16:2a:b7:4c:45:fb:
                    6d:bd:05:7f:18:e8:5d:a0:01:83:e0:64:87:92:c3:
                    81:69:e8:05:22:d0:49:3d:3a:aa:16:d9:4c:04:3e:
                    32:6e:4d:cf:da:f9:59:fc:2f:29:58:e5:a6:e7:3c:
                    b1:e0:23:7c:b8:5e:7f:66:10:f1:18:e7:0a:2f:56:
                    93:d8:22:d3:d3:3d:98:d6:96:8e:e5:23:4c:56:49:
                    6b:4c:92:09:5c:45:e4:2c:24:e4:5a:38:3a:88:0c:
                    11:c8:1b:38:b3:9a:81:c1:57:76:61:f5:cc:6b:7f:
                    b6:e3:90:f1:59:eb:5d:9f:9c:12:05:97:7c:5e:9a:
                    7f:4a:6d:88:d9:d7:3c:76:b9:11:30:d1:27:28:08:
                    c8:8b:1c:d8:90:bd:79:c1:74:d8:c9:ae:01:ec:56:
                    b6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:50:31:BA:C2:74:83:30:AE:45:83:51:38:16:04:FD:EC:75:DC:6C
            X509v3 Authority Key Identifier:
                keyid:72:33:35:B0:50:75:54:AE:6C:6C:C2:94:75:07:64:CA:FD:0B:D6:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cjM1sFB1VK5sbMKUdQdkyv0L1og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/h1AxusJ0gzCuRYNROBYE_ex13Gw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208790

    Signature Algorithm: sha256WithRSAEncryption
         11:bb:56:5c:4e:de:c2:e6:06:c5:67:17:d5:00:52:79:22:4c:
         61:56:02:f5:37:3f:c6:c7:0e:d8:c6:6b:41:b8:11:94:47:1a:
         24:5c:2e:c1:ca:9c:e7:a2:7c:7a:27:79:50:60:15:94:c2:52:
         4b:ef:2b:22:2d:11:e8:9d:14:bc:0a:81:8e:b1:6b:3b:27:68:
         d4:bd:2e:1b:c5:ec:e7:c8:9d:25:d3:57:4a:64:f7:6a:63:90:
         2e:2b:04:2f:51:64:56:41:41:e4:3c:4d:29:fc:ba:24:eb:95:
         ea:09:49:93:e5:8c:78:b8:07:23:66:d3:7d:3e:65:0f:3a:c9:
         93:a8:0a:7c:af:2e:e8:e5:fa:10:d5:f6:cd:2f:54:84:95:6e:
         f9:2e:76:26:ff:92:df:23:1c:b9:72:59:77:7c:73:b3:f3:c1:
         66:a2:32:48:b5:40:0c:21:4f:0c:39:4e:a9:55:36:05:ec:b9:
         fd:29:62:97:e8:c5:12:b3:4f:b9:a8:cd:7c:09:1e:bc:8c:f3:
         73:b9:7c:f4:25:f9:a7:da:67:37:bc:8a:db:3e:a0:f9:6d:3f:
         03:32:4e:07:95:db:1c:f4:25:d1:27:4c:ac:3b:43:5d:fd:bd:
         b1:77:e0:b5:97:9a:36:a2:ad:c1:90:1a:cc:88:c1:22:a8:51:
         9a:76:05:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 09:21:47 2026 by rpki-client