Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/152f0f-6935-41c1-9b5f-1ef9a1167ed4/1/yGVHSJihmK5lz-YBtlg1ypGdz5I.asa
File:                     yGVHSJihmK5lz-YBtlg1ypGdz5I.asa (raw, json)
Hash identifier:          LHCOSJtU6LRqO7/ToKVntknxN1V5181fXBdOKoO29NI=
Subject key identifier:   C8:65:47:48:98:A1:98:AE:65:CF:E6:01:B6:58:35:CA:91:9D:CF:92
Certificate issuer:       /CN=0a4273b9e7510d019f2c5329b3f34eaef2aebca6
Certificate serial:       019D3D4E0CAC6CB24D707C0F13A869B18732
Authority key identifier: 0A:42:73:B9:E7:51:0D:01:9F:2C:53:29:B3:F3:4E:AE:F2:AE:BC:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CkJzuedRDQGfLFMps_NOrvKuvKY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/152f0f-6935-41c1-9b5f-1ef9a1167ed4/1/yGVHSJihmK5lz-YBtlg1ypGdz5I.asa
Signing time:             Mon 30 Mar 2026 05:53:38 +0000
ASPA not before:          Mon 30 Mar 2026 05:53:38 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            199767
Providers:                AS: 198304
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/152f0f-6935-41c1-9b5f-1ef9a1167ed4/1/CkJzuedRDQGfLFMps_NOrvKuvKY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/152f0f-6935-41c1-9b5f-1ef9a1167ed4/1/CkJzuedRDQGfLFMps_NOrvKuvKY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CkJzuedRDQGfLFMps_NOrvKuvKY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3d:4e:0c:ac:6c:b2:4d:70:7c:0f:13:a8:69:b1:87:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a4273b9e7510d019f2c5329b3f34eaef2aebca6
        Validity
            Not Before: Mar 30 05:53:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c865474898a198ae65cfe601b65835ca919dcf92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ca:93:12:16:3a:dc:96:47:8b:89:81:07:8c:
                    99:ca:ba:d7:ff:65:f6:87:07:c1:03:3f:88:8d:f7:
                    37:c6:3e:31:60:78:bd:ff:7d:26:14:5b:02:f3:af:
                    65:40:7d:03:97:e6:7b:19:d4:84:05:6b:78:98:8f:
                    6b:ab:db:de:07:9d:89:55:3d:22:87:b2:86:78:68:
                    c5:70:00:88:7c:82:98:58:71:0d:89:4a:02:13:9f:
                    86:23:4e:9e:eb:f0:d6:67:fd:1a:d8:59:c8:b2:c0:
                    6a:16:af:f5:6f:57:22:4e:69:5f:d0:26:4e:13:a2:
                    6c:57:f8:4b:d1:01:43:af:a0:87:48:da:91:86:43:
                    37:79:45:d4:ed:5b:0b:28:d1:7d:eb:e2:be:dd:e3:
                    6d:eb:1c:42:58:5d:1c:c7:09:f6:a6:02:18:45:32:
                    3c:11:34:30:99:00:ec:3a:61:25:a6:35:c1:c6:d7:
                    44:ff:4c:ea:48:bb:61:53:24:4b:04:f5:d9:c0:81:
                    10:30:2d:20:dd:fa:72:9f:8f:bd:c8:66:82:6d:9d:
                    da:38:9a:1d:ee:90:f4:ce:99:cd:92:66:a5:71:b8:
                    5b:af:de:75:7f:b5:8a:5e:26:40:41:6c:3d:44:61:
                    19:23:c3:fa:b7:87:e3:dd:35:b5:f7:03:69:77:bc:
                    21:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:65:47:48:98:A1:98:AE:65:CF:E6:01:B6:58:35:CA:91:9D:CF:92
            X509v3 Authority Key Identifier:
                keyid:0A:42:73:B9:E7:51:0D:01:9F:2C:53:29:B3:F3:4E:AE:F2:AE:BC:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkJzuedRDQGfLFMps_NOrvKuvKY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/152f0f-6935-41c1-9b5f-1ef9a1167ed4/1/yGVHSJihmK5lz-YBtlg1ypGdz5I.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/152f0f-6935-41c1-9b5f-1ef9a1167ed4/1/CkJzuedRDQGfLFMps_NOrvKuvKY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199767

    Signature Algorithm: sha256WithRSAEncryption
         45:6f:60:c0:63:38:67:9d:1e:f1:c6:a6:f1:3b:f7:38:20:a1:
         ba:a4:d6:be:06:0e:7a:b8:62:00:81:0b:5e:9e:6d:b7:7c:bf:
         a0:60:7a:00:98:a4:c2:0e:aa:61:47:73:a5:1a:5c:bf:9c:e2:
         eb:15:21:95:e3:c4:d8:48:62:55:b4:51:3f:d2:17:28:a1:a2:
         da:62:4d:d2:e7:35:4a:74:57:ae:b4:16:4f:80:db:b6:a6:e0:
         56:e9:d9:6c:47:90:77:f9:ce:38:0f:ce:84:9f:fe:a1:b4:05:
         50:91:e0:f6:08:a4:8a:d9:51:b3:af:f3:97:62:0a:91:1b:ed:
         5e:3d:e3:d1:ad:e4:7c:49:fc:c8:a6:a0:3b:e4:57:5e:2f:46:
         75:59:45:49:40:49:0e:ef:f8:f8:e8:fa:c8:eb:f2:67:ed:37:
         e1:f8:11:d4:41:4c:09:40:27:2c:4b:94:f8:13:50:df:47:ef:
         2e:49:a0:fd:55:39:d7:28:6a:05:1b:d7:c2:2e:13:f7:26:41:
         8d:25:7c:57:21:e1:5e:2e:cf:b8:d9:63:e7:62:8d:a0:51:12:
         ec:52:88:b9:af:ea:cb:5b:a0:14:77:db:aa:74:54:8a:d8:77:
         02:ae:64:e3:ae:67:85:19:87:c2:a1:83:39:25:61:1a:a2:d8:
         69:1e:8d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:28:27 2026 by rpki-client