Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/LftAIu9k2wnzZP9QfqBNpPsB7GA.asa
File:                     LftAIu9k2wnzZP9QfqBNpPsB7GA.asa (raw, json)
Hash identifier:          oB3unSja7fyioWETroS2ws+p/jX5s1fLimygzH+96YE=
Subject key identifier:   2D:FB:40:22:EF:64:DB:09:F3:64:FF:50:7E:A0:4D:A4:FB:01:EC:60
Certificate issuer:       /CN=9730c273af9eb556643088e43bef3a6a181c87c2
Certificate serial:       019C889DC54940E150274993FA71BD8B8579
Authority key identifier: 97:30:C2:73:AF:9E:B5:56:64:30:88:E4:3B:EF:3A:6A:18:1C:87:C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lzDCc6-etVZkMIjkO-86ahgch8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/LftAIu9k2wnzZP9QfqBNpPsB7GA.asa
Signing time:             Mon 23 Feb 2026 03:49:26 +0000
ASPA not before:          Mon 23 Feb 2026 03:49:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            213124
Providers:                AS: 207841
                          AS: 209735
                          AS: 216211
                          AS: 393577
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lzDCc6-etVZkMIjkO-86ahgch8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 03:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:88:9d:c5:49:40:e1:50:27:49:93:fa:71:bd:8b:85:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730c273af9eb556643088e43bef3a6a181c87c2
        Validity
            Not Before: Feb 23 03:49:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2dfb4022ef64db09f364ff507ea04da4fb01ec60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c6:12:23:4f:8c:e4:33:f3:90:fa:e3:17:29:
                    e1:fa:c9:7e:41:d3:01:18:20:17:ca:1d:b4:b0:88:
                    57:b5:72:af:ef:02:22:8b:12:41:77:b2:6a:59:c3:
                    c3:70:a8:66:e8:6d:04:d0:11:35:c9:28:ae:31:d5:
                    0e:fe:36:62:c9:94:47:b0:a9:f5:99:b3:1f:de:c1:
                    8a:b4:95:cd:33:1e:2c:d3:b5:e9:f0:d6:c7:eb:fd:
                    0e:50:d6:b3:80:d8:4e:5a:6b:a5:45:9e:e7:25:bb:
                    01:cd:38:3a:97:42:93:86:53:1a:25:5c:1a:aa:db:
                    7b:c3:bb:61:e9:53:00:73:9c:0a:72:68:42:1b:bd:
                    96:0d:f7:21:b9:74:bf:d9:cf:ca:3d:ed:6a:f5:50:
                    97:09:b1:47:7c:73:8f:ab:59:e1:4f:c5:2e:a9:08:
                    84:0e:57:39:d2:4c:ca:05:85:9c:2c:9d:c8:48:29:
                    8c:d3:2d:bd:95:53:01:a1:2a:4d:b5:50:f2:a8:ad:
                    38:0b:c2:1d:b2:f4:d4:75:a9:52:05:a9:20:a1:a7:
                    e1:17:b9:b4:cc:76:21:0e:04:ed:cd:6a:60:f0:40:
                    73:9d:a7:64:2e:0e:e1:f6:67:e1:7b:f9:c3:f0:cb:
                    82:0f:a8:92:f5:8c:a3:c5:b5:5e:e1:a2:21:74:09:
                    7b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:FB:40:22:EF:64:DB:09:F3:64:FF:50:7E:A0:4D:A4:FB:01:EC:60
            X509v3 Authority Key Identifier:
                keyid:97:30:C2:73:AF:9E:B5:56:64:30:88:E4:3B:EF:3A:6A:18:1C:87:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzDCc6-etVZkMIjkO-86ahgch8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/LftAIu9k2wnzZP9QfqBNpPsB7GA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213124

    Signature Algorithm: sha256WithRSAEncryption
         2a:34:b7:cd:f9:bc:63:4f:bb:c8:ca:9a:33:9e:ae:ab:47:07:
         93:38:57:1c:8d:42:fd:3f:8c:a4:f7:3f:be:7e:3a:9d:9c:e0:
         68:e8:d4:9c:4b:41:f7:ff:2e:f2:42:c0:58:f3:91:32:b9:a4:
         99:2a:03:e0:7f:62:26:35:b9:5e:84:09:86:49:9b:a6:85:73:
         8e:d6:4f:bf:ff:fa:b2:d3:15:a1:34:4e:53:4a:cc:c7:e3:47:
         9f:f8:9c:aa:8a:52:b4:16:2e:b4:d9:f9:c3:73:cc:23:aa:e0:
         17:85:11:f7:fd:ab:2d:d0:1a:ec:45:93:f2:7e:fa:41:fe:56:
         99:c9:27:e4:cc:bf:10:32:d3:0d:5a:90:a7:92:00:e8:01:b5:
         67:ca:5b:ab:dc:0c:c8:4e:e9:54:f3:8a:86:17:35:0c:3a:53:
         85:c7:b4:6a:34:8f:4b:0c:f7:a4:e8:8e:e9:1b:49:cc:30:35:
         15:e3:ba:80:53:e1:bf:97:d3:c2:00:95:cb:68:6a:3d:68:ef:
         54:2a:32:3f:f8:61:31:e9:81:f7:5d:a3:87:85:bf:89:bc:55:
         07:4e:fa:bf:d6:c0:8d:6f:d7:80:cf:0c:a2:ff:9c:42:3b:17:
         8f:8b:e7:a5:ae:87:0c:16:a5:15:c6:e4:f4:c9:06:92:0a:45:
         0e:a8:d7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:43 2026 by rpki-client