Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/9bf498-8c31-46ef-9840-35c035fe9d48/1/LAlwfScrj210Zj_YjjVP1IMy-Ts.asa
File:                     LAlwfScrj210Zj_YjjVP1IMy-Ts.asa (raw, json)
Hash identifier:          TDEsF7QpfzwbNHSJA9Ww5ZKSL4vcaKQcJiaTOoq+ljk=
Subject key identifier:   2C:09:70:7D:27:2B:8F:6D:74:66:3F:D8:8E:35:4F:D4:83:32:F9:3B
Certificate issuer:       /CN=cd7f1a5ea7d1d30d5ac6ed4b8eac89b1ecc8f9d6
Certificate serial:       01A0AFB96C0A4EE3CB4568D89E23A46B7A1D
Authority key identifier: CD:7F:1A:5E:A7:D1:D3:0D:5A:C6:ED:4B:8E:AC:89:B1:EC:C8:F9:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zX8aXqfR0w1axu1LjqyJsezI-dY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/9bf498-8c31-46ef-9840-35c035fe9d48/1/LAlwfScrj210Zj_YjjVP1IMy-Ts.asa
Signing time:             Thu 17 Sep 2026 14:15:59 +0000
ASPA not before:          Thu 17 Sep 2026 14:15:59 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            207062
Providers:                AS: 15544
                          AS: 199081
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/9bf498-8c31-46ef-9840-35c035fe9d48/1/zX8aXqfR0w1axu1LjqyJsezI-dY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/9bf498-8c31-46ef-9840-35c035fe9d48/1/zX8aXqfR0w1axu1LjqyJsezI-dY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zX8aXqfR0w1axu1LjqyJsezI-dY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:af:b9:6c:0a:4e:e3:cb:45:68:d8:9e:23:a4:6b:7a:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd7f1a5ea7d1d30d5ac6ed4b8eac89b1ecc8f9d6
        Validity
            Not Before: Sep 17 14:15:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2c09707d272b8f6d74663fd88e354fd48332f93b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:69:6b:3a:54:bc:61:19:96:53:2d:d2:8f:f3:
                    a6:40:2b:98:76:89:44:fc:fe:2f:2d:0d:b1:13:9f:
                    19:73:34:a7:fb:9d:94:c9:1e:f8:25:9b:89:39:f2:
                    98:39:c4:9a:23:07:9f:3d:ef:7b:67:fd:21:82:2e:
                    29:e9:cf:46:46:fb:57:b2:7a:f9:84:3a:19:13:b3:
                    4c:bd:ef:a0:a0:bf:f3:94:29:dd:27:d1:09:4e:c0:
                    60:a7:fe:b9:80:8d:1d:ce:fa:5a:e4:bd:39:18:a6:
                    d3:6f:99:3a:45:9a:f3:40:bd:e5:b3:73:0a:64:b3:
                    1c:c4:01:41:d6:32:e6:f1:c7:f4:f4:5b:7b:3f:5d:
                    1b:dc:16:4f:20:73:42:e1:7c:73:54:c0:73:78:8c:
                    84:63:f2:28:d8:a5:ce:dd:be:74:29:35:d3:78:62:
                    61:34:76:a4:12:fd:bf:a9:65:dd:56:dd:39:33:0d:
                    48:ad:60:c1:16:2e:9d:67:1f:02:1c:4f:36:fe:78:
                    16:a6:da:52:6e:fe:a3:0d:e0:6c:2a:38:46:a4:7c:
                    34:32:ae:db:e1:eb:25:e8:f4:9c:0d:45:ca:d0:70:
                    22:7d:86:18:4c:be:18:e8:e1:c9:34:24:07:28:53:
                    66:cd:11:2b:87:0d:e6:43:b2:25:8a:ec:d7:bd:ff:
                    56:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:09:70:7D:27:2B:8F:6D:74:66:3F:D8:8E:35:4F:D4:83:32:F9:3B
            X509v3 Authority Key Identifier:
                keyid:CD:7F:1A:5E:A7:D1:D3:0D:5A:C6:ED:4B:8E:AC:89:B1:EC:C8:F9:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zX8aXqfR0w1axu1LjqyJsezI-dY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9bf498-8c31-46ef-9840-35c035fe9d48/1/LAlwfScrj210Zj_YjjVP1IMy-Ts.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9bf498-8c31-46ef-9840-35c035fe9d48/1/zX8aXqfR0w1axu1LjqyJsezI-dY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207062

    Signature Algorithm: sha256WithRSAEncryption
         ac:80:1a:7c:21:72:41:e1:ba:5a:88:e0:39:84:01:8a:0c:25:
         3b:d9:5e:40:d0:19:2b:9e:02:f4:41:5c:49:6f:72:6b:8a:17:
         d2:dd:d7:e3:18:cd:4f:c6:94:c0:d8:ad:0e:7d:1f:dc:0c:72:
         3f:d4:7e:77:3b:ca:98:45:f8:2a:c0:9d:9a:7c:90:ca:6b:3d:
         1f:49:d5:d5:3a:ed:53:f1:78:a2:ad:01:d4:79:42:10:98:09:
         60:87:97:09:bb:4d:ce:d8:7b:63:20:3f:30:d7:5a:6a:c3:b9:
         16:b5:c5:34:94:3d:8d:b4:9a:a8:d2:2f:b9:e2:e0:e4:96:ab:
         ae:63:f9:da:2e:f5:17:14:7b:92:2b:7b:fd:33:40:ef:f9:e6:
         3a:9f:ac:29:1a:07:89:ee:23:fd:89:60:0f:4c:e8:09:70:fc:
         80:f2:1a:e9:1d:9c:d7:4d:2f:52:b2:79:6e:40:11:32:cd:e6:
         16:0e:b8:75:ee:6e:08:a5:89:21:fa:45:a1:09:6f:45:53:ee:
         dc:7e:05:b4:f5:f4:e9:98:af:8b:1c:a3:1c:57:ab:68:ee:ae:
         27:8d:b6:67:9c:61:0e:72:bd:a0:60:d0:7e:04:ff:39:4a:38:
         51:cd:ae:2a:dc:46:10:5b:bd:95:05:e2:db:12:8c:de:08:a9:
         ee:78:60:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 08:38:05 2026 by rpki-client