Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/N2IFNe5YN1YLslYRSkP8MAYAhro.asa
File:                     N2IFNe5YN1YLslYRSkP8MAYAhro.asa (raw, json)
Hash identifier:          PEsZdhv4phyTrYk00malom7ngiMTUHDs6cWvYN4u6yc=
Subject key identifier:   37:62:05:35:EE:58:37:56:0B:B2:56:11:4A:43:FC:30:06:00:86:BA
Certificate issuer:       /CN=4f7d885393b32b5eee3a0bf4338e0faaef3c753c
Certificate serial:       01A062850DB0A2C049FDFE1A138012B3C4D9
Authority key identifier: 4F:7D:88:53:93:B3:2B:5E:EE:3A:0B:F4:33:8E:0F:AA:EF:3C:75:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/N2IFNe5YN1YLslYRSkP8MAYAhro.asa
Signing time:             Wed 02 Sep 2026 14:28:01 +0000
ASPA not before:          Wed 02 Sep 2026 14:28:01 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            208089
Providers:                AS: 14618
                          AS: 16509
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:62:85:0d:b0:a2:c0:49:fd:fe:1a:13:80:12:b3:c4:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f7d885393b32b5eee3a0bf4338e0faaef3c753c
        Validity
            Not Before: Sep  2 14:28:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=37620535ee5837560bb256114a43fc30060086ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2d:3f:7d:6b:f2:61:01:71:ae:0b:2a:33:e0:
                    b3:78:a2:07:33:3f:ca:c7:54:8b:97:c7:33:20:0f:
                    88:b9:a7:f9:eb:c5:02:4f:42:80:75:7e:03:80:41:
                    40:f0:fb:b6:9a:8f:26:83:e7:30:74:b9:86:c9:e4:
                    9a:62:1e:9e:40:dc:ac:db:a3:9e:03:bf:5d:c3:f1:
                    48:a9:53:af:f5:08:c8:5d:36:91:fa:25:17:51:ec:
                    fe:72:63:ff:ae:d4:50:01:3d:87:e5:68:6d:9b:d4:
                    dc:86:09:06:c4:a8:30:77:9c:1a:58:a7:94:2e:d5:
                    71:7f:a9:1b:63:65:e6:4b:ca:2e:e9:70:65:1c:da:
                    03:a3:59:06:3d:04:de:a8:57:d1:7c:fc:49:23:a6:
                    a4:8f:e1:6e:72:94:14:56:f5:d1:17:b3:66:15:38:
                    9f:f8:a2:90:82:07:d5:9c:24:38:15:74:aa:36:37:
                    f5:68:ba:a5:f7:08:33:fe:83:a2:ef:f6:28:60:43:
                    f2:05:f1:9a:13:3c:51:97:fe:16:d4:50:a0:40:60:
                    28:ad:c8:c6:98:7e:d8:fe:45:c2:13:48:c2:9e:14:
                    63:de:76:f4:60:be:44:47:40:21:32:5f:07:9d:86:
                    bf:63:8c:27:e1:d2:3b:bc:9d:59:7c:82:50:a9:a7:
                    21:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:62:05:35:EE:58:37:56:0B:B2:56:11:4A:43:FC:30:06:00:86:BA
            X509v3 Authority Key Identifier:
                keyid:4F:7D:88:53:93:B3:2B:5E:EE:3A:0B:F4:33:8E:0F:AA:EF:3C:75:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/N2IFNe5YN1YLslYRSkP8MAYAhro.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208089

    Signature Algorithm: sha256WithRSAEncryption
         87:9e:82:27:9a:48:91:e1:d0:47:85:92:80:60:de:f9:46:2a:
         1e:5c:b0:4d:25:32:c9:cf:65:14:55:1e:1b:ea:1e:1a:50:08:
         2e:1f:ae:be:5b:72:35:0f:19:ba:3e:1c:74:a1:20:72:2d:26:
         13:69:7c:a8:31:79:1b:cf:b9:57:81:3f:39:e0:9d:b3:98:d5:
         57:ba:d7:c2:b3:7e:b7:e6:3b:19:cd:6d:8e:95:55:84:a7:15:
         72:cd:15:a2:67:17:29:a2:8d:ec:81:5c:22:3e:d3:0e:96:08:
         97:0c:62:bc:d5:8c:3e:97:36:5e:82:9e:50:48:7f:d0:2f:e4:
         25:6f:1f:fa:22:30:21:66:59:b9:c8:3b:d5:b6:4f:38:b6:7b:
         4b:fa:19:de:82:c2:3c:d4:76:07:c1:30:d5:12:1f:a7:0a:c7:
         fd:71:dc:1a:f3:59:eb:1d:56:67:e8:e3:b7:ae:08:f1:bf:df:
         a0:b6:36:4c:70:1c:bc:45:b1:0a:03:c7:f7:2c:db:86:2f:58:
         ca:18:79:2e:cc:c6:13:6c:80:62:f9:ae:ea:0f:02:7f:8f:97:
         59:e7:a0:23:fb:a3:a8:29:3b:1d:32:3f:70:8c:3f:73:63:60:
         c5:d8:22:e4:b1:75:81:3f:24:36:a4:cd:81:d4:91:5f:14:f1:
         6e:ae:3c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:21:36 2026 by rpki-client