Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6f5745-8a26-4f63-9e70-2b14be06e11a/1/esZ-iHhVtgt-yXZBkyG2v_Khc1w.asa
File:                     esZ-iHhVtgt-yXZBkyG2v_Khc1w.asa (raw, json)
Hash identifier:          1eCK8LrpSrRj8EFJVrIKYjfWX5NzAdlbGgvE1Hoh2DA=
Subject key identifier:   7A:C6:7E:88:78:55:B6:0B:7E:C9:76:41:93:21:B6:BF:F2:A1:73:5C
Certificate issuer:       /CN=9c90d8451f50c4f779c4392c31d08c1903d171b3
Certificate serial:       019EC2AF58AC4A8F24F0D59B4376DD96F552
Authority key identifier: 9C:90:D8:45:1F:50:C4:F7:79:C4:39:2C:31:D0:8C:19:03:D1:71:B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nJDYRR9QxPd5xDksMdCMGQPRcbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/6f5745-8a26-4f63-9e70-2b14be06e11a/1/esZ-iHhVtgt-yXZBkyG2v_Khc1w.asa
Signing time:             Sat 13 Jun 2026 20:32:11 +0000
ASPA not before:          Sat 13 Jun 2026 20:32:11 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            201331
Providers:                AS: 42083
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/6f5745-8a26-4f63-9e70-2b14be06e11a/1/nJDYRR9QxPd5xDksMdCMGQPRcbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/6f5745-8a26-4f63-9e70-2b14be06e11a/1/nJDYRR9QxPd5xDksMdCMGQPRcbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nJDYRR9QxPd5xDksMdCMGQPRcbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:af:58:ac:4a:8f:24:f0:d5:9b:43:76:dd:96:f5:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c90d8451f50c4f779c4392c31d08c1903d171b3
        Validity
            Not Before: Jun 13 20:32:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7ac67e887855b60b7ec976419321b6bff2a1735c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4c:6f:19:e9:3d:09:a8:4b:eb:0d:9c:fb:ea:
                    5d:1f:b5:89:24:4e:7c:db:b5:51:90:2c:fc:40:83:
                    cc:5a:27:6a:92:49:2b:6f:36:57:2a:9f:48:3f:2e:
                    5b:12:00:ae:e1:25:a1:dc:56:f5:30:84:c6:e6:5e:
                    31:4d:95:1c:90:a3:a2:81:d3:b1:64:27:f7:be:42:
                    5a:90:76:3a:b8:6c:22:1d:45:2c:ab:24:02:fd:ef:
                    28:b9:85:f1:d4:a3:7a:ac:51:70:46:b4:1f:85:96:
                    16:c1:38:c5:e9:10:17:91:34:9b:78:13:e0:fc:c4:
                    58:49:45:47:60:8b:e0:15:c5:f0:82:78:24:4e:2f:
                    67:0f:36:dd:ab:f2:f4:13:da:31:01:f5:41:ba:5e:
                    92:65:15:b8:f2:19:3a:2a:d9:91:35:99:c5:8f:a1:
                    64:00:e8:26:ac:15:a3:a4:67:c1:48:3e:8a:18:7d:
                    e8:89:fd:d5:0b:c4:46:81:bf:1d:3c:8c:d7:bf:49:
                    ac:81:a4:48:8f:3e:ff:81:bc:ab:f4:f2:3e:b0:ae:
                    4f:33:13:de:db:52:b5:10:10:14:81:35:77:49:53:
                    12:7c:2c:04:2f:9a:c2:7d:eb:81:54:68:17:ba:51:
                    c2:de:fd:a8:a8:0a:af:fe:29:ef:45:de:1f:81:fa:
                    e6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C6:7E:88:78:55:B6:0B:7E:C9:76:41:93:21:B6:BF:F2:A1:73:5C
            X509v3 Authority Key Identifier:
                keyid:9C:90:D8:45:1F:50:C4:F7:79:C4:39:2C:31:D0:8C:19:03:D1:71:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJDYRR9QxPd5xDksMdCMGQPRcbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f5745-8a26-4f63-9e70-2b14be06e11a/1/esZ-iHhVtgt-yXZBkyG2v_Khc1w.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f5745-8a26-4f63-9e70-2b14be06e11a/1/nJDYRR9QxPd5xDksMdCMGQPRcbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201331

    Signature Algorithm: sha256WithRSAEncryption
         79:bc:28:e9:02:00:2b:6b:db:71:9c:34:e8:c3:47:ed:5e:9f:
         ba:e3:64:03:fa:7a:04:68:1b:e1:a2:25:9a:9f:87:01:b9:22:
         37:ec:74:65:0d:f3:23:f6:d1:2a:f0:40:1a:26:f1:d5:82:72:
         b3:5d:df:94:27:ea:f1:c4:08:dc:ec:61:02:6a:39:0d:8e:2f:
         94:88:d5:fb:8c:d0:ef:42:3b:2b:82:71:0f:c3:e2:8a:2c:9f:
         f6:62:61:46:44:4e:c0:ed:3b:42:9d:ca:75:33:53:0b:8c:48:
         a3:13:d0:85:49:64:86:f9:1a:e8:c3:87:36:a0:41:16:8b:e1:
         11:de:17:70:af:fe:c3:3b:e5:6a:c2:9e:2a:56:93:2f:c9:57:
         e6:bb:a2:2a:0e:2e:42:07:31:5f:a8:92:3c:d7:5e:c0:f9:6d:
         a8:0f:24:45:d3:72:7c:f1:57:c5:9f:10:e4:30:f0:f1:e4:09:
         63:11:3f:8f:89:bc:d8:ee:8e:3c:c6:ad:b7:e4:fd:79:29:1d:
         2e:04:20:ae:68:67:16:65:3a:30:2c:fa:d3:e1:6c:bc:be:92:
         df:58:2e:06:c0:77:a0:95:60:88:44:ef:77:dd:1b:5a:e1:ee:
         a7:66:98:ab:fe:ae:a1:a1:fd:16:1a:a3:38:77:4d:9b:2c:42:
         ac:dc:a4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:35:18 2026 by rpki-client