Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/f751b6-5d86-47ee-8fd2-4c49704565c8/1/hvZKToBFprnrpLaFvP2GP4f29o8.asa
File:                     hvZKToBFprnrpLaFvP2GP4f29o8.asa (raw, json)
Hash identifier:          adL+Hr0Myv5tfA8wDedAlh2DFcBTImxKKAjiZtHMF+U=
Subject key identifier:   86:F6:4A:4E:80:45:A6:B9:EB:A4:B6:85:BC:FD:86:3F:87:F6:F6:8F
Certificate issuer:       /CN=e097385e916dcd175cf38b965fc32aff303ce425
Certificate serial:       019EB207BAC8C2009E99ABCF13CAA6F0AEAE
Authority key identifier: E0:97:38:5E:91:6D:CD:17:5C:F3:8B:96:5F:C3:2A:FF:30:3C:E4:25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Jc4XpFtzRdc84uWX8Mq_zA85CU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/f751b6-5d86-47ee-8fd2-4c49704565c8/1/hvZKToBFprnrpLaFvP2GP4f29o8.asa
Signing time:             Wed 10 Jun 2026 14:55:11 +0000
ASPA not before:          Wed 10 Jun 2026 14:55:11 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            219488
Providers:                AS: 34872
                          AS: 210233
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/f751b6-5d86-47ee-8fd2-4c49704565c8/1/4Jc4XpFtzRdc84uWX8Mq_zA85CU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/f751b6-5d86-47ee-8fd2-4c49704565c8/1/4Jc4XpFtzRdc84uWX8Mq_zA85CU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Jc4XpFtzRdc84uWX8Mq_zA85CU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 20:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b2:07:ba:c8:c2:00:9e:99:ab:cf:13:ca:a6:f0:ae:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e097385e916dcd175cf38b965fc32aff303ce425
        Validity
            Not Before: Jun 10 14:55:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=86f64a4e8045a6b9eba4b685bcfd863f87f6f68f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7a:80:86:4c:0d:ac:61:b9:5f:45:d2:b6:6c:
                    be:4a:81:5c:7c:b4:c6:60:58:b9:db:ba:a5:b5:4a:
                    5e:36:be:e1:89:58:8b:c8:d1:bf:3e:4c:23:97:b1:
                    22:ca:64:75:3a:ec:69:80:ef:4a:84:06:d7:ba:f9:
                    57:62:b6:da:b5:29:34:3d:59:6f:2e:3f:fa:d6:ad:
                    eb:62:7b:a4:68:5f:fd:a3:d5:9c:b1:d2:7a:4b:4d:
                    db:67:5d:ea:c9:66:73:cf:77:07:86:4e:92:ac:e5:
                    b9:87:a3:14:a9:75:0b:57:fb:19:fb:41:65:b1:94:
                    47:fe:98:6b:75:9b:1e:e9:a3:a5:82:b9:32:92:b4:
                    9b:4b:67:61:70:7c:c4:ee:4e:ad:31:46:b8:b4:d4:
                    22:d5:1b:ba:70:12:83:aa:5e:a4:01:9d:db:bf:a1:
                    82:23:e4:a9:b4:cb:e1:3d:22:18:00:b1:39:27:3c:
                    0f:b6:71:c7:12:79:1b:c6:a5:b0:45:f3:f7:8a:5f:
                    bd:8c:fb:37:0e:ba:1a:4d:5e:75:f0:6f:ee:8f:c8:
                    2b:c5:86:82:96:5f:09:9c:d7:4e:ad:af:19:a5:e7:
                    61:a9:a9:4c:37:67:28:1d:f1:5a:ab:51:d7:e3:2c:
                    a6:89:66:8c:0f:b1:ba:65:f2:20:82:05:6e:db:46:
                    ca:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:F6:4A:4E:80:45:A6:B9:EB:A4:B6:85:BC:FD:86:3F:87:F6:F6:8F
            X509v3 Authority Key Identifier:
                keyid:E0:97:38:5E:91:6D:CD:17:5C:F3:8B:96:5F:C3:2A:FF:30:3C:E4:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Jc4XpFtzRdc84uWX8Mq_zA85CU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f751b6-5d86-47ee-8fd2-4c49704565c8/1/hvZKToBFprnrpLaFvP2GP4f29o8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f751b6-5d86-47ee-8fd2-4c49704565c8/1/4Jc4XpFtzRdc84uWX8Mq_zA85CU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  219488

    Signature Algorithm: sha256WithRSAEncryption
         03:4b:f2:b6:ad:5f:ae:38:33:2e:8c:cc:ba:a6:ad:64:fb:81:
         62:2a:19:54:fe:09:06:d2:ba:32:69:db:0f:0e:5b:06:dd:15:
         cb:49:32:02:a1:4e:a7:b5:b0:7f:b6:a8:b4:23:29:00:71:38:
         ff:2e:52:43:bc:66:e7:47:e4:ec:5a:0f:8d:48:1d:ae:50:b7:
         2e:6f:79:52:ef:22:a7:07:38:af:9a:8f:42:0c:f3:e9:3c:e3:
         a6:95:39:4f:27:70:10:2f:d4:d8:0a:7a:a3:71:4f:e9:76:64:
         62:98:32:b0:59:6d:b7:9a:e0:76:3e:8c:7d:91:e1:23:c6:68:
         62:b0:89:d9:d2:01:7a:f3:bc:fa:d9:51:22:da:1d:31:51:d9:
         40:0b:66:a3:e1:52:4d:c9:93:3e:01:ad:a7:1f:7c:2c:e8:25:
         6c:4c:87:f6:43:b8:2a:f1:70:78:a3:9a:9a:1e:af:78:94:45:
         5c:6a:bd:9a:81:21:9e:13:cd:b0:a2:e8:2f:93:bd:b5:9c:55:
         4a:00:7f:cf:0e:81:a0:20:8f:65:b3:94:28:e0:23:c8:e0:3e:
         6d:81:cb:c7:5a:79:d7:e5:3e:71:73:90:3a:53:59:11:1f:c3:
         5a:8a:b7:8d:94:8d:ca:8f:dd:0f:65:4b:9f:91:a0:b2:10:e4:
         03:01:32:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:39:48 2026 by rpki-client