Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/WMPpPZf121FGb5nB2wRyHO8v-RI.asa
File:                     WMPpPZf121FGb5nB2wRyHO8v-RI.asa (raw, json)
Hash identifier:          mKLFbSlwYIzmMfnFA89CJdrlniFC0Y+HVLJcXPAW800=
Subject key identifier:   58:C3:E9:3D:97:F5:DB:51:46:6F:99:C1:DB:04:72:1C:EF:2F:F9:12
Certificate issuer:       /CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Certificate serial:       019C68449CCDBE6A3FE4965473869C53160B
Authority key identifier: 99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/WMPpPZf121FGb5nB2wRyHO8v-RI.asa
Signing time:             Mon 16 Feb 2026 21:04:12 +0000
ASPA not before:          Mon 16 Feb 2026 21:04:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            15372
Providers:                AS: 174
                          AS: 3320
                          AS: 9136
                          AS: 13237
                          AS: 16374
                          AS: 21413
                          AS: 57328
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:68:44:9c:cd:be:6a:3f:e4:96:54:73:86:9c:53:16:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9984b9eb122237111c1f8ca57707ec7307291ee8
        Validity
            Not Before: Feb 16 21:04:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=58c3e93d97f5db51466f99c1db04721cef2ff912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:01:0c:91:fc:7e:a2:89:37:38:bf:53:c2:0c:
                    0d:a6:77:24:9d:be:61:9a:94:b1:eb:a1:59:12:5e:
                    1b:9b:16:f0:05:c4:93:36:19:31:62:af:ab:b9:9b:
                    e8:8c:41:ac:d6:fc:34:b2:ac:65:2c:c6:13:61:b2:
                    0d:e5:d6:28:b5:de:76:ae:98:80:cb:64:0d:6c:04:
                    31:31:f0:2b:9a:d1:b5:98:c0:d7:e6:ab:58:51:cb:
                    9d:40:3b:09:33:56:cc:5c:4b:ba:3d:bb:a8:cb:53:
                    35:71:ad:b7:2c:dc:25:28:46:1b:1e:14:71:ed:e4:
                    da:f9:b5:59:bf:91:1b:64:66:6c:69:de:69:63:d2:
                    b2:99:3a:34:06:31:92:55:f3:55:70:be:8a:c2:ec:
                    d9:c7:89:87:5d:47:76:a4:ad:59:34:2e:05:00:3c:
                    9e:05:b0:22:bf:f5:59:67:19:f8:35:c2:da:2a:b6:
                    13:bc:eb:9f:2a:12:dc:5f:53:08:28:58:ed:27:82:
                    ff:47:e6:76:35:bb:de:3a:a2:f8:c8:f8:4a:53:c2:
                    38:8b:6e:85:df:eb:ca:d2:e1:14:1e:28:62:a8:6b:
                    fe:f5:0c:9e:0b:23:aa:8d:09:d2:05:26:33:4a:e7:
                    6a:0d:30:c8:23:a7:c7:58:0e:a7:37:1e:b4:2c:c6:
                    14:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C3:E9:3D:97:F5:DB:51:46:6F:99:C1:DB:04:72:1C:EF:2F:F9:12
            X509v3 Authority Key Identifier:
                keyid:99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/WMPpPZf121FGb5nB2wRyHO8v-RI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  15372

    Signature Algorithm: sha256WithRSAEncryption
         99:67:34:90:26:f4:d2:cf:65:0b:39:27:39:b4:ee:7b:ba:ce:
         08:43:3c:8c:31:47:ab:9a:32:e2:a8:74:5d:fe:4a:83:10:f1:
         10:a4:15:31:3a:a5:d1:d4:d6:24:7f:38:f2:a6:11:22:f5:98:
         e0:34:91:a5:b3:30:cc:af:58:87:63:8e:e5:80:d0:01:45:61:
         9b:95:ef:76:0b:31:43:2e:7a:95:d4:99:4a:41:d6:11:25:b2:
         04:76:4f:bd:34:94:b5:65:4d:79:c1:91:6c:7c:4c:b2:90:3b:
         d7:31:70:59:38:55:66:b9:d1:c8:cc:5e:b0:ae:27:aa:a2:10:
         df:b7:da:66:06:88:6f:8e:35:4c:14:dc:a7:f5:71:16:36:d5:
         b4:ba:a3:a7:7b:50:0d:9f:eb:c3:a2:a7:70:76:cc:8c:eb:17:
         34:62:93:18:71:8d:f9:77:c8:b7:e2:67:2c:24:69:7c:6c:f6:
         fc:57:11:fb:3f:76:96:e9:b8:c1:52:d6:f9:a0:14:de:54:89:
         c2:b9:e0:d4:16:90:d8:5e:98:6a:1c:03:5b:89:dc:24:2b:a0:
         7a:13:cb:c0:20:0f:4c:9e:3a:63:2b:c0:16:cf:4e:71:1e:27:
         de:85:45:e5:c4:6d:59:8c:e1:d7:a1:0a:bb:a1:14:81:76:76:
         6c:5b:b2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:49 2026 by rpki-client