Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/awyvWAqkdKKe1MSCW67ZrBnto1c.asa
File:                     awyvWAqkdKKe1MSCW67ZrBnto1c.asa (raw, json)
Hash identifier:          MhEQCgR2RzYNC5LUogd8NLM9UfmL+SUF0AkiuDL0GhY=
Subject key identifier:   6B:0C:AF:58:0A:A4:74:A2:9E:D4:C4:82:5B:AE:D9:AC:19:ED:A3:57
Certificate issuer:       /CN=2e3ee18d09748f46dc53ad94b729f31110acac34
Certificate serial:       019D4391BC3B70B03AEA67669E2C2EC1FBEF
Authority key identifier: 2E:3E:E1:8D:09:74:8F:46:DC:53:AD:94:B7:29:F3:11:10:AC:AC:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lj7hjQl0j0bcU62UtynzERCsrDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/awyvWAqkdKKe1MSCW67ZrBnto1c.asa
Signing time:             Tue 31 Mar 2026 11:05:17 +0000
ASPA not before:          Tue 31 Mar 2026 11:05:17 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            202673
Providers:                AS: 174
                          AS: 3223
                          AS: 9002
                          AS: 34872
                          AS: 53667
                          AS: 56630
                          AS: 60068
                          AS: 199524
                          AS: 207994
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lj7hjQl0j0bcU62UtynzERCsrDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:43:91:bc:3b:70:b0:3a:ea:67:66:9e:2c:2e:c1:fb:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e3ee18d09748f46dc53ad94b729f31110acac34
        Validity
            Not Before: Mar 31 11:05:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6b0caf580aa474a29ed4c4825baed9ac19eda357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:eb:f0:b5:08:13:9e:72:cd:a1:9b:a6:60:12:
                    b2:ae:45:c2:96:71:39:ba:8f:b9:33:be:83:d3:58:
                    b5:6d:c5:91:36:b7:8f:3c:b9:fc:a8:f5:d3:29:1f:
                    c7:f2:ce:6d:e2:53:03:6b:9c:df:35:90:16:21:ac:
                    3d:0f:65:55:76:61:68:ae:91:0a:23:cd:07:16:f6:
                    d4:0d:00:b2:a0:57:24:f1:8f:09:21:8a:3d:a1:56:
                    8a:07:37:73:86:03:08:74:94:e1:21:73:d4:b9:d9:
                    b8:87:7c:61:79:c6:0e:5d:78:8d:d8:00:49:7b:9d:
                    d1:43:2f:8c:06:57:20:eb:07:cf:d4:88:77:8e:b0:
                    e8:8b:5c:81:8c:6f:ca:9d:58:c5:50:14:3a:a9:63:
                    aa:09:dc:6d:13:fc:27:7b:68:c4:13:b4:dd:d8:b5:
                    06:e5:8b:22:39:74:c0:64:a8:74:72:ce:37:96:3d:
                    0e:6c:15:d2:19:8e:99:a5:a9:b9:c7:98:ce:ed:c0:
                    b4:7e:25:27:15:4c:9c:59:45:42:ca:a8:4e:26:0f:
                    e1:d4:d4:8c:72:40:e3:96:ad:2e:2b:f6:e7:0a:d8:
                    26:2b:62:28:bb:7c:d1:0d:e3:32:ca:1d:f5:bf:18:
                    34:0f:41:85:fc:bf:6b:72:e3:e8:7c:50:24:92:4e:
                    fa:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:0C:AF:58:0A:A4:74:A2:9E:D4:C4:82:5B:AE:D9:AC:19:ED:A3:57
            X509v3 Authority Key Identifier:
                keyid:2E:3E:E1:8D:09:74:8F:46:DC:53:AD:94:B7:29:F3:11:10:AC:AC:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lj7hjQl0j0bcU62UtynzERCsrDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/awyvWAqkdKKe1MSCW67ZrBnto1c.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202673

    Signature Algorithm: sha256WithRSAEncryption
         12:4c:ec:23:9a:a8:84:d7:a5:65:b7:85:30:c9:e5:ca:7b:4a:
         28:d7:9e:ad:fd:27:21:32:af:55:c0:a9:8b:51:f4:f2:a4:c3:
         de:67:fa:d2:5d:4f:36:68:37:b3:a0:09:4f:02:3a:ad:e2:34:
         be:7a:7a:c5:3a:13:fc:0c:54:90:6e:75:02:7d:dc:0c:d3:7a:
         5b:a0:7a:10:ae:7c:a1:6a:0f:fc:0c:c0:fb:ed:42:aa:15:a8:
         3d:51:e6:99:ce:1c:40:2d:6f:c8:c2:92:4d:c2:99:8c:8d:64:
         3d:89:f2:55:c1:6e:eb:33:c9:40:c4:37:e2:5a:f2:a9:e4:39:
         99:60:fc:4a:e5:a3:e4:bf:f2:11:0d:f4:65:7d:3a:26:fa:82:
         ea:e2:0f:1a:f3:45:98:27:da:b6:6e:3a:93:63:58:b0:a7:60:
         4e:4b:54:fa:b3:72:b9:c8:cb:e1:ca:e3:65:b6:85:f6:7b:db:
         1f:19:0c:53:a7:09:01:b2:7b:07:73:0d:d6:8f:f3:b1:fe:88:
         e8:ff:9e:fb:4e:70:2d:c7:e6:db:3d:2a:35:96:d2:84:8a:ec:
         0b:aa:90:87:f1:de:f5:3f:59:15:b5:cf:53:00:94:bd:dd:0a:
         6f:54:9f:85:23:ba:e6:82:b2:81:a6:2e:9e:d0:d8:7b:d8:2e:
         35:3b:7f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:12:18 2026 by rpki-client