Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/Gpn9n84tYhkYaDMGGKjziY1wajo.asa
File:                     Gpn9n84tYhkYaDMGGKjziY1wajo.asa (raw, json)
Hash identifier:          +9BgoCUtarT6JeveJ/0Adks2MenEvBj4hlB1aELk8Yw=
Subject key identifier:   1A:99:FD:9F:CE:2D:62:19:18:68:33:06:18:A8:F3:89:8D:70:6A:3A
Certificate issuer:       /CN=8777b5b36f66e13c4388c9934da507856515d073
Certificate serial:       01A0B02DCF8E6AC22A755CBB67FC7659E235
Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/Gpn9n84tYhkYaDMGGKjziY1wajo.asa
Signing time:             Thu 17 Sep 2026 16:23:07 +0000
ASPA not before:          Thu 17 Sep 2026 16:23:07 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            35219
Providers:                AS: 6696
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b0:2d:cf:8e:6a:c2:2a:75:5c:bb:67:fc:76:59:e2:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073
        Validity
            Not Before: Sep 17 16:23:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1a99fd9fce2d62191868330618a8f3898d706a3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:67:37:60:95:9b:29:72:8e:17:a4:e5:0e:cc:
                    fb:9c:83:c5:72:b7:22:ec:26:97:c7:08:33:90:d2:
                    e0:a9:e2:0c:41:aa:a7:4a:71:cd:a8:8a:9d:ce:8e:
                    69:57:a9:ca:69:56:c1:23:ae:9e:9c:bd:31:de:c7:
                    75:14:12:e5:1c:b7:df:f9:97:cf:a4:c9:02:ed:37:
                    77:ff:47:68:0c:43:dc:36:63:58:84:b7:4b:2f:47:
                    61:2d:a5:5b:39:64:ce:e6:fe:bc:f2:8e:1b:4c:be:
                    9c:23:4b:89:98:6c:68:4a:15:1d:f1:19:40:e6:d8:
                    b1:c6:0d:9b:f7:2c:c6:06:e4:23:dd:04:e9:49:46:
                    45:11:56:f2:71:93:e1:20:19:0b:07:68:4d:5d:b1:
                    1d:8e:10:f9:17:eb:14:3c:48:3c:5a:1a:5c:78:9b:
                    a3:5e:55:ed:7a:1f:c5:25:84:4c:ee:9c:4a:00:0d:
                    ca:9e:79:0e:ad:1f:1c:42:e4:4c:ae:2d:58:74:cc:
                    2a:17:8a:76:f8:38:32:08:66:f6:09:78:ed:c2:95:
                    6a:b0:b1:3a:d9:b5:76:b4:e0:60:55:2e:33:62:28:
                    53:69:7a:4d:fb:38:7e:e0:3f:f0:b8:99:b9:71:85:
                    26:13:ca:ac:57:e2:dc:d2:ce:7d:5e:ae:ae:42:a8:
                    3b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:99:FD:9F:CE:2D:62:19:18:68:33:06:18:A8:F3:89:8D:70:6A:3A
            X509v3 Authority Key Identifier:
                keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/Gpn9n84tYhkYaDMGGKjziY1wajo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  35219

    Signature Algorithm: sha256WithRSAEncryption
         6e:6b:8a:7c:bf:b2:85:ea:ae:d6:4d:4f:e0:55:ae:b4:ed:58:
         f1:e3:ab:52:c0:e7:cf:42:45:d0:a5:d6:a0:76:2b:07:21:ad:
         ca:17:21:40:11:01:fc:67:e5:31:72:88:0c:24:12:16:33:a2:
         98:1a:bc:d4:23:de:7a:40:7b:05:eb:2e:95:ae:e9:f8:11:ac:
         8f:36:bd:8e:cd:c2:e5:65:f3:2f:ec:62:ea:56:58:51:16:76:
         2a:56:54:c5:f5:c1:8e:92:4d:c2:c9:dc:c5:c3:24:5c:69:fc:
         0c:a8:1b:02:12:c8:b2:45:da:8b:d0:06:60:ec:80:7e:93:c0:
         f8:79:30:70:bb:86:d2:58:7b:fc:22:90:09:49:4c:f5:30:1f:
         eb:83:49:b0:26:08:3a:03:d1:6b:dd:83:07:85:61:67:f1:a6:
         61:11:68:b7:cb:b2:8f:93:91:43:b2:13:7c:ea:49:19:40:9a:
         24:ce:7f:96:50:5e:52:3f:38:b2:a8:3d:73:a3:7c:7f:05:db:
         1d:3b:e9:81:10:ee:40:de:a5:e5:6d:b3:49:2e:4d:59:51:38:
         7e:a9:7e:bc:20:78:7d:df:fd:b6:e8:e3:e1:47:3f:d0:16:43:
         b1:2e:9b:42:ae:96:14:df:66:58:c2:3c:dd:03:20:2f:c9:20:
         ff:fc:b3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:38:50 2026 by rpki-client