Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/o7-RAIW0qz5Kr00CRae8lOUgnTg.asa
File:                     o7-RAIW0qz5Kr00CRae8lOUgnTg.asa (raw, json)
Hash identifier:          aKEDd3s4pDPeG0MsT8iNxUzsJpmVYGd2pZsAP/dhwr4=
Subject key identifier:   A3:BF:91:00:85:B4:AB:3E:4A:AF:4D:02:45:A7:BC:94:E5:20:9D:38
Certificate issuer:       /CN=363cb5c6a05cdd481f304c0cd95e86d722d96d3c
Certificate serial:       019D8C961863BB96177D2DCB0EA9B7DB63BC
Authority key identifier: 36:3C:B5:C6:A0:5C:DD:48:1F:30:4C:0C:D9:5E:86:D7:22:D9:6D:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/o7-RAIW0qz5Kr00CRae8lOUgnTg.asa
Signing time:             Tue 14 Apr 2026 15:22:20 +0000
ASPA not before:          Tue 14 Apr 2026 15:22:20 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            213683
Providers:                AS: 174
                          AS: 6939
                          AS: 24940
                          AS: 57961
                          AS: 58137
                          AS: 198890
                          AS: 205923
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:8c:96:18:63:bb:96:17:7d:2d:cb:0e:a9:b7:db:63:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=363cb5c6a05cdd481f304c0cd95e86d722d96d3c
        Validity
            Not Before: Apr 14 15:22:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a3bf910085b4ab3e4aaf4d0245a7bc94e5209d38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6c:78:8c:80:9f:3b:2d:fd:f4:d2:17:7a:86:
                    6f:98:2a:bb:09:82:ea:cb:6a:87:e9:c3:ff:a2:11:
                    07:19:af:cf:7a:e5:3f:ad:c6:36:63:6f:26:51:c0:
                    12:7c:97:c6:9e:1f:58:01:17:c6:81:eb:4d:df:8a:
                    a1:f5:ac:ea:46:b4:2f:14:1c:18:1c:61:bd:77:0f:
                    71:02:bb:3d:06:c1:14:e2:a8:7c:86:8f:db:ef:e6:
                    fa:22:47:c5:7f:29:b3:6b:b1:80:2e:26:1d:71:60:
                    0b:d7:6a:c2:6b:a9:74:6a:9f:14:69:fa:cf:6d:f1:
                    ea:f6:5d:fa:bc:13:a6:14:8e:8b:8e:06:c9:f8:b2:
                    65:e5:2d:0c:f4:ec:24:49:a6:a5:69:d8:07:c7:d0:
                    19:d0:30:bf:fc:3d:24:90:db:60:d0:52:4b:87:3c:
                    b3:74:db:62:d5:29:24:85:4e:b8:14:c4:b8:4c:38:
                    02:76:fb:c4:7c:88:49:3b:94:b8:d0:02:ce:8e:49:
                    6c:69:04:56:df:22:0f:0e:4c:41:c4:ea:2a:13:93:
                    ae:e3:43:81:e9:7d:69:26:03:47:68:23:d1:10:ee:
                    c5:e2:10:f2:03:2f:8c:44:3c:bc:db:7e:0e:62:cd:
                    88:70:55:a8:b4:6d:5e:9c:9b:96:4f:16:57:9d:d4:
                    2a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:BF:91:00:85:B4:AB:3E:4A:AF:4D:02:45:A7:BC:94:E5:20:9D:38
            X509v3 Authority Key Identifier:
                keyid:36:3C:B5:C6:A0:5C:DD:48:1F:30:4C:0C:D9:5E:86:D7:22:D9:6D:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/o7-RAIW0qz5Kr00CRae8lOUgnTg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213683

    Signature Algorithm: sha256WithRSAEncryption
         03:17:44:d0:95:1a:85:69:39:11:17:c4:94:f8:bd:fa:10:b1:
         41:ca:f8:c4:0b:3d:3e:3e:90:61:21:7a:c7:98:32:e3:1a:99:
         c7:98:68:4a:30:85:1c:63:fe:90:75:c5:c4:e0:b6:30:86:c7:
         6f:f6:2e:59:e5:3b:7c:b9:d2:24:46:c3:7f:66:99:5a:19:fa:
         1c:7c:58:e6:c5:fc:2a:0b:e5:eb:f7:de:c2:a4:98:f2:3f:40:
         dd:63:c8:e0:e6:ae:9f:5b:7d:e1:5b:8b:92:93:20:aa:58:11:
         3c:59:ba:44:ed:14:3a:fa:53:01:eb:12:2a:74:aa:fd:74:ab:
         6a:95:86:2c:64:b8:3a:0d:f0:b4:97:aa:fb:38:d2:4b:6a:2e:
         6d:1b:1f:0d:cc:dd:80:e1:33:b9:16:da:4a:1b:22:a5:36:89:
         96:5c:0e:b8:5a:6a:4b:53:d7:62:0e:f5:d2:0b:ea:6b:2e:d8:
         c3:77:9b:20:03:af:c7:53:c1:05:7d:b1:3c:50:d5:e2:8a:8d:
         4b:36:51:b6:29:68:52:53:6c:21:02:0d:a5:da:12:15:dd:89:
         80:b0:36:62:39:fb:bb:9f:ed:0d:f9:8b:65:ef:12:d5:45:2d:
         d0:f2:07:49:82:2f:da:85:9b:ca:09:bf:ea:91:4f:dd:b0:fa:
         4c:a5:6d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:07:11 2026 by rpki-client