Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/KOS3aVIFUwEqXL8iPCPmMbFs7kg.asa
File:                     KOS3aVIFUwEqXL8iPCPmMbFs7kg.asa (raw, json)
Hash identifier:          O1wlsiTMx5gKQxMkiFXIt8Xck5YM8bhhNHgnmlsquts=
Subject key identifier:   28:E4:B7:69:52:05:53:01:2A:5C:BF:22:3C:23:E6:31:B1:6C:EE:48
Certificate issuer:       /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial:       019D886A96D02A6456E0F2EC39D0B6587196
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/KOS3aVIFUwEqXL8iPCPmMbFs7kg.asa
Signing time:             Mon 13 Apr 2026 19:56:19 +0000
ASPA not before:          Mon 13 Apr 2026 19:56:19 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            1199
Providers:                AS: 1103
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 13:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:88:6a:96:d0:2a:64:56:e0:f2:ec:39:d0:b6:58:71:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
        Validity
            Not Before: Apr 13 19:56:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=28e4b769520553012a5cbf223c23e631b16cee48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:51:e3:07:ce:83:18:76:41:4f:06:47:98:6e:
                    e8:15:97:44:d6:d2:e5:06:9b:69:25:f7:02:b7:d7:
                    ab:d6:b1:11:1f:93:c5:f0:7c:65:bc:7a:d9:fd:eb:
                    bf:cc:d6:d4:67:cf:7b:01:96:9b:93:29:31:5f:f4:
                    9a:68:bc:db:43:7e:1f:71:db:71:6e:c6:c7:82:73:
                    53:08:33:77:e2:cb:ae:8a:12:fc:54:92:70:15:bb:
                    58:ab:ba:73:aa:c1:20:d8:8e:6a:5e:f5:78:d1:e6:
                    f0:86:d2:b9:44:56:f3:51:57:a3:90:64:4c:c1:3c:
                    3a:9c:fa:d9:29:2f:9d:55:48:cb:e1:35:6f:cf:0f:
                    5f:54:88:28:86:54:2e:47:a0:7d:76:81:17:22:fd:
                    f4:31:ae:4e:52:4d:ff:3c:76:a7:3a:af:44:e7:14:
                    64:12:cc:c0:d1:dd:8c:91:80:09:2a:c4:a4:9f:4b:
                    8c:66:f3:6b:8f:74:20:23:c7:76:12:8c:3d:8f:3f:
                    ea:e4:99:26:bc:e4:34:68:d0:50:46:95:d3:f6:fa:
                    3c:54:24:92:99:3e:60:cd:41:ea:c6:fa:e0:1b:c9:
                    d7:3d:e5:f8:72:94:61:e2:e4:aa:39:7f:ee:bd:5c:
                    b8:44:26:78:ec:01:71:37:17:7b:e8:96:ab:0d:51:
                    43:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E4:B7:69:52:05:53:01:2A:5C:BF:22:3C:23:E6:31:B1:6C:EE:48
            X509v3 Authority Key Identifier:
                keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/KOS3aVIFUwEqXL8iPCPmMbFs7kg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  1199

    Signature Algorithm: sha256WithRSAEncryption
         2f:22:ca:42:97:76:2f:82:5e:38:c3:a1:f4:d2:71:a2:1d:3a:
         36:fb:ea:c3:05:19:a2:b8:a0:19:51:34:0d:62:11:b5:a2:16:
         a1:30:4b:55:e7:34:cf:d6:7d:ba:e9:6a:80:94:0d:f1:88:7f:
         99:e4:6c:96:e8:9d:12:97:12:e0:d9:14:71:6f:cd:0c:30:24:
         52:ad:be:3a:1c:f4:97:8c:6f:a9:43:92:02:0b:d1:ab:76:ef:
         6f:56:fe:9b:b2:fc:d1:ce:69:10:db:ec:ad:0e:46:ef:c5:ba:
         fe:a0:d4:52:3f:e8:35:d8:a6:2f:93:f6:cf:a3:d7:bc:67:f3:
         c8:9a:17:2a:84:55:09:11:64:45:38:90:b0:96:06:72:18:f9:
         ec:b5:12:3a:0f:a6:cb:7f:25:87:3c:6b:6f:ec:fe:a9:e6:9a:
         31:96:19:fa:7b:a1:52:37:99:d7:80:ab:42:07:bd:73:30:ce:
         85:b0:da:8a:1a:13:91:8c:29:0f:84:b7:52:73:26:d0:a2:1c:
         d3:49:4d:e6:14:11:97:03:66:b8:04:79:b3:bc:a1:29:80:5f:
         56:00:23:10:46:6c:aa:f9:3f:5b:4a:17:84:f8:0b:5c:39:b9:
         8d:f1:1c:1a:a8:bb:46:42:54:7b:f3:d1:92:fd:ff:39:45:f5:
         16:0e:fb:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:16 2026 by rpki-client