Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a83f65-11d2-4cf5-8087-474e4f48d6b8/1/Y-AWJphLNKFh4pnsBo9MlHRQ-q0.asa
File:                     Y-AWJphLNKFh4pnsBo9MlHRQ-q0.asa (raw, json)
Hash identifier:          zVPxZSJIJVwUzL4Svj1Rr8AateMMQ5BGi2y27f83hI4=
Subject key identifier:   63:E0:16:26:98:4B:34:A1:61:E2:99:EC:06:8F:4C:94:74:50:FA:AD
Certificate issuer:       /CN=aabc9f64a48eea5521e1e9faa810798f089546b6
Certificate serial:       019F9452ADC080F3C839EFECF7E8EE7B4ABE
Authority key identifier: AA:BC:9F:64:A4:8E:EA:55:21:E1:E9:FA:A8:10:79:8F:08:95:46:B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qryfZKSO6lUh4en6qBB5jwiVRrY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/a83f65-11d2-4cf5-8087-474e4f48d6b8/1/Y-AWJphLNKFh4pnsBo9MlHRQ-q0.asa
Signing time:             Fri 24 Jul 2026 13:31:14 +0000
ASPA not before:          Fri 24 Jul 2026 13:31:14 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            25330
Providers:                AS: 3252
                          AS: 12963
                          AS: 29534
                          AS: 31445
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/a83f65-11d2-4cf5-8087-474e4f48d6b8/1/qryfZKSO6lUh4en6qBB5jwiVRrY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/a83f65-11d2-4cf5-8087-474e4f48d6b8/1/qryfZKSO6lUh4en6qBB5jwiVRrY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qryfZKSO6lUh4en6qBB5jwiVRrY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:52:ad:c0:80:f3:c8:39:ef:ec:f7:e8:ee:7b:4a:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aabc9f64a48eea5521e1e9faa810798f089546b6
        Validity
            Not Before: Jul 24 13:31:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=63e01626984b34a161e299ec068f4c947450faad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3a:b8:35:0f:cd:8c:db:1a:7a:0d:d4:7f:4b:
                    10:d8:fd:34:85:f4:ad:9b:9e:0d:33:57:bd:cc:52:
                    98:30:68:d5:99:3a:44:04:1e:35:d7:af:7c:22:ad:
                    82:74:80:ad:f5:20:5e:8e:17:c8:f7:7a:87:88:63:
                    69:7a:b4:45:fe:64:8d:f5:e8:eb:20:9a:f4:c5:4e:
                    bc:d4:b6:2b:fe:81:74:c7:95:e0:c2:2a:76:e1:85:
                    be:2c:c3:64:53:cf:a6:39:4d:9b:0b:71:1e:c1:4a:
                    b9:1f:5a:21:82:4c:79:84:e8:c5:8b:50:ee:ec:47:
                    0f:52:f5:18:2f:e5:86:b6:1c:8f:83:98:70:1e:ab:
                    f5:b9:51:96:26:f6:11:d4:97:29:cd:b0:90:1f:96:
                    00:bf:ec:00:55:05:91:ef:a5:31:42:fb:91:2f:81:
                    19:7f:03:02:ff:b3:84:7b:78:d1:de:f5:16:4b:36:
                    a2:37:53:78:fe:b3:e8:67:7a:c7:60:03:a4:20:75:
                    4a:86:a2:5c:c4:ad:25:0a:82:67:0e:26:b5:91:74:
                    40:88:49:81:db:dd:b3:6d:cc:6d:a0:66:6e:30:a2:
                    b8:47:c0:6f:a4:00:e1:2d:74:3b:b6:ad:41:8a:60:
                    34:ca:5c:86:2a:53:42:c7:e4:3e:9d:1f:9b:88:19:
                    a5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E0:16:26:98:4B:34:A1:61:E2:99:EC:06:8F:4C:94:74:50:FA:AD
            X509v3 Authority Key Identifier:
                keyid:AA:BC:9F:64:A4:8E:EA:55:21:E1:E9:FA:A8:10:79:8F:08:95:46:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qryfZKSO6lUh4en6qBB5jwiVRrY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a83f65-11d2-4cf5-8087-474e4f48d6b8/1/Y-AWJphLNKFh4pnsBo9MlHRQ-q0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a83f65-11d2-4cf5-8087-474e4f48d6b8/1/qryfZKSO6lUh4en6qBB5jwiVRrY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  25330

    Signature Algorithm: sha256WithRSAEncryption
         7d:cb:b4:86:91:54:68:cd:3a:a9:ee:ac:f9:4b:b9:36:52:a4:
         98:7d:ee:11:ad:b9:6f:7d:d7:80:cd:0f:4a:b1:6b:c2:eb:bc:
         12:37:74:20:62:11:22:55:78:26:2c:54:78:86:af:19:3a:b7:
         75:5c:ff:77:5a:ad:78:f8:e8:be:4b:25:86:fc:0c:1a:c8:dc:
         cf:d8:b0:12:16:31:6c:9a:01:0c:86:1d:49:28:78:08:1a:63:
         5b:ac:54:65:fd:4c:08:11:9c:74:72:e2:33:64:ad:ba:68:6e:
         c9:e3:d5:62:48:cd:7f:2f:eb:97:63:26:38:6f:38:7b:2c:6b:
         e9:32:c7:2f:52:da:34:67:1e:7b:13:e8:cb:8a:2f:55:56:6b:
         d6:50:33:4e:84:ce:00:2e:e1:eb:56:b5:3a:df:4c:2b:de:1d:
         85:cc:c6:2e:84:63:e9:2f:2f:46:c7:84:7c:8a:aa:bf:af:e9:
         7b:a9:94:bc:37:f9:45:01:e4:cc:92:ff:25:d0:9f:7e:fb:3d:
         52:fc:e7:c1:fe:6a:7a:1d:33:e2:47:84:f5:53:64:92:fc:db:
         aa:73:b2:79:0b:18:c4:05:dc:60:89:0f:55:4a:f1:10:c0:b4:
         44:83:2e:62:4d:29:62:83:cb:0e:22:42:70:3b:ec:b1:79:53:
         51:66:7b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:39:58 2026 by rpki-client