Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/f5hSjXuegoqQZTKAeHGAZTXQXRE.asa
File:                     f5hSjXuegoqQZTKAeHGAZTXQXRE.asa (raw, json)
Hash identifier:          YGMhmV8NhjoGaMlAsTrNHjXtjuVZ2lqEixNHOIMRTNk=
Subject key identifier:   7F:98:52:8D:7B:9E:82:8A:90:65:32:80:78:71:80:65:35:D0:5D:11
Certificate issuer:       /CN=7e45a9a0353a33c6a4f93608f9d25f27c85948b7
Certificate serial:       019D864E6E0A2A6B5AB39CE5C80A779306D9
Authority key identifier: 7E:45:A9:A0:35:3A:33:C6:A4:F9:36:08:F9:D2:5F:27:C8:59:48:B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/f5hSjXuegoqQZTKAeHGAZTXQXRE.asa
Signing time:             Mon 13 Apr 2026 10:06:20 +0000
ASPA not before:          Mon 13 Apr 2026 10:06:20 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            57099
Providers:                AS: 174
                          AS: 6461
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:86:4e:6e:0a:2a:6b:5a:b3:9c:e5:c8:0a:77:93:06:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e45a9a0353a33c6a4f93608f9d25f27c85948b7
        Validity
            Not Before: Apr 13 10:06:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7f98528d7b9e828a906532807871806535d05d11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2b:53:9f:95:80:ac:43:b9:7d:f4:92:f5:06:
                    e7:8d:c7:3a:a4:59:52:16:2e:d2:fa:ce:66:03:60:
                    5f:5a:15:f6:8b:ea:05:ee:1d:4d:52:11:cb:d1:33:
                    c6:b8:5e:39:4e:14:42:60:d0:3e:fd:86:e9:28:bd:
                    e8:55:79:d1:c8:3c:bf:a0:da:9b:7e:5b:ef:78:e5:
                    04:85:71:ae:b4:cd:8d:d6:94:90:51:8d:e3:2b:0e:
                    8f:44:d6:0e:cf:c8:1f:c9:f6:8d:f8:32:de:91:1a:
                    49:09:22:fb:96:4c:70:7a:8e:de:99:04:66:42:4e:
                    3e:bb:7e:42:c5:65:c4:f3:53:4d:c5:ef:25:26:8d:
                    91:69:d9:f1:93:9d:e0:f9:81:c2:92:59:76:01:85:
                    e8:32:a1:ee:8b:e3:d1:4e:4a:8c:b1:ad:83:4d:56:
                    26:5b:0a:e7:73:cc:5c:a7:a6:26:a2:6c:0e:9d:0b:
                    07:5b:6c:c7:6a:f5:14:14:c2:c2:99:09:07:60:93:
                    1d:f6:c5:ad:d8:41:49:dc:e7:b1:d4:68:19:43:43:
                    36:0e:16:2d:ba:19:65:4c:3a:62:9b:cc:4d:30:31:
                    e8:bf:c3:9c:66:3f:fa:1e:03:54:37:15:ee:4b:36:
                    b7:cd:c2:2d:bc:d4:0c:6f:38:a7:de:db:18:f3:f7:
                    d7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:98:52:8D:7B:9E:82:8A:90:65:32:80:78:71:80:65:35:D0:5D:11
            X509v3 Authority Key Identifier:
                keyid:7E:45:A9:A0:35:3A:33:C6:A4:F9:36:08:F9:D2:5F:27:C8:59:48:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/f5hSjXuegoqQZTKAeHGAZTXQXRE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57099

    Signature Algorithm: sha256WithRSAEncryption
         ad:be:3d:ae:27:1d:51:7a:c8:d8:c1:e2:ec:b6:12:15:e2:df:
         f8:68:01:f5:46:f1:0f:8a:55:80:1a:cf:1d:17:04:b3:0f:7d:
         ca:e3:a4:02:9f:ff:6b:d0:85:49:49:01:1c:bf:c1:1a:0b:2a:
         48:12:c3:28:eb:49:63:4d:2a:e3:b9:d1:07:0b:52:18:0e:e9:
         86:f2:01:50:3c:ea:6e:25:22:42:73:f6:fd:a9:60:f3:98:ce:
         69:e2:2d:36:80:3c:fc:19:79:6d:39:cd:83:a9:35:4f:a8:1c:
         fb:48:7c:77:be:b3:f3:d6:86:16:42:bc:c9:4d:a8:ce:93:36:
         b0:8d:9d:d3:ac:7c:d1:aa:15:49:30:c7:bb:b6:31:21:fb:f8:
         0d:89:a8:6d:25:ba:5d:ac:96:55:9c:af:5d:3d:cd:6e:9a:c6:
         47:c8:11:3f:7b:c2:67:ce:48:e5:c7:74:e2:84:20:47:1b:07:
         f9:b9:ae:fb:2a:a6:19:f5:a5:44:24:0a:f2:df:77:ca:e3:a5:
         86:2f:3c:80:a9:74:5a:fe:cc:59:b0:46:29:ad:28:d5:fe:b7:
         ce:e5:06:7e:cd:c1:b4:cf:4e:95:dc:0a:42:68:d1:2c:bc:36:
         36:b8:89:d1:21:43:fe:89:9b:47:00:a1:b3:6c:7c:b9:df:8a:
         21:e1:f9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:53:46 2026 by rpki-client