Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/csD7baynGSjXzQdNEWD9wfKjL8Q.asa
File:                     csD7baynGSjXzQdNEWD9wfKjL8Q.asa (raw, json)
Hash identifier:          vZ5R9yygf5r5lNLY5z+sK8ZyEPTkQJyvjMUOWkhCz/g=
Subject key identifier:   72:C0:FB:6D:AC:A7:19:28:D7:CD:07:4D:11:60:FD:C1:F2:A3:2F:C4
Certificate issuer:       /CN=8eb44b078522da9c31062b9c7ef7f51727e73e5e
Certificate serial:       01A037A9C3B99D47908E48B3789AC42EBBE0
Authority key identifier: 8E:B4:4B:07:85:22:DA:9C:31:06:2B:9C:7E:F7:F5:17:27:E7:3E:5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/csD7baynGSjXzQdNEWD9wfKjL8Q.asa
Signing time:             Tue 25 Aug 2026 06:44:27 +0000
ASPA not before:          Tue 25 Aug 2026 06:44:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            207995
Providers:                AS: 3257
                          AS: 3356
                          AS: 6939
                          AS: 8676
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 12:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:37:a9:c3:b9:9d:47:90:8e:48:b3:78:9a:c4:2e:bb:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eb44b078522da9c31062b9c7ef7f51727e73e5e
        Validity
            Not Before: Aug 25 06:44:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=72c0fb6daca71928d7cd074d1160fdc1f2a32fc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c0:79:25:9f:0a:73:de:b9:59:63:be:a4:25:
                    7f:3c:1a:78:b0:af:21:4b:91:fc:4e:f8:2c:dc:ab:
                    18:ae:68:62:2d:f4:3e:1c:d9:bb:17:1c:60:67:39:
                    73:34:19:51:0a:91:5f:cc:5e:a0:0a:4e:c1:f7:e2:
                    da:eb:48:84:2e:b5:cd:80:ca:aa:b5:ff:33:b2:fd:
                    e6:07:8a:02:68:5d:9a:38:99:f9:69:09:92:2a:89:
                    ee:49:23:b5:0b:77:c3:7a:10:dd:80:01:62:31:5b:
                    1a:a3:77:b6:0c:f2:5b:bb:1a:0e:4d:03:7e:c1:c8:
                    e4:f2:63:6c:1d:47:17:eb:15:6e:92:54:fd:18:8f:
                    4b:83:dc:be:02:f2:a2:43:c2:f7:82:16:eb:8c:81:
                    06:b3:36:7a:0a:0b:77:ca:96:1c:02:4d:4e:2e:9e:
                    d3:64:2f:b1:e3:21:88:4f:fc:be:8f:f7:79:77:47:
                    65:b8:4f:c7:cc:32:d3:c2:71:56:4f:ab:76:2f:5f:
                    43:78:bb:4a:24:dd:92:70:2c:40:2a:c0:a3:7c:33:
                    93:6f:00:2f:03:d4:2c:ba:be:2d:2b:4f:55:a6:96:
                    f7:7d:e6:57:89:c3:e9:9d:be:06:e3:5e:de:c6:13:
                    9b:ec:e2:41:8d:2e:a3:30:7f:2b:a2:b4:d5:c6:c2:
                    18:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:C0:FB:6D:AC:A7:19:28:D7:CD:07:4D:11:60:FD:C1:F2:A3:2F:C4
            X509v3 Authority Key Identifier:
                keyid:8E:B4:4B:07:85:22:DA:9C:31:06:2B:9C:7E:F7:F5:17:27:E7:3E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/csD7baynGSjXzQdNEWD9wfKjL8Q.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207995

    Signature Algorithm: sha256WithRSAEncryption
         37:ec:6d:27:00:85:8b:1e:5a:d4:1c:6a:2f:68:5a:f8:9c:fb:
         2d:38:1c:e1:44:05:14:18:19:94:14:42:db:be:27:dd:93:2e:
         ef:ab:f2:ff:87:8c:fc:59:c7:24:d2:77:02:09:2e:44:15:71:
         4a:fa:4a:6e:e1:40:4b:dd:b6:62:37:d2:7f:53:de:fc:b9:ec:
         61:0c:de:bb:17:19:39:6c:a2:95:96:66:e5:d0:6c:86:8e:f0:
         f7:b5:9c:6d:b7:1e:53:92:80:5d:a8:53:2b:c9:b7:9a:86:34:
         27:cb:01:40:21:95:1c:ac:df:79:ad:04:f3:0c:6b:8b:9d:02:
         0f:ce:87:d4:b0:73:23:4c:50:c3:4a:3f:49:01:cc:b5:74:8b:
         bf:85:77:76:65:08:f3:eb:01:3f:7c:67:87:f4:85:a0:ad:b1:
         05:19:94:f7:15:02:84:72:82:48:1e:f8:e9:86:de:fa:27:59:
         21:df:5d:62:e5:82:bd:d2:f6:6e:22:7f:be:d5:f6:40:f2:29:
         a3:28:20:bd:9c:4b:b2:6d:bb:65:f1:14:5d:ca:a0:94:2e:fc:
         b8:ff:45:5a:0f:66:c2:db:fa:d9:25:52:56:57:b3:5a:4c:61:
         48:eb:bb:17:58:5d:94:a8:e1:cf:7e:83:b1:4d:bc:f4:c1:b7:
         79:8c:a3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:11:29 2026 by rpki-client