Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/4e403d-9bf1-4f74-bd2a-98a66794cb5f/1/0JvgPvNBpx-tXwjL49T-oGlhRJE.asa
File:                     0JvgPvNBpx-tXwjL49T-oGlhRJE.asa (raw, json)
Hash identifier:          t6yvMIxcmcRuJu3oO8ltIl4K6uR5Cv+zFrp0bM60pxs=
Subject key identifier:   D0:9B:E0:3E:F3:41:A7:1F:AD:5F:08:CB:E3:D4:FE:A0:69:61:44:91
Certificate issuer:       /CN=6eedc2c864a7a3a127a81bcfb370c0a0743db1d3
Certificate serial:       01A023D6FFE8D6DC50BD29FA711F2B7E2F3C
Authority key identifier: 6E:ED:C2:C8:64:A7:A3:A1:27:A8:1B:CF:B3:70:C0:A0:74:3D:B1:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bu3CyGSno6EnqBvPs3DAoHQ9sdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/4e403d-9bf1-4f74-bd2a-98a66794cb5f/1/0JvgPvNBpx-tXwjL49T-oGlhRJE.asa
Signing time:             Fri 21 Aug 2026 10:21:27 +0000
ASPA not before:          Fri 21 Aug 2026 10:21:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            61236
Providers:                AS: 60132
                          AS: 197133
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/4e403d-9bf1-4f74-bd2a-98a66794cb5f/1/bu3CyGSno6EnqBvPs3DAoHQ9sdM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/4e403d-9bf1-4f74-bd2a-98a66794cb5f/1/bu3CyGSno6EnqBvPs3DAoHQ9sdM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bu3CyGSno6EnqBvPs3DAoHQ9sdM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:23:d6:ff:e8:d6:dc:50:bd:29:fa:71:1f:2b:7e:2f:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eedc2c864a7a3a127a81bcfb370c0a0743db1d3
        Validity
            Not Before: Aug 21 10:21:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d09be03ef341a71fad5f08cbe3d4fea069614491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a1:07:67:d8:e3:f5:78:8c:58:2e:89:38:04:
                    40:1c:a4:04:27:5d:e3:48:bd:a5:05:c5:08:41:74:
                    86:80:e5:3d:e8:5f:27:8e:54:16:0b:69:d9:23:68:
                    44:44:ec:ab:63:86:97:f5:bb:85:e8:0b:1b:09:33:
                    6c:15:f5:82:11:f9:49:32:71:17:ce:42:eb:2d:f3:
                    2e:86:58:da:b7:ef:41:73:a0:b2:42:0d:90:62:e0:
                    4b:be:16:82:a8:4e:2c:88:7c:1e:bc:b8:07:d7:db:
                    5f:5f:07:8d:c5:e0:44:30:70:7e:8d:9c:56:4a:68:
                    8e:5e:a8:c5:db:e5:77:24:07:d7:60:48:2c:be:70:
                    71:60:e1:97:d2:1e:ca:08:ee:eb:10:11:e9:17:79:
                    af:b1:66:f2:dc:d8:b8:60:a8:37:40:1d:f7:fa:19:
                    46:0b:fe:ac:9b:38:f6:17:36:90:01:9f:c5:87:08:
                    c8:b1:11:37:82:8b:3d:05:73:b6:19:3b:5c:2f:77:
                    33:00:4a:9a:2c:7b:7a:07:5a:d3:49:02:59:33:6b:
                    f9:b1:5d:1c:4c:f1:25:40:53:d6:45:f7:1d:f8:6e:
                    d0:17:51:c9:ab:8b:81:9f:50:f4:94:5d:de:c4:7a:
                    51:03:23:eb:1f:45:bf:22:46:1b:c2:da:e5:1b:24:
                    e4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:9B:E0:3E:F3:41:A7:1F:AD:5F:08:CB:E3:D4:FE:A0:69:61:44:91
            X509v3 Authority Key Identifier:
                keyid:6E:ED:C2:C8:64:A7:A3:A1:27:A8:1B:CF:B3:70:C0:A0:74:3D:B1:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bu3CyGSno6EnqBvPs3DAoHQ9sdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4e403d-9bf1-4f74-bd2a-98a66794cb5f/1/0JvgPvNBpx-tXwjL49T-oGlhRJE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4e403d-9bf1-4f74-bd2a-98a66794cb5f/1/bu3CyGSno6EnqBvPs3DAoHQ9sdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61236

    Signature Algorithm: sha256WithRSAEncryption
         36:79:89:22:2d:0e:a3:50:37:8b:2c:81:7c:b1:3c:4f:87:a9:
         ec:f2:15:0e:0c:cf:3a:a0:90:2d:13:f3:6f:b0:1f:cf:38:03:
         f8:20:27:58:85:8d:49:d8:f8:c4:3d:59:cf:bd:82:8d:49:a3:
         90:7f:24:2b:f7:99:7a:f8:41:ee:9d:67:de:5c:8f:02:ab:19:
         79:b2:41:e4:4f:2a:e5:b5:af:3f:9d:24:e4:73:cb:9b:f4:7a:
         a9:ac:71:8f:03:dc:f3:2d:83:b1:29:c4:a7:eb:66:57:b9:70:
         ee:11:41:d8:55:04:04:dc:5e:bc:2c:7a:0d:b2:4f:07:03:c7:
         9f:d2:03:22:70:b6:16:1a:c1:6a:d2:0f:b0:3d:e8:bf:1c:78:
         5c:67:b3:55:36:d5:5b:a9:2f:41:00:0a:44:93:78:a5:b9:f1:
         38:78:9c:8d:cd:42:7c:fc:35:ee:02:34:f5:55:37:02:bd:fb:
         48:78:48:ac:a5:e9:39:57:a2:92:79:fc:e3:2a:b2:50:2f:16:
         22:fe:e6:0d:78:21:26:b2:fb:cb:64:d1:94:98:0c:ae:00:26:
         e3:0a:8d:2c:8e:1d:3e:24:ec:8a:92:90:8f:18:e0:35:88:c1:
         2e:f9:05:1e:f9:78:85:8b:37:bc:51:ba:9e:54:f9:8d:34:27:
         99:3b:84:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:52:30 2026 by rpki-client