Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/f3170b-c924-4dfa-b26b-67996a743f26/1/Mj54dL67avXK-rqdlIUztKEbhS8.asa
File:                     Mj54dL67avXK-rqdlIUztKEbhS8.asa (raw, json)
Hash identifier:          49Y5BI2hUItsEcq12WL4wX/NF/Z32P1oLAcnmVykc0s=
Subject key identifier:   32:3E:78:74:BE:BB:6A:F5:CA:FA:BA:9D:94:85:33:B4:A1:1B:85:2F
Certificate issuer:       /CN=7072134a2255580a91f06936cf82fb0023f06c42
Certificate serial:       019EAC6E03B70CE883F3E7D6F11A8F4F1D99
Authority key identifier: 70:72:13:4A:22:55:58:0A:91:F0:69:36:CF:82:FB:00:23:F0:6C:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cHITSiJVWAqR8Gk2z4L7ACPwbEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/f3170b-c924-4dfa-b26b-67996a743f26/1/Mj54dL67avXK-rqdlIUztKEbhS8.asa
Signing time:             Tue 09 Jun 2026 12:49:11 +0000
ASPA not before:          Tue 09 Jun 2026 12:49:11 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            197974
Providers:                AS: 49581
                          AS: 137409
                          AS: 213520
                          AS: 215730
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/f3170b-c924-4dfa-b26b-67996a743f26/1/cHITSiJVWAqR8Gk2z4L7ACPwbEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/f3170b-c924-4dfa-b26b-67996a743f26/1/cHITSiJVWAqR8Gk2z4L7ACPwbEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cHITSiJVWAqR8Gk2z4L7ACPwbEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 15:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ac:6e:03:b7:0c:e8:83:f3:e7:d6:f1:1a:8f:4f:1d:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7072134a2255580a91f06936cf82fb0023f06c42
        Validity
            Not Before: Jun  9 12:49:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=323e7874bebb6af5cafaba9d948533b4a11b852f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:df:f9:1f:b9:2c:92:92:0d:4d:6a:9b:19:6f:
                    0d:6b:20:b9:da:a6:01:3a:82:01:a9:7e:da:79:70:
                    eb:b5:f7:4b:4c:c0:1f:48:42:61:f7:f8:65:00:cf:
                    0e:1d:42:b9:77:b7:72:6d:5b:c7:14:18:9d:00:6d:
                    92:91:91:a3:06:a5:4f:d2:9a:9f:64:e7:6c:98:cc:
                    38:0c:a3:94:3c:cd:a7:3d:7a:64:18:dd:08:11:80:
                    8b:2d:85:3c:9c:b3:fb:93:7c:1d:09:79:b0:33:8a:
                    91:a4:56:e6:2b:7b:fe:3d:cc:d3:7a:c6:39:07:22:
                    9a:c9:ba:e0:91:c0:49:d9:19:63:64:0e:a2:a2:69:
                    4b:aa:40:99:ce:4e:c1:c5:39:c8:55:62:03:89:72:
                    72:79:f9:22:64:e9:fb:29:6b:fb:a8:de:54:dc:56:
                    c4:29:3b:d5:cb:2d:b5:df:12:77:8f:36:ad:bd:67:
                    30:7e:da:6c:b4:96:32:0d:51:eb:69:a9:dc:24:12:
                    23:45:1f:b2:b0:f6:1d:b2:13:19:8c:eb:04:2e:97:
                    22:30:16:cd:5c:8d:86:39:6b:75:34:45:36:ea:e7:
                    6e:f5:e5:35:3f:10:55:02:ad:2f:ac:d3:c9:93:db:
                    1b:d3:03:c4:e5:4f:6d:e2:e1:de:76:1a:f2:a1:df:
                    02:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:3E:78:74:BE:BB:6A:F5:CA:FA:BA:9D:94:85:33:B4:A1:1B:85:2F
            X509v3 Authority Key Identifier:
                keyid:70:72:13:4A:22:55:58:0A:91:F0:69:36:CF:82:FB:00:23:F0:6C:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHITSiJVWAqR8Gk2z4L7ACPwbEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/f3170b-c924-4dfa-b26b-67996a743f26/1/Mj54dL67avXK-rqdlIUztKEbhS8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/f3170b-c924-4dfa-b26b-67996a743f26/1/cHITSiJVWAqR8Gk2z4L7ACPwbEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197974

    Signature Algorithm: sha256WithRSAEncryption
         39:1a:66:bf:b7:ab:23:86:3d:d3:75:38:13:cc:75:e8:a3:c1:
         db:70:09:ec:b3:33:b7:9f:7a:83:a5:a8:dc:79:41:8c:fb:16:
         2e:be:2c:7c:6e:a2:04:29:e0:b9:ff:0b:74:1b:be:2f:c9:7c:
         8b:7c:64:de:d5:90:8e:4e:0d:d9:df:46:6b:0c:e2:83:4c:69:
         36:55:69:1d:73:d1:32:24:38:c9:47:9d:2c:ab:fa:06:9e:c3:
         f1:68:bf:cd:32:68:70:14:c4:73:e0:ae:bc:fd:42:75:dd:a3:
         9e:82:0d:22:86:19:35:e2:e1:81:06:0b:c2:9d:17:9f:54:eb:
         0f:d4:34:27:64:e7:96:3f:e3:28:04:ae:3e:68:55:d0:23:d1:
         43:57:6d:f8:5a:ce:84:82:2a:98:23:a7:c5:f4:ef:f6:57:f4:
         b4:e0:4a:d1:48:28:34:64:87:a3:8f:46:0c:6a:77:d3:35:78:
         92:d4:9f:84:00:8e:36:28:cd:e8:cd:ab:6a:f8:bf:9f:af:b2:
         fa:16:4a:8c:33:67:0b:5c:67:2b:8f:86:ce:70:f9:48:de:6f:
         70:0f:80:7b:3c:4c:02:4b:66:a3:23:03:57:31:0d:1b:05:2e:
         04:7a:f5:76:9b:60:30:af:6f:fe:c8:f5:9e:e3:b7:79:df:50:
         bb:a7:e4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:02:35 2026 by rpki-client