Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/D1ljQNpkE18grA9Cjl9zV5PU2GE.asa
File:                     D1ljQNpkE18grA9Cjl9zV5PU2GE.asa (raw, json)
Hash identifier:          OS9sXwUaA+1JocSwcXhLS2ungGRd4+pZ36fpmwGLwW8=
Subject key identifier:   0F:59:63:40:DA:64:13:5F:20:AC:0F:42:8E:5F:73:57:93:D4:D8:61
Certificate issuer:       /CN=7113848c0cf90468d07d699f714c7fd748a13269
Certificate serial:       019D96899A7E8D08B497BA750BFAE8FADF44
Authority key identifier: 71:13:84:8C:0C:F9:04:68:D0:7D:69:9F:71:4C:7F:D7:48:A1:32:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cROEjAz5BGjQfWmfcUx_10ihMmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/D1ljQNpkE18grA9Cjl9zV5PU2GE.asa
Signing time:             Thu 16 Apr 2026 13:44:53 +0000
ASPA not before:          Thu 16 Apr 2026 13:44:53 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            199674
Providers:                AS: 41051
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cROEjAz5BGjQfWmfcUx_10ihMmk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:47:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:96:89:9a:7e:8d:08:b4:97:ba:75:0b:fa:e8:fa:df:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7113848c0cf90468d07d699f714c7fd748a13269
        Validity
            Not Before: Apr 16 13:44:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0f596340da64135f20ac0f428e5f735793d4d861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:10:52:9a:25:d3:15:73:6d:57:74:fe:38:8f:
                    38:1a:e9:9f:57:5a:95:8d:bb:6f:a0:a9:4f:db:ef:
                    f5:5e:85:7e:60:84:b8:3f:f6:d1:93:6c:d7:f1:71:
                    6b:c9:c0:4f:f0:35:87:3b:b8:3a:ac:c5:4b:c5:fa:
                    b1:22:1a:ae:f2:e4:b6:11:5b:b8:4d:fb:fa:07:f4:
                    b4:3c:41:e1:93:c5:9b:9b:2d:c9:91:80:63:53:a6:
                    4c:85:bf:6d:0e:43:84:d7:81:46:92:d9:1c:9e:af:
                    e2:40:e5:a3:a1:51:ad:67:22:18:71:74:04:67:cb:
                    40:7d:5b:a6:2d:43:00:05:74:0e:f9:e4:30:a8:ac:
                    f7:ec:40:01:da:06:a0:cb:13:1a:a9:1c:bd:59:0c:
                    aa:65:59:36:c5:31:df:3c:6a:61:54:24:13:60:64:
                    b9:f9:3c:0f:97:21:cc:82:1b:06:53:97:de:d6:6c:
                    42:ae:3d:c8:60:21:2c:8e:83:85:b8:8b:42:e5:a9:
                    80:cb:24:79:b6:02:aa:69:f9:0b:43:7b:9a:04:35:
                    04:21:30:50:04:c0:f2:08:2b:7d:b5:66:16:88:a4:
                    bf:23:28:30:46:44:24:74:fc:d0:b4:fd:ad:ce:59:
                    1e:6e:80:f0:8d:9a:54:47:80:3e:c2:d1:87:11:53:
                    56:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:59:63:40:DA:64:13:5F:20:AC:0F:42:8E:5F:73:57:93:D4:D8:61
            X509v3 Authority Key Identifier:
                keyid:71:13:84:8C:0C:F9:04:68:D0:7D:69:9F:71:4C:7F:D7:48:A1:32:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cROEjAz5BGjQfWmfcUx_10ihMmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/D1ljQNpkE18grA9Cjl9zV5PU2GE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199674

    Signature Algorithm: sha256WithRSAEncryption
         10:7d:01:ff:6e:df:75:96:52:d6:eb:42:cc:41:28:f8:21:28:
         1d:02:6f:9f:54:f2:51:96:f5:d6:87:5b:c0:0c:2d:98:68:43:
         06:7b:ff:de:f8:f7:7e:f2:b2:3a:c5:f1:89:0c:ab:e2:dc:80:
         1b:c6:3d:60:a5:16:f8:a3:1a:3b:91:b7:de:de:f0:a9:d4:dc:
         92:c5:23:bc:0a:ad:3a:2c:61:96:be:8f:b5:f5:47:3f:cf:7c:
         e3:b5:2c:0f:29:1a:2d:d0:11:2e:d7:25:a2:17:a4:bd:af:46:
         c5:dc:9d:46:ae:f2:c7:5e:c4:40:73:91:12:04:30:1b:d2:21:
         40:ea:50:7b:51:76:61:3f:61:f1:74:df:fb:48:5d:1e:e7:dc:
         2d:c8:de:79:90:f0:b8:22:af:b8:e4:6f:2a:53:d5:b8:8a:5d:
         36:95:21:b4:be:69:78:19:a7:3e:b0:8d:fa:75:fc:a1:98:40:
         30:bf:52:ee:8f:63:d0:9a:54:3e:dd:e3:f0:46:d5:81:be:1f:
         d4:bb:c9:e3:82:52:49:37:d6:32:3e:c1:d9:ec:11:3a:a2:82:
         4d:e7:90:e1:c8:28:54:f5:a9:25:16:15:cd:99:0a:41:92:66:
         57:c1:2d:3f:0c:33:2b:c5:28:07:38:d3:44:02:d3:eb:25:9c:
         94:23:cb:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:24:49 2026 by rpki-client