Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/eNeZwm0J-NcFyB7pALukkp1LaoM.asa
File:                     eNeZwm0J-NcFyB7pALukkp1LaoM.asa (raw, json)
Hash identifier:          If1PtqbmCfQgSDFBdA250DM1mc/54UqPW57WuXBJ+OA=
Subject key identifier:   78:D7:99:C2:6D:09:F8:D7:05:C8:1E:E9:00:BB:A4:92:9D:4B:6A:83
Certificate issuer:       /CN=614256ed38fb1e96944926db4c66c4d088acfbd6
Certificate serial:       019D6BF03EC3A6AEA7FBA303E48EC1DC62CD
Authority key identifier: 61:42:56:ED:38:FB:1E:96:94:49:26:DB:4C:66:C4:D0:88:AC:FB:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/eNeZwm0J-NcFyB7pALukkp1LaoM.asa
Signing time:             Wed 08 Apr 2026 07:13:19 +0000
ASPA not before:          Wed 08 Apr 2026 07:13:19 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            207017
Providers:                AS: 3342
                          AS: 198473
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:6b:f0:3e:c3:a6:ae:a7:fb:a3:03:e4:8e:c1:dc:62:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614256ed38fb1e96944926db4c66c4d088acfbd6
        Validity
            Not Before: Apr  8 07:13:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=78d799c26d09f8d705c81ee900bba4929d4b6a83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:98:63:91:8a:50:d2:98:72:56:47:44:6c:10:
                    88:44:46:25:d8:1f:37:e9:cf:d6:df:9e:23:27:f3:
                    a0:5d:3a:6e:77:c2:e0:dc:43:8d:68:60:7d:40:1c:
                    2c:c6:dd:ba:57:45:c6:6e:77:11:08:bc:58:63:ef:
                    77:27:62:28:31:57:00:80:90:fd:fc:fe:c7:26:1a:
                    94:2f:3c:20:86:a6:a4:4b:34:52:cf:9e:6f:be:60:
                    e2:12:d9:68:e0:4c:22:14:55:de:32:63:d6:2f:70:
                    99:d0:a1:11:72:3c:4a:1c:34:ce:d8:fa:09:1b:c0:
                    c7:60:e3:c6:cc:7e:22:35:1e:40:30:71:fd:d7:35:
                    4c:90:f9:bc:56:d8:de:4b:0d:07:58:18:64:c6:ff:
                    66:69:1a:9f:25:24:6b:65:31:ea:d4:88:e5:00:36:
                    f5:ed:b8:90:8f:91:d9:fe:61:e6:8e:bf:b5:e9:c8:
                    50:e9:24:74:43:0c:75:d9:35:96:c9:c9:80:ef:f5:
                    b9:1f:ac:c0:4e:c5:ec:5c:54:88:da:8e:ab:f3:eb:
                    b2:6e:14:36:91:ee:1a:4c:13:f3:33:72:b2:b6:c3:
                    5e:d5:95:a4:6d:cb:69:b2:cb:cd:96:e2:f8:4e:38:
                    22:1d:87:d8:50:c3:f0:4d:ed:fc:df:98:27:3e:5c:
                    d2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D7:99:C2:6D:09:F8:D7:05:C8:1E:E9:00:BB:A4:92:9D:4B:6A:83
            X509v3 Authority Key Identifier:
                keyid:61:42:56:ED:38:FB:1E:96:94:49:26:DB:4C:66:C4:D0:88:AC:FB:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/eNeZwm0J-NcFyB7pALukkp1LaoM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207017

    Signature Algorithm: sha256WithRSAEncryption
         58:c0:75:6c:76:35:cf:6d:36:e6:cc:42:94:99:a2:7c:7b:87:
         f5:20:e4:de:e4:87:8e:e3:45:e1:81:1c:97:94:f9:3e:ef:13:
         e2:26:dd:fe:37:96:74:7a:f8:4f:0d:0c:51:bd:a4:81:23:54:
         8c:9a:4b:ca:d6:4e:1e:88:5a:95:41:ce:53:1b:19:e6:a4:1c:
         c6:68:7e:75:9a:a2:3c:9f:d9:9b:20:45:18:c3:c0:0a:d2:c9:
         1c:64:96:64:ca:62:43:bd:b7:d0:03:0b:18:0d:b9:0c:42:55:
         66:b7:5e:4f:e2:9d:a0:98:f4:a4:51:ec:10:fb:22:59:9e:96:
         72:d2:b9:7c:d7:a2:85:db:14:19:08:07:26:88:77:4b:fc:3c:
         0c:79:7e:49:80:46:f8:35:41:6b:af:11:01:22:a0:fb:83:6a:
         55:17:91:b6:19:62:84:9a:b3:76:52:46:55:ce:1d:14:9f:2a:
         b3:4e:ca:ed:24:b1:04:c8:34:5d:f2:7e:46:b6:44:22:c9:ef:
         94:d2:5c:c2:44:ff:cf:8f:9f:f6:89:77:fe:5f:da:8f:bc:50:
         fc:d6:c8:d4:e6:97:cd:fc:67:82:be:04:bb:8a:c2:c1:91:93:
         65:84:5d:d6:49:b8:47:cd:0e:dc:cc:96:9e:81:b8:16:46:ef:
         b3:33:50:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:27:24 2026 by rpki-client