Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/fQIWqImR4nVYlfvLLjiNXx70sEs.asa
File:                     fQIWqImR4nVYlfvLLjiNXx70sEs.asa (raw, json)
Hash identifier:          ThEh+n6WvESDD7EZWCsgtnIgGCyu7Kb1at4ATMHl6rI=
Subject key identifier:   7D:02:16:A8:89:91:E2:75:58:95:FB:CB:2E:38:8D:5F:1E:F4:B0:4B
Certificate issuer:       /CN=e0527776674f9baf0bc295ed260f16b0d83b676d
Certificate serial:       01A057088A63AB7D1D80E1FF0AC6EFDC17DA
Authority key identifier: E0:52:77:76:67:4F:9B:AF:0B:C2:95:ED:26:0F:16:B0:D8:3B:67:6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4FJ3dmdPm68LwpXtJg8WsNg7Z20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/fQIWqImR4nVYlfvLLjiNXx70sEs.asa
Signing time:             Mon 31 Aug 2026 08:56:12 +0000
ASPA not before:          Mon 31 Aug 2026 08:56:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            203024
Providers:                AS: 214145
                          AS: 219127
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/4FJ3dmdPm68LwpXtJg8WsNg7Z20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/4FJ3dmdPm68LwpXtJg8WsNg7Z20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4FJ3dmdPm68LwpXtJg8WsNg7Z20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:57:08:8a:63:ab:7d:1d:80:e1:ff:0a:c6:ef:dc:17:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0527776674f9baf0bc295ed260f16b0d83b676d
        Validity
            Not Before: Aug 31 08:56:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7d0216a88991e2755895fbcb2e388d5f1ef4b04b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:33:d5:54:b3:ae:95:47:9d:e1:a5:bd:9f:c6:
                    b1:58:12:f0:da:51:e2:ed:61:e2:e5:eb:bc:52:6f:
                    4e:c3:99:25:64:7c:f3:09:cd:92:27:a1:e7:2d:97:
                    ed:7a:28:d8:07:d3:83:87:45:cc:3a:f1:40:bf:73:
                    15:ec:89:16:24:b6:ee:bd:cd:56:be:ee:68:e3:66:
                    e4:ae:2b:0a:b6:5c:a9:6d:a6:99:58:21:4c:aa:f4:
                    be:07:b4:c5:c6:66:ce:49:32:ef:77:61:22:25:1d:
                    58:12:b8:24:e8:9f:bd:47:84:4e:7c:13:b0:23:24:
                    d2:39:aa:8c:b4:36:f3:d7:a8:09:8c:fc:8c:4f:6c:
                    0e:cf:40:1d:2f:c0:02:fe:dd:d3:6f:0c:f7:3f:10:
                    7c:4c:a1:1d:93:03:02:b2:2f:f5:1e:a7:23:47:c8:
                    0d:24:27:fb:39:1f:94:03:08:20:92:0e:b0:b7:35:
                    a1:f5:ab:3b:8e:88:00:86:ec:ea:2a:44:95:63:bb:
                    fc:d6:ed:bf:ba:57:87:4f:7c:f8:41:dd:f2:2d:e9:
                    62:52:ea:e5:6e:ec:b4:da:92:c0:c9:10:11:35:11:
                    5a:ae:81:f9:7c:8c:a2:f3:e9:a6:78:f4:9b:b9:16:
                    a5:69:2f:11:54:19:76:b4:70:25:37:2a:bf:1b:99:
                    82:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:02:16:A8:89:91:E2:75:58:95:FB:CB:2E:38:8D:5F:1E:F4:B0:4B
            X509v3 Authority Key Identifier:
                keyid:E0:52:77:76:67:4F:9B:AF:0B:C2:95:ED:26:0F:16:B0:D8:3B:67:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FJ3dmdPm68LwpXtJg8WsNg7Z20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/fQIWqImR4nVYlfvLLjiNXx70sEs.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/4FJ3dmdPm68LwpXtJg8WsNg7Z20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203024

    Signature Algorithm: sha256WithRSAEncryption
         11:bd:53:7f:75:0c:1a:e0:41:81:24:83:54:9b:3d:c9:09:91:
         d6:d2:09:62:32:0c:ba:5a:61:3c:f5:8b:fb:4a:81:4f:37:53:
         4a:73:87:70:cf:e5:36:e7:f8:2a:a9:e8:9a:0c:34:6f:97:e6:
         f0:25:b0:dd:a0:64:b1:77:bd:eb:0b:9e:0d:19:e4:1e:11:16:
         81:e8:26:a4:30:1b:9d:62:a7:a5:c7:e5:e7:85:44:25:7c:ea:
         6d:4c:32:94:ac:bf:8b:da:44:52:02:62:58:8f:29:2c:18:45:
         38:65:31:11:d6:19:f8:d5:ad:96:9e:2b:85:6c:21:d5:96:38:
         11:d1:36:61:da:c1:02:2c:cc:7f:76:19:4e:98:e2:ea:e2:e7:
         89:0f:a2:15:98:7a:c5:ba:44:a9:ac:dc:ea:a9:ee:de:09:1d:
         04:0c:fe:f5:dd:ca:b0:21:b1:ce:d6:b4:0c:6a:d6:58:70:65:
         d5:97:3d:7b:b6:4e:06:4e:c7:ba:96:62:dd:e9:c3:ac:37:c5:
         ac:12:3a:7c:6d:41:8b:2e:62:09:1f:21:c1:53:07:9c:ee:b1:
         1d:8b:fa:de:9a:3c:c9:c8:a9:b6:02:68:d2:f6:ea:e4:13:a6:
         ba:8f:86:5d:03:1c:6e:7e:f3:74:67:f8:81:17:f5:63:8b:4f:
         c2:02:1e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 08:38:14 2026 by rpki-client