Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/aB79fGj4vXTZE5XL5eriNSFisHA.asa
File:                     aB79fGj4vXTZE5XL5eriNSFisHA.asa (raw, json)
Hash identifier:          1qM7sm32yNwlqaxmCx8pUKuLeMMUaDuzmS9PF1Xa8zE=
Subject key identifier:   68:1E:FD:7C:68:F8:BD:74:D9:13:95:CB:E5:EA:E2:35:21:62:B0:70
Certificate issuer:       /CN=e686965509a649c508ab8ab72f7257bef35f7930
Certificate serial:       019EB0713C4D58B787CF7FEA6920BD96D366
Authority key identifier: E6:86:96:55:09:A6:49:C5:08:AB:8A:B7:2F:72:57:BE:F3:5F:79:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5oaWVQmmScUIq4q3L3JXvvNfeTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/aB79fGj4vXTZE5XL5eriNSFisHA.asa
Signing time:             Wed 10 Jun 2026 07:31:11 +0000
ASPA not before:          Wed 10 Jun 2026 07:31:11 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            199673
Providers:                AS: 8932
                          AS: 49800
                          AS: 216058
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5oaWVQmmScUIq4q3L3JXvvNfeTA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b0:71:3c:4d:58:b7:87:cf:7f:ea:69:20:bd:96:d3:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e686965509a649c508ab8ab72f7257bef35f7930
        Validity
            Not Before: Jun 10 07:31:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=681efd7c68f8bd74d91395cbe5eae2352162b070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b4:08:7b:47:92:66:9d:1c:2a:60:0e:ce:52:
                    00:94:b8:cf:79:04:18:36:9b:00:f7:bc:ae:2e:39:
                    59:cd:ba:92:13:fe:5e:ff:62:e0:03:9e:93:e5:ee:
                    8f:fb:b5:c5:9c:d3:2e:ad:6e:6b:55:ff:9b:85:fe:
                    0b:27:6f:3a:71:3f:1c:5d:f4:e5:7b:dd:21:93:5f:
                    3b:c6:fc:55:2f:3a:f3:e4:38:1c:a2:bc:e0:e7:0b:
                    66:e0:7a:6c:18:09:16:69:79:6f:11:e9:4a:72:c2:
                    4b:07:cf:70:f4:a7:42:e9:a4:04:76:2d:e5:9e:04:
                    72:ce:38:0b:f1:e2:b1:9b:6b:f9:54:46:57:1e:5c:
                    f2:01:13:59:20:45:1f:4d:3c:65:36:e2:a4:fd:62:
                    b0:58:09:33:04:d6:c3:68:a8:43:9f:58:b4:c3:81:
                    b2:29:14:d1:37:a3:d9:39:06:44:ce:0d:c8:7a:94:
                    5f:f5:a7:fd:d5:32:34:7f:9b:32:89:82:64:24:c1:
                    8b:56:83:85:59:44:6f:e4:e0:fb:43:c8:f5:5b:f0:
                    0d:5e:17:58:1a:4a:49:bb:d2:21:4c:79:86:e4:0c:
                    01:e6:66:b9:cd:6e:0a:ce:3f:4a:3d:f9:ae:0b:3a:
                    e3:38:98:db:ba:03:15:c7:e9:d5:0b:ee:1e:f4:0c:
                    c3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:1E:FD:7C:68:F8:BD:74:D9:13:95:CB:E5:EA:E2:35:21:62:B0:70
            X509v3 Authority Key Identifier:
                keyid:E6:86:96:55:09:A6:49:C5:08:AB:8A:B7:2F:72:57:BE:F3:5F:79:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oaWVQmmScUIq4q3L3JXvvNfeTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/aB79fGj4vXTZE5XL5eriNSFisHA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199673

    Signature Algorithm: sha256WithRSAEncryption
         3b:b5:da:c5:12:9d:15:6b:e4:58:37:bb:e8:29:d8:3a:0d:da:
         83:1a:29:26:8b:4e:52:7e:ce:b2:cc:57:bf:0a:01:82:a7:6b:
         90:ab:f0:40:d9:76:1c:61:d7:58:44:16:f1:c0:c4:07:ff:5e:
         dd:c0:fe:25:65:86:4d:16:ab:47:83:19:b6:2a:10:56:66:79:
         e3:0c:2f:af:33:64:2f:d6:0e:d1:59:85:dc:00:ad:ec:fd:24:
         2e:4c:2b:be:2f:71:51:d2:ba:2e:11:0b:b1:65:34:82:01:e8:
         05:18:9c:73:75:db:13:dd:8f:53:e0:06:ed:ee:3b:b9:73:7f:
         9d:06:f6:e0:de:82:a8:cd:ff:10:9b:8b:72:50:ce:9b:78:39:
         0a:97:3e:82:c0:0b:b3:bc:35:dc:b0:38:8a:11:d0:a8:58:fc:
         02:37:0f:c5:77:53:51:b1:68:d3:b7:a9:fe:46:75:a6:8c:63:
         a5:59:4b:af:5c:33:e0:ed:4a:ec:6b:63:36:2d:9e:00:87:98:
         31:65:13:8d:d2:8b:9b:3c:aa:10:56:7d:f9:68:16:d0:5b:5c:
         e5:48:9a:0c:be:52:04:5a:3e:39:06:ec:17:ce:0b:89:15:f0:
         68:ef:45:a9:d5:a5:8b:af:40:b9:fd:49:8a:69:b7:10:42:82:
         ce:1e:9b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:07:53 2026 by rpki-client