Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0e05d6-c651-4c13-a3d7-d0b6979477e0/1/_aahlkyboV8i3HTyR4FJOxLSMv4.asa
File:                     _aahlkyboV8i3HTyR4FJOxLSMv4.asa (raw, json)
Hash identifier:          dD7N2xKq7irXsIrhG/fQS/8UXa6cF4atm0nL0eK5Z0s=
Subject key identifier:   FD:A6:A1:96:4C:9B:A1:5F:22:DC:74:F2:47:81:49:3B:12:D2:32:FE
Certificate issuer:       /CN=dfb2f98d5d9330c2825fc8a4bea58e5a2b4abef3
Certificate serial:       019FA5C58A70C75957056FDDCEB58B63E0E8
Authority key identifier: DF:B2:F9:8D:5D:93:30:C2:82:5F:C8:A4:BE:A5:8E:5A:2B:4A:BE:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/37L5jV2TMMKCX8ikvqWOWitKvvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/0e05d6-c651-4c13-a3d7-d0b6979477e0/1/_aahlkyboV8i3HTyR4FJOxLSMv4.asa
Signing time:             Mon 27 Jul 2026 22:50:14 +0000
ASPA not before:          Mon 27 Jul 2026 22:50:14 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            219533
Providers:                AS: 6517
                          AS: 6939
                          AS: 11967
                          AS: 205941
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/0e05d6-c651-4c13-a3d7-d0b6979477e0/1/37L5jV2TMMKCX8ikvqWOWitKvvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/0e05d6-c651-4c13-a3d7-d0b6979477e0/1/37L5jV2TMMKCX8ikvqWOWitKvvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/37L5jV2TMMKCX8ikvqWOWitKvvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a5:c5:8a:70:c7:59:57:05:6f:dd:ce:b5:8b:63:e0:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfb2f98d5d9330c2825fc8a4bea58e5a2b4abef3
        Validity
            Not Before: Jul 27 22:50:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fda6a1964c9ba15f22dc74f24781493b12d232fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c7:fd:42:b7:fb:f3:e2:7e:67:e1:57:d3:82:
                    e3:26:8a:41:d8:0e:b9:0d:6d:7a:60:8d:f2:03:a8:
                    3b:53:34:64:c9:9e:be:74:04:57:52:36:74:40:25:
                    58:c5:b9:72:36:f4:65:2e:94:99:94:89:30:9c:5d:
                    44:99:c0:f8:f7:45:56:ad:62:89:a4:d6:b3:ef:ea:
                    60:6e:df:11:45:eb:f2:6a:b9:ab:c1:04:e7:33:a6:
                    d5:38:77:0a:1c:8f:8b:8f:27:ca:19:7a:fd:24:7e:
                    b1:b0:64:58:51:5a:6a:1c:80:45:b3:43:1d:f4:78:
                    07:06:b4:a2:d9:04:f3:2f:ea:74:5b:bd:be:e0:9f:
                    ef:9c:7c:f2:2e:dd:1d:f9:86:8e:a8:01:d4:5b:14:
                    01:66:be:0f:92:d7:6c:43:31:f8:51:be:97:54:e4:
                    d7:eb:e3:23:2a:d8:2a:76:6f:c4:38:f0:c2:ac:4f:
                    98:d3:f8:b0:27:7b:a6:65:de:61:65:db:8f:22:82:
                    30:22:82:fd:a0:79:ad:b0:b7:8e:90:05:c7:e0:ae:
                    73:18:87:dd:e9:92:d2:4c:60:63:a1:f2:5f:9d:be:
                    a8:36:32:82:17:90:dc:04:be:f7:e7:8e:a9:b2:77:
                    28:51:17:b6:55:b9:59:60:b7:f9:5e:8c:49:b7:77:
                    2e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:A6:A1:96:4C:9B:A1:5F:22:DC:74:F2:47:81:49:3B:12:D2:32:FE
            X509v3 Authority Key Identifier:
                keyid:DF:B2:F9:8D:5D:93:30:C2:82:5F:C8:A4:BE:A5:8E:5A:2B:4A:BE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37L5jV2TMMKCX8ikvqWOWitKvvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0e05d6-c651-4c13-a3d7-d0b6979477e0/1/_aahlkyboV8i3HTyR4FJOxLSMv4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0e05d6-c651-4c13-a3d7-d0b6979477e0/1/37L5jV2TMMKCX8ikvqWOWitKvvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  219533

    Signature Algorithm: sha256WithRSAEncryption
         57:c5:06:33:dc:f8:d3:64:23:0d:36:6a:43:86:df:8b:f6:49:
         cb:b9:12:70:7c:ea:98:6f:94:45:1e:d0:5a:da:e6:d0:c3:38:
         bb:34:28:04:72:0a:41:c3:b7:01:76:9c:2c:ec:6f:18:5e:3f:
         1a:fd:f6:16:b7:fb:c8:63:9d:ba:f2:6a:0d:44:3d:97:7d:11:
         23:49:c0:7f:44:88:45:df:09:89:19:81:bf:76:42:82:7f:dd:
         e8:09:a0:90:7a:83:6b:65:65:50:66:64:73:40:35:5b:96:f6:
         b2:ba:67:c7:9b:b8:a8:3f:83:2b:64:09:e5:bf:c0:f5:b3:86:
         da:10:49:3c:62:64:9b:b3:90:d2:e4:e0:77:18:49:28:27:a5:
         b7:be:c3:0d:fc:91:38:5b:1d:26:d5:41:7a:b6:5b:48:29:ca:
         4d:44:03:4a:18:ba:d7:1d:86:9f:de:3c:b9:fc:b9:11:d7:d7:
         ff:0e:0c:3b:f2:e0:8d:26:00:cd:1b:43:fd:a4:40:bf:0a:09:
         4d:83:7f:ec:9e:dd:43:2b:72:63:b4:10:05:82:8b:48:e2:7c:
         4f:b1:34:82:00:7c:70:3e:74:5d:5d:95:c4:f3:2b:9b:2b:f9:
         d0:09:42:b3:12:17:4a:b3:0e:f7:d3:aa:49:54:38:f7:c4:b8:
         64:40:a3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 12:30:36 2026 by rpki-client