Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/2419ba-a448-44f3-b9bd-694cd3692cf1/1/WCTYRCFOlr87MoOdATbN93VxM8A.asa
File:                     WCTYRCFOlr87MoOdATbN93VxM8A.asa (raw, json)
Hash identifier:          oJiljaGAapRqXV0sUoSMPPT00Bd8/YnpUtl+9sr+1NE=
Subject key identifier:   58:24:D8:44:21:4E:96:BF:3B:32:83:9D:01:36:CD:F7:75:71:33:C0
Certificate issuer:       /CN=f68ac2c0cf46014230a22607ccacdcd410b6047e
Certificate serial:       019EB69272EB18A19316D14A8D9F255ED675
Authority key identifier: F6:8A:C2:C0:CF:46:01:42:30:A2:26:07:CC:AC:DC:D4:10:B6:04:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9orCwM9GAUIwoiYHzKzc1BC2BH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/2419ba-a448-44f3-b9bd-694cd3692cf1/1/WCTYRCFOlr87MoOdATbN93VxM8A.asa
Signing time:             Thu 11 Jun 2026 12:05:11 +0000
ASPA not before:          Thu 11 Jun 2026 12:05:11 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            210132
Providers:                AS: 11967
                          AS: 20473
                          AS: 41051
                          AS: 51839
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/2419ba-a448-44f3-b9bd-694cd3692cf1/1/9orCwM9GAUIwoiYHzKzc1BC2BH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/2419ba-a448-44f3-b9bd-694cd3692cf1/1/9orCwM9GAUIwoiYHzKzc1BC2BH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9orCwM9GAUIwoiYHzKzc1BC2BH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:92:72:eb:18:a1:93:16:d1:4a:8d:9f:25:5e:d6:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f68ac2c0cf46014230a22607ccacdcd410b6047e
        Validity
            Not Before: Jun 11 12:05:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5824d844214e96bf3b32839d0136cdf7757133c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:59:7e:ae:8b:fa:25:01:ef:72:a6:73:66:83:
                    c3:e2:cd:40:e0:75:12:ce:c8:29:be:cd:c7:e2:c1:
                    64:b8:6e:a7:e0:75:2f:64:27:68:74:3c:08:4c:d5:
                    b7:7f:65:80:c8:b4:8b:e9:f8:d4:3e:f6:d3:57:52:
                    75:45:39:a3:7d:b8:e9:75:5a:84:50:e8:17:cf:66:
                    fe:b3:fc:dc:22:72:f6:e7:aa:1a:26:b3:96:fd:09:
                    72:3b:ad:92:23:94:76:0d:2d:6f:88:3c:b8:cc:61:
                    85:71:cb:71:da:65:44:63:28:b4:af:e9:3f:45:7b:
                    ea:b7:5b:b6:69:19:74:d9:18:d1:54:14:1a:8e:06:
                    92:9c:15:37:82:40:c8:9e:db:f0:9d:f4:c0:be:99:
                    1c:0c:36:cb:bd:11:d9:7e:7f:1b:92:e9:52:26:d2:
                    38:a6:a8:ea:51:26:fd:7e:6b:17:15:1b:f7:c9:20:
                    6f:8d:b0:ec:79:d9:7b:8a:93:53:4c:1d:15:38:ef:
                    d4:b7:7e:52:c7:07:8a:40:9a:44:8f:c4:52:cd:56:
                    82:f8:5a:df:95:3b:83:3b:52:6f:d8:64:db:fb:e5:
                    94:7e:7d:d8:33:9a:cd:75:72:cc:9a:57:0c:ab:55:
                    2d:96:12:15:17:9c:4b:7d:fd:9f:19:aa:d6:06:c4:
                    eb:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:24:D8:44:21:4E:96:BF:3B:32:83:9D:01:36:CD:F7:75:71:33:C0
            X509v3 Authority Key Identifier:
                keyid:F6:8A:C2:C0:CF:46:01:42:30:A2:26:07:CC:AC:DC:D4:10:B6:04:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9orCwM9GAUIwoiYHzKzc1BC2BH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2419ba-a448-44f3-b9bd-694cd3692cf1/1/WCTYRCFOlr87MoOdATbN93VxM8A.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2419ba-a448-44f3-b9bd-694cd3692cf1/1/9orCwM9GAUIwoiYHzKzc1BC2BH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210132

    Signature Algorithm: sha256WithRSAEncryption
         46:a4:42:1b:97:49:b2:45:e5:6b:4f:d0:e4:bd:ad:92:25:71:
         7d:8d:99:0b:16:5d:27:48:ef:17:2e:2c:6d:82:31:40:b1:7f:
         8a:5d:81:f3:3b:d1:e6:12:11:6b:5a:78:6d:c1:a5:f3:ff:e3:
         86:39:3c:35:6a:55:66:91:7c:84:ef:f3:78:5f:a3:48:df:f7:
         50:ed:ff:0e:3d:a3:24:c2:f9:b9:2d:83:8e:45:1e:54:0c:6f:
         9f:91:f7:f3:f3:ca:71:51:77:7a:0a:98:ec:76:b0:c6:21:0b:
         46:50:b5:30:a6:86:97:79:bc:27:34:90:8e:a5:3a:5a:3c:8f:
         7d:a3:2a:7b:57:37:4f:15:db:a6:77:d9:08:48:df:6c:40:22:
         23:4b:c5:2d:d2:27:98:e2:79:b7:70:f3:d5:fc:d0:97:cb:5a:
         74:b8:e5:8f:0c:cf:8c:3b:19:1f:dc:bd:b6:cb:f5:4f:f7:44:
         fc:ab:0d:57:ce:c5:4c:5c:4a:82:15:db:9d:14:d7:a0:56:69:
         64:1b:5e:4f:da:91:f0:65:f1:9d:65:4b:ef:a8:24:d3:18:ce:
         00:13:75:cc:25:97:60:23:67:50:ac:65:eb:76:a2:aa:f9:f2:
         f9:e6:28:41:8b:94:f9:1c:64:cc:c8:67:d4:8c:32:aa:1f:5d:
         4d:c5:2d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:35:35 2026 by rpki-client