Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/vmIjf2ea1b5ZbkV2jBRhH4g9FnA.asa
File:                     vmIjf2ea1b5ZbkV2jBRhH4g9FnA.asa (raw, json)
Hash identifier:          6b8Tpx55XUsVFkjanfbwXE/OmqC9SLGgWKXzepRWWCE=
Subject key identifier:   BE:62:23:7F:67:9A:D5:BE:59:6E:45:76:8C:14:61:1F:88:3D:16:70
Certificate issuer:       /CN=9d89e7c53e92479df81171ebaaf2360a037c3248
Certificate serial:       019FA384C1FEC1E43ABB22A3EF236F39946C
Authority key identifier: 9D:89:E7:C5:3E:92:47:9D:F8:11:71:EB:AA:F2:36:0A:03:7C:32:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/vmIjf2ea1b5ZbkV2jBRhH4g9FnA.asa
Signing time:             Mon 27 Jul 2026 12:20:14 +0000
ASPA not before:          Mon 27 Jul 2026 12:20:14 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            209923
Providers:                AS: 15704
                          AS: 212932
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 06:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:84:c1:fe:c1:e4:3a:bb:22:a3:ef:23:6f:39:94:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d89e7c53e92479df81171ebaaf2360a037c3248
        Validity
            Not Before: Jul 27 12:20:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=be62237f679ad5be596e45768c14611f883d1670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ea:c0:2b:77:40:77:c7:68:43:ce:c0:cd:20:
                    4d:18:f6:c5:34:8b:17:a5:9a:c6:30:2b:de:2c:b2:
                    21:84:2f:7f:86:e2:a9:4b:e6:68:e6:44:75:f6:b5:
                    5e:2f:91:5e:23:74:b6:6c:20:f3:bd:f0:90:6c:e1:
                    a7:11:b3:f4:7a:8a:1d:02:dc:f0:46:8b:1e:c4:11:
                    67:0d:58:48:af:fc:0a:13:75:20:63:0b:b9:3d:01:
                    02:fc:cf:5f:a7:41:c3:10:4c:27:d6:44:b8:d1:f5:
                    3e:e6:12:92:71:5d:af:32:99:f6:57:d1:bb:64:4d:
                    1c:c0:c2:b8:5d:b2:45:8d:cd:c7:70:81:79:4f:7a:
                    17:4d:23:18:d0:7b:34:5a:3e:a6:6c:b8:47:d4:3f:
                    e5:c5:ae:ab:83:9c:9d:74:e8:b7:7a:2c:16:5a:de:
                    04:2c:27:d4:db:63:7b:8c:7f:01:4c:87:80:53:71:
                    32:13:7b:03:fa:c0:0a:0b:74:cd:04:70:3f:7d:af:
                    5f:c6:3f:f5:8e:7e:73:e8:8f:15:31:3f:d8:92:bd:
                    2f:23:c9:87:b7:9c:a1:b1:49:22:7e:b8:e3:10:c4:
                    f7:0c:06:0c:23:bf:84:17:cb:3f:72:42:3c:93:04:
                    28:ce:6a:40:68:e2:cb:9d:3c:66:6b:30:a4:63:f9:
                    ed:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:62:23:7F:67:9A:D5:BE:59:6E:45:76:8C:14:61:1F:88:3D:16:70
            X509v3 Authority Key Identifier:
                keyid:9D:89:E7:C5:3E:92:47:9D:F8:11:71:EB:AA:F2:36:0A:03:7C:32:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/vmIjf2ea1b5ZbkV2jBRhH4g9FnA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209923

    Signature Algorithm: sha256WithRSAEncryption
         11:a9:c0:d6:f7:5b:17:05:d3:c2:ac:5d:56:43:51:60:10:5a:
         3a:6a:8e:8c:aa:ff:36:ac:00:6e:95:dc:57:a4:37:4c:52:67:
         45:1d:f5:01:b7:55:f4:c9:36:9d:4e:b6:f9:fd:75:aa:90:71:
         d5:6a:21:6a:44:1c:82:81:4e:b7:5e:84:75:e8:5c:09:ca:0d:
         dc:6a:7e:ce:a3:7f:fb:62:e9:e5:22:45:eb:68:3b:c9:bf:f3:
         41:b9:08:c1:1f:06:75:e2:4e:34:40:a8:c3:3f:28:fb:2d:ff:
         9e:2b:14:b9:e7:6c:95:33:5f:59:1d:51:91:fd:ff:ba:04:1a:
         d0:ae:30:3b:f9:6c:f0:d6:11:c3:a4:32:87:ae:4a:24:b7:ed:
         88:18:03:25:c9:13:e8:3b:29:4f:7e:fc:7c:9d:1e:f7:84:b1:
         c8:28:44:f2:5e:f3:76:b2:e8:ce:e4:31:9a:d8:cf:ec:69:96:
         1d:5f:dc:7a:21:8b:74:ce:d8:51:61:99:2d:c5:4d:3a:43:a7:
         67:cd:02:6f:df:db:ab:e4:13:c5:da:43:d6:97:cc:9b:69:21:
         ef:e0:87:fa:d6:0b:93:73:8b:e9:5a:ea:85:4d:ff:38:20:45:
         81:f9:1a:9c:70:60:f5:01:28:af:12:4d:f4:b9:1a:f5:87:5e:
         25:93:ee:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 12:31:32 2026 by rpki-client