Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/u_hh95Vwkks4UP2ORaA383yO97Y.asa
File:                     u_hh95Vwkks4UP2ORaA383yO97Y.asa (raw, json)
Hash identifier:          +9FNPQckA3MOMNlYIUC/m8OKXVehox9XWsT4hl75IHk=
Subject key identifier:   BB:F8:61:F7:95:70:92:4B:38:50:FD:8E:45:A0:37:F3:7C:8E:F7:B6
Certificate issuer:       /CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
Certificate serial:       019D43604C33735D62921EE1A8DB2B53FFAE
Authority key identifier: AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/u_hh95Vwkks4UP2ORaA383yO97Y.asa
Signing time:             Tue 31 Mar 2026 10:11:17 +0000
ASPA not before:          Tue 31 Mar 2026 10:11:17 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            212675
Providers:                AS: 35168
                          AS: 198803
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:43:60:4c:33:73:5d:62:92:1e:e1:a8:db:2b:53:ff:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
        Validity
            Not Before: Mar 31 10:11:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bbf861f79570924b3850fd8e45a037f37c8ef7b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f7:53:74:d2:2b:06:77:76:ef:ab:8a:23:b1:
                    c3:75:ea:a3:cd:82:9c:53:c0:95:c8:b1:5a:4e:35:
                    67:b8:27:88:11:2b:b0:69:e6:f6:44:e9:b7:7d:11:
                    aa:91:ef:e2:26:32:87:a2:84:33:b2:9f:f0:bb:41:
                    f1:53:64:b7:d2:e1:10:72:94:9e:1a:f8:aa:4c:23:
                    7d:67:4e:89:b8:f1:55:b6:34:b7:12:3f:95:fe:c7:
                    c0:1a:fb:fe:59:ca:bd:53:58:97:c3:c2:a9:39:28:
                    ff:71:be:35:97:89:9f:63:93:d4:c4:bb:45:d9:70:
                    f5:76:ed:59:a9:95:6d:e3:d5:c8:25:74:9f:61:4c:
                    7f:f9:48:41:a2:77:19:cc:0c:3c:39:fb:40:8c:fe:
                    8e:a0:a3:df:6b:3b:b8:7a:6a:2b:f1:c1:36:0c:62:
                    72:2c:1f:31:71:dd:69:a1:cb:3f:f9:be:5b:a8:6d:
                    4a:9d:ed:a7:03:b8:ad:27:50:13:f4:45:cb:66:42:
                    45:59:3c:bd:a9:70:bb:8a:1e:5e:8a:2c:90:8e:1d:
                    ab:1e:f8:ae:47:db:13:97:26:09:03:7e:90:1d:51:
                    d9:10:ff:17:8b:c9:3f:1f:3d:8c:72:4f:95:46:97:
                    6c:df:9b:6f:ab:19:1f:60:ec:47:99:85:8b:1c:44:
                    ca:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:F8:61:F7:95:70:92:4B:38:50:FD:8E:45:A0:37:F3:7C:8E:F7:B6
            X509v3 Authority Key Identifier:
                keyid:AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/u_hh95Vwkks4UP2ORaA383yO97Y.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212675

    Signature Algorithm: sha256WithRSAEncryption
         c0:66:4a:c9:ce:d4:dc:75:45:a4:6a:68:c5:30:0d:1d:d6:9d:
         ee:8d:b6:cf:8c:5f:ad:ed:66:7e:ad:5c:2f:7e:0c:0e:2f:94:
         32:5f:7d:c8:7d:59:d4:ef:c4:7d:e6:82:3d:78:e3:66:7f:a0:
         5a:9a:00:37:7b:3a:3a:b7:3d:fb:b9:21:29:0d:9f:d3:ed:75:
         24:0d:bd:49:85:11:45:7c:39:78:87:a3:8f:e1:41:23:3c:f4:
         be:4e:aa:8a:af:90:c6:7a:0b:04:d7:8a:93:5c:19:33:64:26:
         74:38:b4:42:f1:ee:12:9a:e9:2e:59:1c:af:ac:13:70:af:a2:
         44:0b:39:51:ed:7f:50:e6:95:16:26:b5:8c:5e:52:51:3e:56:
         f7:4a:6f:d9:2c:fe:fb:3b:f7:a7:6e:3e:a9:41:c8:bc:eb:bd:
         80:12:00:a5:0c:55:ed:9c:04:72:ac:39:9d:30:be:8c:1e:f4:
         2d:21:20:64:d9:18:f8:57:0f:9f:a2:61:6f:24:4b:c1:0b:25:
         43:5a:58:24:11:f5:83:6d:e8:bc:eb:58:af:36:4a:71:b6:2e:
         f2:fe:62:62:fc:33:4b:79:13:e6:03:ee:aa:25:c6:f2:20:48:
         69:23:a9:4a:e7:6f:dc:eb:d8:f2:7b:1a:98:81:d1:8b:33:40:
         83:2f:8f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:14:45 2026 by rpki-client