Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/5j7ZwrONA84-aZ-e52NNl2zE11A.asa
File:                     5j7ZwrONA84-aZ-e52NNl2zE11A.asa (raw, json)
Hash identifier:          taqcj8XblYBWLIWzZLIKNdSuKwH606xS/rmkXvi9QXU=
Subject key identifier:   E6:3E:D9:C2:B3:8D:03:CE:3E:69:9F:9E:E7:63:4D:97:6C:C4:D7:50
Certificate issuer:       /CN=e15688497617e8f0a60690afab3ef94c11ab6d72
Certificate serial:       019D915C5341140937076D73041D6EBB7CAE
Authority key identifier: E1:56:88:49:76:17:E8:F0:A6:06:90:AF:AB:3E:F9:4C:11:AB:6D:72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/5j7ZwrONA84-aZ-e52NNl2zE11A.asa
Signing time:             Wed 15 Apr 2026 13:37:19 +0000
ASPA not before:          Wed 15 Apr 2026 13:37:19 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            208487
Providers:                AS: 8772
                          AS: 11967
                          AS: 24381
                          AS: 29632
                          AS: 35708
                          AS: 41051
                          AS: 152565
                          AS: 199829
                          AS: 207841
                          AS: 209533
                          AS: 209735
                          AS: 210464
                          AS: 211358
                          AS: 211509
                          AS: 212895
                          AS: 213449
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 10:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:91:5c:53:41:14:09:37:07:6d:73:04:1d:6e:bb:7c:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15688497617e8f0a60690afab3ef94c11ab6d72
        Validity
            Not Before: Apr 15 13:37:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e63ed9c2b38d03ce3e699f9ee7634d976cc4d750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d2:01:3d:5f:3c:72:9f:1b:65:e7:6d:b1:66:
                    e6:0e:37:ba:b9:43:38:56:33:06:98:ac:2e:24:ac:
                    90:ed:fa:b2:8b:a1:a1:f4:bd:43:55:ed:2c:f9:92:
                    24:fc:7b:4c:ab:a5:02:06:05:c5:d1:aa:ed:b6:50:
                    9b:07:54:ea:00:32:e7:8c:ca:4d:71:2b:6e:ee:28:
                    ea:c3:2e:d9:60:6d:5c:b2:bf:f7:f0:96:a6:8e:2e:
                    39:3b:2e:40:6a:1c:0b:57:c6:ad:d7:5d:15:6f:f3:
                    7b:f8:f6:a0:a5:ec:e7:b4:eb:8a:c9:24:46:5f:c0:
                    a0:7e:40:c2:ca:1e:0b:b5:8f:09:2b:39:81:49:1e:
                    2e:da:f6:e4:e9:72:78:c1:96:22:fb:4f:9f:0c:85:
                    3b:af:41:93:e0:ff:d7:34:cf:ad:a9:ec:7a:70:72:
                    31:75:82:3b:5c:9c:ac:a9:00:2d:cc:94:3f:df:0e:
                    07:29:df:fe:f0:1f:62:8b:9d:68:d6:42:15:c6:c5:
                    39:6b:92:1e:b7:1e:40:60:13:8e:20:5b:79:96:9d:
                    f8:e0:26:29:f4:ba:9c:bc:84:7e:5c:a0:d0:f7:d4:
                    f4:82:a5:da:7e:bb:c2:e5:c4:e0:ea:8e:1c:8c:3b:
                    3f:55:06:c3:5e:cb:6b:bd:89:19:1f:0b:3e:9f:91:
                    e3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:3E:D9:C2:B3:8D:03:CE:3E:69:9F:9E:E7:63:4D:97:6C:C4:D7:50
            X509v3 Authority Key Identifier:
                keyid:E1:56:88:49:76:17:E8:F0:A6:06:90:AF:AB:3E:F9:4C:11:AB:6D:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/5j7ZwrONA84-aZ-e52NNl2zE11A.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208487

    Signature Algorithm: sha256WithRSAEncryption
         1a:5e:1a:f1:ec:54:b3:7d:b5:c5:92:c0:14:06:90:f3:f7:53:
         90:c0:84:3c:14:7c:2a:22:58:44:23:e5:ac:45:10:91:48:71:
         e3:f5:7d:47:15:82:91:47:da:7e:4c:7b:fc:0a:bf:73:ac:f0:
         e4:ed:f9:02:22:07:4b:0d:6d:91:c3:5e:2d:18:b6:b3:3e:d6:
         e6:ca:16:73:80:fc:32:ec:57:c9:0d:95:72:26:74:cf:c4:1a:
         24:ab:f9:d5:a5:c9:83:35:4b:cd:66:2a:a4:b3:d5:67:aa:82:
         f5:bc:fa:7d:33:52:f8:b8:13:31:b8:ac:7d:d0:98:e4:09:ce:
         5e:7f:0e:c7:c8:99:43:51:05:a0:18:2a:0c:d6:1a:1a:a7:bc:
         ce:3d:6a:a0:2e:ca:71:db:1d:2a:c2:3b:6d:78:8f:dd:e8:43:
         c1:49:0a:82:4c:c6:cb:af:0a:11:63:30:a5:a4:cf:f3:6e:61:
         af:97:3d:a9:00:61:a2:df:9b:3e:12:09:d7:fe:09:93:c5:c6:
         7e:32:12:3e:ab:c5:dd:55:b9:22:37:57:a2:0c:c0:fa:42:20:
         bb:c5:b2:10:3a:25:fa:18:4a:c0:6e:e0:ba:ea:ba:6b:c1:00:
         c7:06:22:22:11:5a:14:b7:b4:e4:8a:c6:ba:38:ea:34:22:8a:
         c7:41:a4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:51:29 2026 by rpki-client