Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/awgqkgGX_ig7PjNu4vRdAOgtI2U.asa
File:                     awgqkgGX_ig7PjNu4vRdAOgtI2U.asa (raw, json)
Hash identifier:          b434gNNF/SxyiRmdCXUXk2aJNFNsH7QKL281MnwCsF8=
Subject key identifier:   6B:08:2A:92:01:97:FE:28:3B:3E:33:6E:E2:F4:5D:00:E8:2D:23:65
Certificate issuer:       /CN=0776334dc6f70f563e998f6080ad328aab7f8d0e
Certificate serial:       019C9BABB3657FB202C8029BADFC97355EAB
Authority key identifier: 07:76:33:4D:C6:F7:0F:56:3E:99:8F:60:80:AD:32:8A:AB:7F:8D:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/awgqkgGX_ig7PjNu4vRdAOgtI2U.asa
Signing time:             Thu 26 Feb 2026 20:37:26 +0000
ASPA not before:          Thu 26 Feb 2026 20:37:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            208755
Providers:                AS: 20473
                          AS: 52025
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 02:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:9b:ab:b3:65:7f:b2:02:c8:02:9b:ad:fc:97:35:5e:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0776334dc6f70f563e998f6080ad328aab7f8d0e
        Validity
            Not Before: Feb 26 20:37:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6b082a920197fe283b3e336ee2f45d00e82d2365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d3:7e:a0:c5:b4:9a:a8:58:cd:f9:48:3e:09:
                    a6:1d:7f:59:90:6b:40:d2:fa:e7:7d:35:92:25:ad:
                    7d:57:ba:6e:d0:71:b4:09:1d:44:cc:f4:10:ad:13:
                    f3:05:dd:79:6a:8e:75:dc:7b:5d:bb:45:da:67:47:
                    95:3b:b3:c7:21:00:b1:e3:77:c4:e8:7a:3e:ca:ad:
                    e2:df:f1:82:e5:50:90:04:6e:19:c0:54:d9:42:0d:
                    bb:8c:93:59:fb:98:55:59:b3:39:25:aa:7d:98:bb:
                    82:bf:84:ac:a0:cd:60:15:9f:72:b1:e5:6a:67:3a:
                    73:12:a8:e2:ec:2d:46:8d:3c:61:6a:e4:f5:87:55:
                    12:10:93:80:2f:10:1a:42:eb:69:d2:70:9f:9d:67:
                    22:68:2e:ba:e9:a2:f6:67:81:61:48:f2:70:cf:a5:
                    c5:e8:50:b0:e9:31:63:93:f0:cc:38:70:82:14:3e:
                    32:27:df:3a:32:e5:58:f5:54:ac:df:4b:18:1e:f8:
                    12:21:66:af:e2:8f:ac:b1:09:35:6e:fa:f4:12:fe:
                    c9:71:7e:11:7c:31:0a:7b:1e:76:7e:cd:2f:3d:18:
                    34:9e:ac:67:7f:2c:ad:02:84:68:37:10:39:04:d0:
                    ea:70:a6:38:9c:e3:a9:5b:a3:b3:4f:30:b2:09:76:
                    ce:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:08:2A:92:01:97:FE:28:3B:3E:33:6E:E2:F4:5D:00:E8:2D:23:65
            X509v3 Authority Key Identifier:
                keyid:07:76:33:4D:C6:F7:0F:56:3E:99:8F:60:80:AD:32:8A:AB:7F:8D:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/awgqkgGX_ig7PjNu4vRdAOgtI2U.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208755

    Signature Algorithm: sha256WithRSAEncryption
         8e:0b:11:62:be:48:21:e0:a7:d2:a5:fa:b3:c8:33:9d:fc:ff:
         34:1d:60:2c:ed:ab:89:24:d9:82:53:64:6c:1b:26:57:00:8e:
         bf:5a:67:46:4d:6e:73:3e:77:a2:cb:e5:e1:98:1e:79:b1:d4:
         80:ad:9e:bf:21:cd:c6:7d:46:89:8d:95:ed:af:51:03:e8:36:
         ea:c5:f0:e9:58:c3:70:e5:4f:d2:d8:14:8e:6a:a6:ea:1d:11:
         ce:12:52:47:2c:60:59:f1:cf:bb:a5:28:d4:65:d6:2b:62:3e:
         3a:94:64:5f:d8:f8:eb:2e:64:70:c9:f2:1b:2d:c7:59:34:c9:
         af:09:d0:31:07:14:44:7e:28:32:d8:94:58:73:43:ff:77:f4:
         b1:fc:6d:ff:e6:27:ae:5c:8b:e7:f7:87:c6:f9:1e:36:0b:1a:
         97:60:f5:49:5d:fe:09:89:c4:cd:91:cb:c4:b0:c5:5e:93:f7:
         92:96:ab:f7:1e:32:17:ad:a8:b0:58:30:b9:8c:96:b2:e8:7f:
         d0:84:f9:dc:ba:c1:f9:5f:8e:35:d0:dd:1a:0e:1d:f3:66:25:
         2f:fc:2f:10:54:ec:ad:bc:e2:08:e7:38:51:4d:2a:49:c8:af:
         18:86:d8:93:36:70:5c:c1:1a:df:04:61:38:69:55:1e:b9:82:
         fa:a7:2e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:57 2026 by rpki-client