Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/5sqjFXgO0w1QuB_d-Lsne6SbaQo.asa
File:                     5sqjFXgO0w1QuB_d-Lsne6SbaQo.asa (raw, json)
Hash identifier:          sUoa1O1fHzMIIDGTvBZh3jRmmmJXXfvDL83fAYtkpi4=
Subject key identifier:   E6:CA:A3:15:78:0E:D3:0D:50:B8:1F:DD:F8:BB:27:7B:A4:9B:69:0A
Certificate issuer:       /CN=6dea975fbb03fc25fb8044b2da38814c6af1cfde
Certificate serial:       019C8AAA5D90244EC09E79889C10A27C5ADF
Authority key identifier: 6D:EA:97:5F:BB:03:FC:25:FB:80:44:B2:DA:38:81:4C:6A:F1:CF:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/beqXX7sD_CX7gESy2jiBTGrxz94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/5sqjFXgO0w1QuB_d-Lsne6SbaQo.asa
Signing time:             Mon 23 Feb 2026 13:22:26 +0000
ASPA not before:          Mon 23 Feb 2026 13:22:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200728
Providers:                AS: 41051
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/beqXX7sD_CX7gESy2jiBTGrxz94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 04:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:8a:aa:5d:90:24:4e:c0:9e:79:88:9c:10:a2:7c:5a:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dea975fbb03fc25fb8044b2da38814c6af1cfde
        Validity
            Not Before: Feb 23 13:22:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e6caa315780ed30d50b81fddf8bb277ba49b690a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d8:e8:ba:9a:e9:f0:e6:cd:e1:b4:6d:f9:78:
                    85:9d:41:22:85:80:c1:8f:17:b9:27:aa:1d:f6:0e:
                    94:52:48:7b:f0:7c:76:0c:63:fc:9a:fa:06:f4:82:
                    95:38:fa:c9:be:0c:a4:98:e6:48:b4:a5:b4:45:61:
                    0f:5a:22:37:53:30:b2:d9:2a:96:07:21:e8:40:4c:
                    69:e1:af:88:6e:56:96:ae:39:e4:13:3e:f2:87:99:
                    f9:87:20:a4:07:c4:07:d4:e4:43:2c:7f:36:8a:97:
                    34:58:4f:4c:5d:b3:4e:9e:95:11:35:ba:f1:d6:34:
                    a2:02:b6:6a:a7:cc:ed:f4:47:8b:1f:a1:39:22:27:
                    72:6e:d5:09:de:ce:80:5c:2d:10:c9:8e:98:08:2d:
                    3b:17:f3:90:56:33:49:45:9a:86:d4:fc:ae:0d:5d:
                    13:7c:0c:17:6d:c3:57:0a:85:db:ef:5b:aa:64:5d:
                    67:4c:47:5f:3c:3b:20:f6:18:c4:cb:6f:fa:c5:10:
                    c6:51:db:10:9d:55:80:ba:e7:93:f2:bd:fb:ba:31:
                    9d:ce:6f:a9:47:62:f7:ca:08:7f:06:9b:46:a7:d1:
                    d6:31:26:64:3e:ff:52:4a:97:3a:bd:b9:f5:87:52:
                    f3:e5:a9:f8:86:c5:be:ac:5d:e2:c9:42:3e:38:9b:
                    32:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:CA:A3:15:78:0E:D3:0D:50:B8:1F:DD:F8:BB:27:7B:A4:9B:69:0A
            X509v3 Authority Key Identifier:
                keyid:6D:EA:97:5F:BB:03:FC:25:FB:80:44:B2:DA:38:81:4C:6A:F1:CF:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beqXX7sD_CX7gESy2jiBTGrxz94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/5sqjFXgO0w1QuB_d-Lsne6SbaQo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200728

    Signature Algorithm: sha256WithRSAEncryption
         12:75:d0:10:b6:ff:cc:38:97:cc:57:26:d3:33:a7:6a:ee:2a:
         0c:a6:7c:16:0a:e0:5d:e9:f1:fd:64:cd:29:f8:25:8d:37:46:
         2c:45:c0:43:97:1e:be:c8:cb:ee:aa:a9:7c:79:d1:07:7b:fb:
         c2:e8:5a:c0:0f:b2:c0:2c:e2:56:c5:69:c4:3a:6e:5a:83:05:
         8c:53:cb:59:65:a0:94:92:fc:76:bf:69:43:f1:4e:c7:a3:5c:
         90:d1:16:57:25:c7:b1:01:83:bd:29:35:fc:45:28:db:32:37:
         4a:48:8a:63:73:f6:2d:ef:68:72:ef:cf:d1:3a:1e:08:9f:1e:
         1b:28:c2:f2:61:e2:49:dd:be:75:0c:ff:cf:c5:99:04:12:ea:
         84:93:61:9b:4a:bb:be:07:b8:2a:0f:7b:93:d0:46:a3:9f:af:
         46:5a:de:63:05:be:01:c5:45:48:ab:8b:f0:ff:15:7c:3d:59:
         fe:dd:85:27:78:45:de:2c:89:37:93:5a:7f:e7:01:f2:ec:8f:
         e6:c5:9b:fd:c0:0f:58:d7:af:fc:a8:3e:32:29:b0:76:82:3f:
         58:b9:cb:6b:05:4e:4b:72:15:e9:c8:82:99:b0:d2:e1:65:eb:
         1d:07:82:b0:d9:f2:d2:71:f1:35:47:f4:2b:c7:3a:85:19:a1:
         c2:5a:5c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:49 2026 by rpki-client