Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/d46cb2-fc5a-4bf0-becf-4b0fec4249fa/1/4_YvHXelMZkNsU_b8j34pz2dBiE.asa
File:                     4_YvHXelMZkNsU_b8j34pz2dBiE.asa (raw, json)
Hash identifier:          RHm7Vyln/X1dkpMWWDdkXt24IWhx+m5/04JLUBy8A48=
Subject key identifier:   E3:F6:2F:1D:77:A5:31:99:0D:B1:4F:DB:F2:3D:F8:A7:3D:9D:06:21
Certificate issuer:       /CN=a724097b7ef9f513b39e12767d5edcd3e0623a83
Certificate serial:       01A01EE965FFB5A342DAF1CB8AACBB301FB6
Authority key identifier: A7:24:09:7B:7E:F9:F5:13:B3:9E:12:76:7D:5E:DC:D3:E0:62:3A:83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pyQJe3759ROznhJ2fV7c0-BiOoM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/d46cb2-fc5a-4bf0-becf-4b0fec4249fa/1/4_YvHXelMZkNsU_b8j34pz2dBiE.asa
Signing time:             Thu 20 Aug 2026 11:23:27 +0000
ASPA not before:          Thu 20 Aug 2026 11:23:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            219074
Providers:                AS: 24940
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/d46cb2-fc5a-4bf0-becf-4b0fec4249fa/1/pyQJe3759ROznhJ2fV7c0-BiOoM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/d46cb2-fc5a-4bf0-becf-4b0fec4249fa/1/pyQJe3759ROznhJ2fV7c0-BiOoM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pyQJe3759ROznhJ2fV7c0-BiOoM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:1e:e9:65:ff:b5:a3:42:da:f1:cb:8a:ac:bb:30:1f:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a724097b7ef9f513b39e12767d5edcd3e0623a83
        Validity
            Not Before: Aug 20 11:23:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e3f62f1d77a531990db14fdbf23df8a73d9d0621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7b:f7:f3:f9:e8:11:01:84:c6:66:30:c8:c2:
                    81:f7:76:cd:6e:8d:4b:42:3b:b5:de:36:98:93:43:
                    16:d1:db:70:56:cf:f8:1e:b3:67:2f:85:3c:9f:69:
                    71:f4:51:10:11:89:03:6c:51:5a:73:2a:71:54:89:
                    22:7f:fb:0e:60:29:5d:a0:18:c0:73:0e:d5:5c:25:
                    2c:5a:20:8d:78:c4:4b:12:d5:58:9c:07:2c:77:79:
                    38:16:2f:ba:36:17:46:be:c9:fc:8c:10:6f:5d:5c:
                    2f:ea:7c:25:32:17:8a:f9:37:e6:82:b6:cf:a6:aa:
                    d9:10:74:83:7c:8c:85:0f:b9:fe:a9:c9:b3:26:54:
                    b3:a8:1d:d0:e1:7f:e9:e0:19:02:fb:84:2a:99:94:
                    85:74:3a:af:e0:8e:1d:75:25:84:42:db:fa:ec:6d:
                    50:08:7f:df:f8:0a:ee:36:84:57:be:04:80:a9:05:
                    a4:d3:08:8b:77:1e:35:ef:c0:4c:0b:a8:7f:a9:53:
                    7c:11:17:2c:de:ec:bc:10:13:51:53:d5:bb:35:c2:
                    12:63:3d:74:12:7f:0a:2f:c4:5d:47:db:7b:f7:6a:
                    60:af:fe:82:a6:66:4f:47:04:57:55:e4:71:65:e5:
                    19:20:cf:41:05:b9:53:3a:a8:2a:0c:e9:7b:21:b2:
                    50:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F6:2F:1D:77:A5:31:99:0D:B1:4F:DB:F2:3D:F8:A7:3D:9D:06:21
            X509v3 Authority Key Identifier:
                keyid:A7:24:09:7B:7E:F9:F5:13:B3:9E:12:76:7D:5E:DC:D3:E0:62:3A:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyQJe3759ROznhJ2fV7c0-BiOoM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d46cb2-fc5a-4bf0-becf-4b0fec4249fa/1/4_YvHXelMZkNsU_b8j34pz2dBiE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d46cb2-fc5a-4bf0-becf-4b0fec4249fa/1/pyQJe3759ROznhJ2fV7c0-BiOoM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  219074

    Signature Algorithm: sha256WithRSAEncryption
         a9:14:56:f7:b0:ed:d3:a9:97:12:c1:f1:92:25:12:b9:ba:f0:
         5c:bc:5e:4b:4c:17:34:32:b9:19:00:ac:27:51:31:2c:34:7c:
         e9:56:8e:05:08:1f:fd:3b:e7:1f:6f:0c:ed:e0:19:86:5e:21:
         05:c8:31:ae:96:7b:ac:25:33:cf:da:e1:d7:cd:ed:bb:54:96:
         84:27:1e:03:a9:2c:5b:f3:40:b8:44:e7:e3:78:db:8e:dc:45:
         ac:43:0e:99:27:35:ac:8f:05:65:be:f0:0c:94:43:c2:ed:d2:
         ff:68:49:c6:e6:92:0b:8c:7e:98:11:4a:08:98:f7:41:0e:89:
         4c:f2:45:1c:7a:21:f8:71:ad:be:14:89:3a:30:a4:31:84:11:
         62:d7:24:f8:8f:bc:00:5f:cf:24:b0:95:fc:8a:51:b0:40:87:
         81:8f:8d:c9:a2:ed:75:ea:bb:28:a7:b2:46:04:61:6c:a0:16:
         39:4c:c5:0a:14:cf:7c:80:4f:e3:43:ea:49:a0:73:4f:83:f2:
         9c:29:48:99:62:d8:b5:00:c7:e8:1e:20:c1:56:93:ea:8a:33:
         bc:01:b0:6f:8c:58:c9:a9:e4:7e:a5:db:aa:65:5a:1c:a3:c9:
         03:20:f5:77:0c:8b:4a:34:ac:50:02:65:d4:30:d8:10:c8:0a:
         1b:4d:99:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:26:13 2026 by rpki-client