Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/dac523-20c3-4307-abe2-4e7ce1028d14/1/i7pkQ_qCDYcLrdDN91rJhafVESI.asa
File:                     i7pkQ_qCDYcLrdDN91rJhafVESI.asa (raw, json)
Hash identifier:          AiqBocMFUWHp3rzWKv/UFjipRopIcsJnP0v/MVSOmZ0=
Subject key identifier:   8B:BA:64:43:FA:82:0D:87:0B:AD:D0:CD:F7:5A:C9:85:A7:D5:11:22
Certificate issuer:       /CN=5a765feb3e286c8dbaa9b1d62682e44fbe800722
Certificate serial:       01A0622A152B35BAA70AD3FC4FF28FBAB8B7
Authority key identifier: 5A:76:5F:EB:3E:28:6C:8D:BA:A9:B1:D6:26:82:E4:4F:BE:80:07:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WnZf6z4obI26qbHWJoLkT76AByI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/dac523-20c3-4307-abe2-4e7ce1028d14/1/i7pkQ_qCDYcLrdDN91rJhafVESI.asa
Signing time:             Wed 02 Sep 2026 12:48:40 +0000
ASPA not before:          Wed 02 Sep 2026 12:48:40 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            197545
Providers:                AS: 2856
                          AS: 49158
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/dac523-20c3-4307-abe2-4e7ce1028d14/1/WnZf6z4obI26qbHWJoLkT76AByI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/dac523-20c3-4307-abe2-4e7ce1028d14/1/WnZf6z4obI26qbHWJoLkT76AByI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WnZf6z4obI26qbHWJoLkT76AByI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 04:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:62:2a:15:2b:35:ba:a7:0a:d3:fc:4f:f2:8f:ba:b8:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a765feb3e286c8dbaa9b1d62682e44fbe800722
        Validity
            Not Before: Sep  2 12:48:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8bba6443fa820d870badd0cdf75ac985a7d51122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c5:6d:e2:4b:cc:b4:7f:d4:9f:fe:8f:73:5e:
                    a2:7d:d5:2b:dd:fa:ae:71:2d:aa:a8:4f:7e:28:4d:
                    7e:6c:54:3e:09:aa:5d:49:29:6e:31:d7:62:bc:75:
                    58:17:f5:27:34:30:27:96:a0:f4:47:54:10:0b:f0:
                    e7:ed:09:0e:16:f0:b4:32:11:3f:26:26:7b:39:1b:
                    63:e1:15:b7:30:7c:e5:ac:ab:f0:4c:09:02:39:8f:
                    9d:e5:09:b3:ad:bd:c8:f0:99:8b:eb:28:88:73:bf:
                    4f:2f:83:00:5f:80:18:59:c2:ac:66:61:44:5f:f8:
                    25:2c:20:08:6b:bc:6b:3d:7f:d8:57:7a:df:77:8e:
                    4f:67:07:ea:fe:40:66:89:ae:39:bd:15:a6:8c:c4:
                    f9:f8:99:2a:ef:4b:cc:a7:f5:14:0e:e5:44:39:49:
                    d9:67:1a:04:0b:b0:02:dc:0f:ad:17:86:8d:49:b9:
                    21:17:01:97:e3:19:8d:37:c8:4e:45:99:77:b1:bf:
                    0b:63:51:90:29:01:9e:cd:8a:d7:9b:fb:6e:64:0c:
                    df:5d:42:02:f5:5d:4e:64:f6:31:52:07:8e:a4:b7:
                    cb:b1:bc:59:d2:0f:21:2a:05:19:0b:9c:79:d9:a7:
                    4e:38:97:e3:54:12:03:06:19:b9:7c:7a:9f:a0:1e:
                    72:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:BA:64:43:FA:82:0D:87:0B:AD:D0:CD:F7:5A:C9:85:A7:D5:11:22
            X509v3 Authority Key Identifier:
                keyid:5A:76:5F:EB:3E:28:6C:8D:BA:A9:B1:D6:26:82:E4:4F:BE:80:07:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WnZf6z4obI26qbHWJoLkT76AByI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dac523-20c3-4307-abe2-4e7ce1028d14/1/i7pkQ_qCDYcLrdDN91rJhafVESI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dac523-20c3-4307-abe2-4e7ce1028d14/1/WnZf6z4obI26qbHWJoLkT76AByI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197545

    Signature Algorithm: sha256WithRSAEncryption
         6f:a4:a5:3f:1c:7c:6f:ca:aa:39:25:c0:24:30:73:21:d5:6f:
         b9:c9:38:75:7e:8f:63:df:2e:ad:26:92:72:c6:14:c9:15:64:
         ea:c9:e3:b6:96:b0:c1:1e:d2:96:35:b3:0c:ef:df:4a:fc:d0:
         36:86:4f:91:24:c0:ed:30:7a:80:d2:09:e1:ca:38:8f:48:c6:
         70:a9:47:a5:fe:37:43:cc:59:91:9f:bb:8f:4b:cb:f0:e6:8c:
         0f:23:07:32:0c:7c:f5:aa:aa:bd:e0:37:61:cc:9f:f3:ec:7f:
         f3:62:e2:45:a0:83:ae:e5:e0:ce:3b:97:55:77:3c:34:74:fe:
         4f:6d:45:85:45:e9:7f:a2:06:5d:c6:d5:ff:75:f5:f7:6c:a8:
         29:94:3e:50:50:ec:e0:11:61:45:78:d2:4b:4d:b9:fd:3f:30:
         4b:d4:7b:80:15:8e:19:ba:9d:80:47:05:6c:02:4c:ab:42:da:
         15:6e:f4:fe:30:31:62:e0:c1:18:8e:c6:ef:f6:32:56:21:09:
         d4:d0:76:88:c6:d0:2b:f2:85:e2:0f:96:88:1a:be:df:4e:02:
         70:91:ec:91:d2:3d:f0:0b:4e:53:c6:a9:2a:d4:5d:d9:85:ef:
         97:d2:91:41:2c:f2:56:a4:d7:35:3b:24:fa:58:62:20:9d:17:
         69:bf:3a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:52:30 2026 by rpki-client