Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/212a65-0b8a-4061-aa8b-31b7da66c4bd/1/W_zENwIeQp6Hptdo1_E6v_V4xjc.asa
File:                     W_zENwIeQp6Hptdo1_E6v_V4xjc.asa (raw, json)
Hash identifier:          cs6qKkFwS7puW3zPA3o1/g0nGOPsED+IC7XzDcZsfdc=
Subject key identifier:   5B:FC:C4:37:02:1E:42:9E:87:A6:D7:68:D7:F1:3A:BF:F5:78:C6:37
Certificate issuer:       /CN=87e1b29c4779edddbc0fa2a588107b894ebaf6dd
Certificate serial:       019E633B628446E642A2424C89A18450951D
Authority key identifier: 87:E1:B2:9C:47:79:ED:DD:BC:0F:A2:A5:88:10:7B:89:4E:BA:F6:DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h-GynEd57d28D6KliBB7iU669t0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/212a65-0b8a-4061-aa8b-31b7da66c4bd/1/W_zENwIeQp6Hptdo1_E6v_V4xjc.asa
Signing time:             Tue 26 May 2026 07:41:36 +0000
ASPA not before:          Tue 26 May 2026 07:41:36 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            209532
Providers:                AS: 174
                          AS: 3257
                          AS: 31167
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/212a65-0b8a-4061-aa8b-31b7da66c4bd/1/h-GynEd57d28D6KliBB7iU669t0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/212a65-0b8a-4061-aa8b-31b7da66c4bd/1/h-GynEd57d28D6KliBB7iU669t0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h-GynEd57d28D6KliBB7iU669t0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:63:3b:62:84:46:e6:42:a2:42:4c:89:a1:84:50:95:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87e1b29c4779edddbc0fa2a588107b894ebaf6dd
        Validity
            Not Before: May 26 07:41:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5bfcc437021e429e87a6d768d7f13abff578c637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:80:41:da:9d:ae:7f:5b:ea:e1:8d:7e:20:5f:
                    18:33:bb:78:f3:cf:52:a0:08:0c:c6:24:4e:89:9d:
                    6b:ce:86:59:c7:8b:70:1b:b6:14:c4:e8:25:77:d1:
                    71:b7:52:a8:a0:d1:d3:aa:2e:15:35:ae:03:7a:42:
                    1e:ad:64:aa:b6:bb:f7:7b:5b:ba:54:5b:8d:fd:8c:
                    2a:ad:83:52:1c:56:72:b7:16:42:50:b9:d5:1a:e3:
                    a0:62:68:bd:81:82:47:7e:9c:3b:37:b9:d1:11:11:
                    f9:aa:b1:c9:43:b2:22:d7:5d:14:39:87:30:a2:a4:
                    b2:d4:03:8f:74:b2:6b:76:36:78:ed:61:e4:9b:db:
                    24:3b:c0:14:df:6c:31:d0:58:d2:a9:bb:33:30:00:
                    2d:10:7e:a7:30:f6:d2:5d:5b:6d:76:da:0d:58:57:
                    34:9d:c7:1a:90:f5:4b:6b:36:74:5f:31:ec:a9:ec:
                    fd:78:68:ce:63:26:7e:f0:b8:67:d7:fa:28:c8:12:
                    1f:a7:68:b9:f3:c9:c4:86:7f:9e:c9:5f:7a:c3:9f:
                    f2:ea:18:07:8b:cc:62:7e:2a:d9:db:a2:b4:e5:90:
                    a2:3b:0f:f6:22:00:4d:8e:60:1f:18:a9:4a:38:b4:
                    df:5d:d7:f8:d6:d5:79:3c:6e:8b:46:a7:38:fb:b9:
                    30:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:FC:C4:37:02:1E:42:9E:87:A6:D7:68:D7:F1:3A:BF:F5:78:C6:37
            X509v3 Authority Key Identifier:
                keyid:87:E1:B2:9C:47:79:ED:DD:BC:0F:A2:A5:88:10:7B:89:4E:BA:F6:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-GynEd57d28D6KliBB7iU669t0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/212a65-0b8a-4061-aa8b-31b7da66c4bd/1/W_zENwIeQp6Hptdo1_E6v_V4xjc.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/212a65-0b8a-4061-aa8b-31b7da66c4bd/1/h-GynEd57d28D6KliBB7iU669t0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209532

    Signature Algorithm: sha256WithRSAEncryption
         27:0e:3f:e6:51:38:b0:70:8b:c6:50:75:86:c0:43:e3:0a:55:
         f5:ef:6a:f5:79:96:3e:e0:bd:34:18:b7:07:11:77:89:c5:3c:
         26:28:71:fd:ca:41:00:47:32:6e:8e:f1:e1:8e:31:c8:40:e8:
         d3:61:5c:fa:2a:fc:0a:40:bf:7f:61:7d:a8:b1:b9:92:f8:96:
         74:58:20:87:91:0f:2c:78:e1:dd:78:23:fd:98:fe:b9:3d:f6:
         f2:b7:4d:a3:00:5a:7e:ea:aa:53:6f:f6:3d:09:c0:4e:06:77:
         5b:52:36:cd:d1:3c:4e:4e:fa:da:54:41:e0:c1:98:3c:29:1d:
         7b:66:4e:03:54:01:6b:79:54:0c:6a:07:cd:38:d5:c1:c4:f7:
         7d:62:c5:e0:6d:4e:1b:9a:5d:56:2e:ae:0b:8b:08:60:d4:e3:
         2c:03:a7:96:9d:76:73:50:e7:2a:2a:53:49:25:f0:a4:8b:71:
         e4:85:ab:ce:88:23:67:18:86:dd:8d:89:38:d0:5f:70:bd:4c:
         b0:10:6d:da:54:f9:ad:dc:d0:b1:73:88:94:77:b2:eb:29:8a:
         e7:f8:5c:57:7a:fe:15:7e:c1:f3:b7:ba:be:cc:8c:18:64:c5:
         40:17:04:d3:dd:d5:bb:af:32:1e:4c:01:0c:16:0b:a3:80:44:
         ca:fc:e1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:45:35 2026 by rpki-client