Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/p9fks12tbi0sNbMzxjuMVBs4udI.asa
File:                     p9fks12tbi0sNbMzxjuMVBs4udI.asa (raw, json)
Hash identifier:          lBgoeuQa1eOsZavDdgNQRXGDenRYK4YojoOZO+trv6A=
Subject key identifier:   A7:D7:E4:B3:5D:AD:6E:2D:2C:35:B3:33:C6:3B:8C:54:1B:38:B9:D2
Certificate issuer:       /CN=6765a21b561ba8665cf79fbf44c31959de28f216
Certificate serial:       01A035637D1C5AE9BB157D1605E692594AD9
Authority key identifier: 67:65:A2:1B:56:1B:A8:66:5C:F7:9F:BF:44:C3:19:59:DE:28:F2:16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/p9fks12tbi0sNbMzxjuMVBs4udI.asa
Signing time:             Mon 24 Aug 2026 20:08:27 +0000
ASPA not before:          Mon 24 Aug 2026 20:08:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            199476
Providers:                AS: 34872
                          AS: 44066
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 02:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:35:63:7d:1c:5a:e9:bb:15:7d:16:05:e6:92:59:4a:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6765a21b561ba8665cf79fbf44c31959de28f216
        Validity
            Not Before: Aug 24 20:08:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a7d7e4b35dad6e2d2c35b333c63b8c541b38b9d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a2:98:78:90:91:aa:7e:51:6f:ce:ac:86:90:
                    ea:35:7e:bc:a7:aa:05:6d:89:34:9e:78:0a:7d:87:
                    5b:1e:a0:12:5d:34:f2:42:2a:14:fe:13:f0:0e:e3:
                    c3:31:42:45:dc:2e:56:6d:17:82:d8:fd:6b:42:92:
                    4e:27:5e:2a:b5:cc:20:80:f8:d5:b7:89:54:07:b1:
                    86:b5:43:b7:62:48:26:ef:21:6a:ca:85:09:48:16:
                    83:54:ee:5a:d0:a1:64:8a:97:78:d2:b8:40:43:3a:
                    88:15:ab:08:da:19:5e:f5:45:9a:b6:10:78:6c:d3:
                    38:8a:67:0c:81:eb:c1:f5:7b:0e:33:35:7c:4e:5d:
                    9c:e8:0c:d1:9a:ab:b1:50:53:b1:d0:ed:1b:a8:4b:
                    7d:a2:65:b1:7b:21:1e:ca:f8:ec:6c:56:a9:fa:9b:
                    90:53:90:55:f9:ac:6f:38:f8:ee:ec:53:21:16:17:
                    01:e3:60:cd:47:dc:17:33:3e:62:cc:97:4c:fe:da:
                    1b:27:fd:12:3e:c1:ee:46:6e:7f:dd:98:61:fd:44:
                    9d:70:34:d4:fe:f7:ee:17:0d:47:2b:a5:fd:66:d1:
                    c7:75:65:77:af:af:df:fa:4a:f8:d0:c0:b5:71:23:
                    18:53:46:05:71:05:d3:58:37:fd:87:11:80:54:a1:
                    3d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D7:E4:B3:5D:AD:6E:2D:2C:35:B3:33:C6:3B:8C:54:1B:38:B9:D2
            X509v3 Authority Key Identifier:
                keyid:67:65:A2:1B:56:1B:A8:66:5C:F7:9F:BF:44:C3:19:59:DE:28:F2:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/p9fks12tbi0sNbMzxjuMVBs4udI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199476

    Signature Algorithm: sha256WithRSAEncryption
         24:30:97:43:ae:2f:aa:79:5c:35:bd:a1:bb:76:02:c0:8f:ee:
         a7:8f:05:49:ee:95:28:b5:b2:6e:e5:9d:c0:ec:8e:ca:e7:dd:
         aa:7f:df:f2:2a:e1:27:f8:72:71:9b:10:7b:f3:e6:d3:04:db:
         5c:41:76:09:c4:34:13:f1:52:48:d5:b6:33:82:d1:d9:c5:20:
         30:3f:a5:24:a5:cf:a7:b0:ae:ab:3b:75:b4:35:7b:80:33:8d:
         fe:00:48:86:ec:5a:56:3f:8c:5f:fe:c8:29:bd:15:d6:3a:f3:
         ae:32:4d:48:be:f0:88:b2:a4:1d:cf:04:f4:94:3e:f7:04:f5:
         e4:fb:33:c8:a6:a6:6e:e9:12:ff:f1:73:e8:00:e3:4f:c7:61:
         44:78:df:96:1a:f1:a3:98:ec:a6:d8:a6:81:67:10:c3:cc:af:
         0c:bd:28:2e:4f:fa:a3:60:71:20:ce:6a:b7:b5:26:70:9f:48:
         b7:3e:ab:4f:47:cc:e7:fd:0a:38:b1:be:58:32:7c:2d:a5:93:
         6f:bf:cd:de:72:bf:3d:92:e9:64:a5:c9:39:c0:5d:1f:35:55:
         73:14:56:2a:5c:c4:f4:e8:ef:f2:eb:02:52:b8:9e:16:82:e3:
         1d:ce:63:c1:5b:03:32:a6:3f:70:7c:14:75:6c:6f:49:b2:2e:
         c3:61:85:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:32:32 2026 by rpki-client