Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/akA3WKQrE51tHMkpOgAd-_y1_Ag.asa
File:                     akA3WKQrE51tHMkpOgAd-_y1_Ag.asa (raw, json)
Hash identifier:          dxaxmm2hxgq3tryq+IYhfaO+SAsXr7C1xH72mLMcZF4=
Subject key identifier:   6A:40:37:58:A4:2B:13:9D:6D:1C:C9:29:3A:00:1D:FB:FC:B5:FC:08
Certificate issuer:       /CN=34e06d14a84f59b7fdf42c88102e4ede66ccb1e1
Certificate serial:       019F9FF30F44A9F9A6A9C8E465568482661B
Authority key identifier: 34:E0:6D:14:A8:4F:59:B7:FD:F4:2C:88:10:2E:4E:DE:66:CC:B1:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NOBtFKhPWbf99CyIEC5O3mbMseE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/akA3WKQrE51tHMkpOgAd-_y1_Ag.asa
Signing time:             Sun 26 Jul 2026 19:42:14 +0000
ASPA not before:          Sun 26 Jul 2026 19:42:14 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214762
Providers:                AS: 6204
                          AS: 6939
                          AS: 15694
                          AS: 24748
                          AS: 50263
                          AS: 51155
                          AS: 62403
                          AS: 199524
                          AS: 205941
                          AS: 212895
                          AS: 214757
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/NOBtFKhPWbf99CyIEC5O3mbMseE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/NOBtFKhPWbf99CyIEC5O3mbMseE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NOBtFKhPWbf99CyIEC5O3mbMseE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:f3:0f:44:a9:f9:a6:a9:c8:e4:65:56:84:82:66:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34e06d14a84f59b7fdf42c88102e4ede66ccb1e1
        Validity
            Not Before: Jul 26 19:42:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a403758a42b139d6d1cc9293a001dfbfcb5fc08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:63:cf:b7:8b:74:62:ae:33:d4:58:a7:59:fd:
                    f5:7d:c9:cf:0b:1e:7d:31:20:db:39:b2:04:f8:10:
                    b9:85:f6:a7:42:8f:67:c3:e8:e6:46:cd:ad:4e:50:
                    cc:32:f5:9e:66:9c:7f:89:09:c6:46:af:da:93:f0:
                    1f:be:62:aa:cb:27:13:68:ea:12:08:f9:74:42:05:
                    95:71:ca:f9:96:fd:c7:35:a5:06:16:14:a0:5a:24:
                    e1:a0:cc:9b:f9:6d:68:8d:cd:70:c7:bc:06:89:b4:
                    11:b5:fb:fb:0a:44:f6:5e:82:ef:83:3d:9f:41:c5:
                    69:61:e3:b6:31:f7:b5:db:86:21:00:36:60:56:7f:
                    f9:f9:f0:07:8b:a3:97:0c:e2:89:93:44:2a:31:46:
                    0d:83:27:41:6c:fc:e2:d8:30:c5:2d:2b:d5:03:c9:
                    46:83:ad:5d:87:45:ed:15:e5:de:31:d4:22:1c:ee:
                    5d:12:aa:07:38:a6:4f:9f:a7:d4:e7:07:7e:50:8e:
                    95:69:5b:e8:02:68:3b:f3:4a:bc:06:d9:8f:0e:f7:
                    47:71:91:96:53:ae:a4:60:6c:c5:89:c6:21:bf:7d:
                    f6:36:cf:d9:24:80:35:92:91:eb:dd:fd:8e:97:4a:
                    96:2e:2a:3c:0f:69:a5:27:35:68:1c:4a:83:fb:e3:
                    c1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:40:37:58:A4:2B:13:9D:6D:1C:C9:29:3A:00:1D:FB:FC:B5:FC:08
            X509v3 Authority Key Identifier:
                keyid:34:E0:6D:14:A8:4F:59:B7:FD:F4:2C:88:10:2E:4E:DE:66:CC:B1:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOBtFKhPWbf99CyIEC5O3mbMseE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/akA3WKQrE51tHMkpOgAd-_y1_Ag.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/NOBtFKhPWbf99CyIEC5O3mbMseE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214762

    Signature Algorithm: sha256WithRSAEncryption
         d4:89:22:fe:50:13:d5:c3:c9:dd:03:7d:6d:c4:24:f1:34:72:
         e5:06:8f:40:89:7b:70:25:de:7b:50:5f:b0:18:d0:26:6a:a8:
         c8:15:93:a9:e8:3e:bf:22:46:bc:8a:2e:65:32:15:00:e5:94:
         8f:1c:f2:66:76:68:bb:1a:3e:07:bb:4d:0f:f5:1d:87:59:bd:
         b8:bb:6e:a2:90:45:a7:e9:5f:9f:91:a5:15:3f:d0:f0:68:cd:
         c9:df:c5:d4:a7:72:ed:72:ae:82:db:14:70:0a:ac:62:e2:eb:
         ba:39:48:a0:57:29:54:51:a7:07:dd:88:a2:11:eb:5c:36:8a:
         e1:a9:69:f8:56:f5:1d:98:e7:7e:1c:4e:39:4b:2a:d4:c6:17:
         3b:eb:54:5f:df:59:7b:d8:dd:4d:df:d7:a9:5f:07:61:f1:98:
         60:2e:ae:74:8f:89:e6:4b:97:09:7c:85:a1:48:55:3b:dd:44:
         4d:89:95:5a:da:12:e8:4e:02:6e:a9:99:e3:e5:56:15:7e:c9:
         b7:60:7d:73:33:d0:56:63:db:0f:4f:b3:46:af:86:f1:8e:cf:
         95:4b:27:45:51:8e:10:39:7d:ad:b7:62:11:8f:74:b4:6c:79:
         2a:fc:14:ce:c8:fd:18:b0:b1:68:bd:bf:5e:45:52:5f:11:6d:
         83:92:1f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:41:44 2026 by rpki-client