Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/xG9NFV14N6jhxkLPrteP6dgm9Uo.asa
File:                     xG9NFV14N6jhxkLPrteP6dgm9Uo.asa (raw, json)
Hash identifier:          j7yw0JA2orCei5mBZaM+jkEs+OnrVp/04Pg2/7YewKU=
Subject key identifier:   C4:6F:4D:15:5D:78:37:A8:E1:C6:42:CF:AE:D7:8F:E9:D8:26:F5:4A
Certificate issuer:       /CN=4cca52610c77c24069c6a659f5f75862444d21d1
Certificate serial:       019C9BAF5D21DF1AF33E70FBDC08B8AA85B7
Authority key identifier: 4C:CA:52:61:0C:77:C2:40:69:C6:A6:59:F5:F7:58:62:44:4D:21:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/xG9NFV14N6jhxkLPrteP6dgm9Uo.asa
Signing time:             Thu 26 Feb 2026 20:41:26 +0000
ASPA not before:          Thu 26 Feb 2026 20:41:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            202197
Providers:                AS: 8772
                          AS: 29632
                          AS: 48752
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 02:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:9b:af:5d:21:df:1a:f3:3e:70:fb:dc:08:b8:aa:85:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cca52610c77c24069c6a659f5f75862444d21d1
        Validity
            Not Before: Feb 26 20:41:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c46f4d155d7837a8e1c642cfaed78fe9d826f54a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0e:98:90:6e:dc:39:73:48:3a:e5:0c:c4:71:
                    34:2f:21:b1:dd:81:5c:13:ae:b2:48:07:ad:50:86:
                    08:32:fe:ee:77:a5:01:e6:2b:16:25:70:7e:58:6b:
                    d7:4a:d6:4a:6b:c5:c1:99:d0:46:8b:8b:20:e3:a2:
                    2e:5d:e4:48:09:3f:33:13:80:c9:ce:47:6b:d9:78:
                    26:9c:d3:66:37:68:b3:e5:37:45:76:9b:6b:33:2f:
                    20:ff:31:f8:3c:e5:2d:dd:81:c9:69:80:fd:9a:67:
                    5e:17:73:35:f7:33:5c:a6:b8:d2:83:ae:42:b6:04:
                    cd:ff:37:25:9f:60:8a:4c:29:aa:df:90:71:b5:cc:
                    ac:db:d1:02:11:20:26:80:98:02:ea:e9:bb:57:cc:
                    af:10:b2:05:07:30:1d:08:55:d3:2f:d1:45:1c:03:
                    29:af:4f:b0:91:ef:c0:b3:dc:27:9e:9f:48:a0:8e:
                    5a:db:52:f2:e8:1a:5d:41:04:52:a1:ce:9d:0a:3f:
                    ff:4a:9f:cc:21:fa:ce:d3:5c:db:fe:7d:59:70:f1:
                    f2:ab:fd:a8:97:84:44:4f:57:55:39:89:9b:ea:a5:
                    6d:be:f0:8d:c2:80:ca:ce:ac:e0:7e:03:fe:dc:7d:
                    b5:db:df:20:f4:8f:f6:16:43:8c:19:64:48:bc:05:
                    41:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:6F:4D:15:5D:78:37:A8:E1:C6:42:CF:AE:D7:8F:E9:D8:26:F5:4A
            X509v3 Authority Key Identifier:
                keyid:4C:CA:52:61:0C:77:C2:40:69:C6:A6:59:F5:F7:58:62:44:4D:21:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/xG9NFV14N6jhxkLPrteP6dgm9Uo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202197

    Signature Algorithm: sha256WithRSAEncryption
         30:c2:f0:9e:b4:b6:44:e3:51:07:52:3f:65:19:45:56:1d:0c:
         53:83:20:4a:7a:ad:f7:f3:30:2b:bf:ba:d3:1c:ce:92:20:24:
         39:81:34:f1:82:a8:86:76:92:da:7a:97:f8:b6:fb:8c:62:f6:
         2b:bf:50:42:8a:5a:03:3e:bd:fe:51:88:75:cf:42:38:5a:a2:
         ec:30:9a:c9:3c:6b:31:74:21:a3:48:1b:df:01:ef:09:5f:f4:
         94:f1:8b:bb:3d:5b:ae:e6:f4:bb:61:77:fc:3e:64:49:8b:f5:
         69:fb:36:c6:ac:66:bb:24:5c:19:82:71:e6:b1:71:ee:51:67:
         cd:3b:70:9a:74:4e:e8:f4:7b:1d:9d:55:1d:96:76:c2:9b:20:
         07:62:4d:31:af:62:11:8b:1e:c6:50:7b:43:33:64:4b:44:2b:
         c8:48:b6:be:78:12:43:a6:94:77:86:8e:9a:58:62:60:5c:83:
         ff:52:40:97:e5:da:75:50:6e:5a:8a:06:17:cf:ec:ad:e4:84:
         de:30:2a:ca:2a:f3:b9:2a:dd:9c:01:30:42:26:ac:0f:d2:8d:
         23:8e:91:fa:01:95:a7:f2:94:a7:2f:47:d4:fc:ab:fc:7a:ee:
         80:7f:d9:1d:2b:33:43:6c:7a:bf:e3:1e:f7:6f:e1:a6:ac:23:
         38:e2:96:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:03:26 2026 by rpki-client