Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5dc10d-4b67-4ca5-b51b-f4ac04adbd95/1/Ac0Vp77j_gd7efi18NIp69shGJI.asa
File:                     Ac0Vp77j_gd7efi18NIp69shGJI.asa (raw, json)
Hash identifier:          c6J2S86+6Fr+X3dELm6oa+hnK83dExkyOr3DlTV80eE=
Subject key identifier:   01:CD:15:A7:BE:E3:FE:07:7B:79:F8:B5:F0:D2:29:EB:DB:21:18:92
Certificate issuer:       /CN=212bfa6fde3455bc099288e9ff450d9ad8216c60
Certificate serial:       019FA6981C1811DD1D58B405AEB18421BB28
Authority key identifier: 21:2B:FA:6F:DE:34:55:BC:09:92:88:E9:FF:45:0D:9A:D8:21:6C:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ISv6b940VbwJkojp_0UNmtghbGA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/5dc10d-4b67-4ca5-b51b-f4ac04adbd95/1/Ac0Vp77j_gd7efi18NIp69shGJI.asa
Signing time:             Tue 28 Jul 2026 02:40:14 +0000
ASPA not before:          Tue 28 Jul 2026 02:40:14 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            202902
Providers:                AS: 20473
                          AS: 209735
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/5dc10d-4b67-4ca5-b51b-f4ac04adbd95/1/ISv6b940VbwJkojp_0UNmtghbGA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/5dc10d-4b67-4ca5-b51b-f4ac04adbd95/1/ISv6b940VbwJkojp_0UNmtghbGA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ISv6b940VbwJkojp_0UNmtghbGA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a6:98:1c:18:11:dd:1d:58:b4:05:ae:b1:84:21:bb:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=212bfa6fde3455bc099288e9ff450d9ad8216c60
        Validity
            Not Before: Jul 28 02:40:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=01cd15a7bee3fe077b79f8b5f0d229ebdb211892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:42:63:0d:3a:97:1b:2b:0c:05:af:9b:e6:b0:
                    3e:fb:3a:a3:86:1b:52:5a:d7:e6:b4:32:7e:29:ea:
                    c6:a7:d2:e5:c8:78:24:31:bb:ea:11:20:cc:8a:b4:
                    57:7e:5e:7d:8a:28:3f:15:3b:c8:a4:87:65:14:cd:
                    b0:43:cb:4c:99:42:05:21:d4:97:ee:8d:cc:0a:3c:
                    84:40:fd:34:ed:a9:53:31:fd:b0:68:be:fa:7a:0f:
                    e0:be:c8:76:6a:f8:76:be:ec:39:13:97:ff:0f:a4:
                    e0:a8:85:cd:c4:7f:25:79:4b:b2:e8:74:21:75:c9:
                    48:75:47:1c:10:b1:f8:97:24:89:21:69:56:68:0b:
                    c3:45:e5:ab:12:7f:b4:47:76:ac:51:83:09:ed:2e:
                    b5:b8:18:c5:3f:42:14:c4:e6:51:4f:43:64:8d:71:
                    1e:61:c7:04:18:27:8c:01:8f:52:3d:c3:60:75:34:
                    9d:8a:c4:2c:df:66:97:c6:ec:4c:a3:20:40:89:80:
                    99:ac:d7:46:34:fb:ca:d3:02:92:52:12:d5:e5:39:
                    fd:45:80:24:7c:1b:6b:35:b5:06:45:d9:6f:d2:f4:
                    08:df:e7:2d:f0:19:67:e9:74:e1:b0:28:db:c5:4e:
                    c9:68:c4:0f:f1:6e:42:bf:63:52:46:a4:5d:50:7c:
                    72:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:CD:15:A7:BE:E3:FE:07:7B:79:F8:B5:F0:D2:29:EB:DB:21:18:92
            X509v3 Authority Key Identifier:
                keyid:21:2B:FA:6F:DE:34:55:BC:09:92:88:E9:FF:45:0D:9A:D8:21:6C:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISv6b940VbwJkojp_0UNmtghbGA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5dc10d-4b67-4ca5-b51b-f4ac04adbd95/1/Ac0Vp77j_gd7efi18NIp69shGJI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5dc10d-4b67-4ca5-b51b-f4ac04adbd95/1/ISv6b940VbwJkojp_0UNmtghbGA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202902

    Signature Algorithm: sha256WithRSAEncryption
         94:60:c4:0a:c1:82:e8:90:17:d1:29:78:2d:7e:55:dc:09:66:
         ed:ab:1a:44:ef:d1:b2:90:97:01:67:b9:2f:b6:7d:52:7e:34:
         47:ff:c2:1b:d7:3d:33:5f:bd:04:35:1e:eb:dd:c0:67:60:0e:
         38:c6:a7:27:d3:a8:ab:9b:97:ee:f8:21:b7:36:20:ff:3c:14:
         18:00:5f:5e:4b:9e:86:d7:35:33:4c:10:9c:17:b7:d2:44:59:
         85:e8:66:37:dc:dc:c0:c6:90:99:96:67:d7:1a:a6:52:ca:bf:
         34:8e:77:b3:51:1e:0d:0f:f8:89:f0:aa:4a:50:5d:e6:0a:b8:
         5e:b8:28:c0:c8:c6:4f:bd:93:07:53:6c:3d:70:5f:63:01:83:
         37:64:35:3d:0c:2e:a4:b2:86:a7:33:fb:8f:e5:1c:ae:42:1b:
         97:10:1f:cc:1e:fc:a5:db:6c:af:5b:09:f5:4c:7e:41:af:d5:
         7f:8c:57:85:b3:d0:6d:1d:e4:c0:40:76:9f:3b:d5:e0:61:d0:
         3e:56:2a:18:64:bb:bc:87:d6:1d:3d:7a:3f:ca:d8:9e:3e:a3:
         2c:32:95:ef:7c:31:7c:43:73:b9:d9:5d:19:c5:7e:cb:87:2e:
         9b:37:32:97:74:1b:1c:54:30:86:f0:4d:e5:a5:0a:5c:bc:c0:
         3e:3c:79:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:43:03 2026 by rpki-client