Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/7VpUwdzvtYsNQgLFVimTvb7Z36E.asa
File:                     7VpUwdzvtYsNQgLFVimTvb7Z36E.asa (raw, json)
Hash identifier:          wjvABcW2VEyfBBqr+y4ACXwxJq5x22L5rHuzxhC3ht8=
Subject key identifier:   ED:5A:54:C1:DC:EF:B5:8B:0D:42:02:C5:56:29:93:BD:BE:D9:DF:A1
Certificate issuer:       /CN=0094c0f7368c047643e91c57d6cfda9f99897362
Certificate serial:       019E93503E9502851EAFE1C32D813FBE1193
Authority key identifier: 00:94:C0:F7:36:8C:04:76:43:E9:1C:57:D6:CF:DA:9F:99:89:73:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/7VpUwdzvtYsNQgLFVimTvb7Z36E.asa
Signing time:             Thu 04 Jun 2026 15:46:10 +0000
ASPA not before:          Thu 04 Jun 2026 15:46:10 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            202986
Providers:                AS: 20473
                          AS: 56655
                          AS: 152900
                          AS: 215467
                          AS: 394177
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 21:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:93:50:3e:95:02:85:1e:af:e1:c3:2d:81:3f:be:11:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0094c0f7368c047643e91c57d6cfda9f99897362
        Validity
            Not Before: Jun  4 15:46:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ed5a54c1dcefb58b0d4202c5562993bdbed9dfa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e5:50:1a:7d:40:bf:55:07:01:3f:e4:90:2a:
                    26:ea:92:77:8a:01:9e:24:f8:55:37:de:d6:19:13:
                    e9:99:56:e0:f8:af:4a:91:86:f1:7e:47:26:27:eb:
                    1f:a2:ca:ee:b8:5a:cc:eb:88:2b:fc:4e:ee:b4:2b:
                    c5:97:bc:41:54:56:bf:ef:44:8d:42:d0:dc:47:29:
                    15:ed:b0:52:7c:8c:d2:20:29:51:1c:19:e5:07:8c:
                    dd:33:e7:e3:aa:46:b4:86:28:f3:22:d8:8c:81:22:
                    af:1d:1d:8f:1e:80:77:f3:53:b0:d9:2c:f4:6d:1f:
                    f5:c7:ee:b8:b2:90:d6:a5:05:46:32:c1:29:37:43:
                    19:5e:01:7d:a2:6c:cd:18:8b:fd:15:95:91:8e:dc:
                    ee:e2:fa:8a:83:fe:7e:e8:0b:5d:f2:ee:b2:19:97:
                    2e:54:1c:a6:26:3c:34:30:9a:6f:eb:a0:2e:b0:7e:
                    3f:b7:7e:77:df:4b:43:ca:58:f8:e0:a9:ac:4c:25:
                    57:e9:66:e1:d6:da:ea:9d:05:b0:b8:93:c3:86:26:
                    30:7e:c1:60:65:ac:e7:f0:65:ff:55:08:3e:2e:3a:
                    5f:db:2d:22:70:58:29:43:1d:9a:af:b2:ff:d9:47:
                    f7:48:40:9c:fb:8a:20:ca:cd:18:7a:3f:50:d9:bb:
                    fd:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:5A:54:C1:DC:EF:B5:8B:0D:42:02:C5:56:29:93:BD:BE:D9:DF:A1
            X509v3 Authority Key Identifier:
                keyid:00:94:C0:F7:36:8C:04:76:43:E9:1C:57:D6:CF:DA:9F:99:89:73:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/7VpUwdzvtYsNQgLFVimTvb7Z36E.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202986

    Signature Algorithm: sha256WithRSAEncryption
         6a:47:2f:09:a3:9e:05:98:a2:5e:ac:2b:06:70:e5:82:a9:60:
         2a:21:e1:48:a4:d0:f4:42:6d:99:28:60:18:72:a5:53:0d:e8:
         a6:c5:8e:b9:6a:16:e5:aa:b5:2c:69:36:97:7a:05:8b:f3:6e:
         ef:36:71:31:4d:44:ed:7b:ba:10:a1:ae:ac:57:32:03:b1:c9:
         7f:fe:95:97:96:06:de:17:a8:97:b9:88:f6:75:9e:dd:89:ee:
         76:b8:f3:b2:82:11:de:e2:da:1b:81:5e:42:7b:a4:53:80:28:
         39:cb:b4:79:13:e5:83:64:e9:b2:0f:53:b6:ae:04:90:25:93:
         49:12:6e:17:7d:8f:4b:ae:59:c8:fc:7f:c0:35:44:11:05:3b:
         9c:c2:23:7c:55:5d:b8:27:c0:2b:c5:07:c8:58:b2:c8:e6:44:
         1a:17:8e:98:6a:07:ef:4a:11:23:45:73:ac:e3:34:30:33:7e:
         f2:fb:fe:e8:fe:4c:e6:4b:21:4c:f8:ce:5a:44:3b:a6:01:fe:
         22:57:b7:3c:35:f0:4c:9d:2e:21:93:dd:28:08:e9:aa:91:65:
         7b:9b:df:2e:2b:cf:46:58:a9:55:2a:82:6f:85:d1:09:ab:85:
         d9:06:3d:5f:e0:1e:b4:f4:ca:79:01:9e:e2:c0:fa:cb:b4:d1:
         06:5f:97:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:45:11 2026 by rpki-client