Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/RKWiv_b8Hsm7TZP6_GQSd0RgdgM.asa
File:                     RKWiv_b8Hsm7TZP6_GQSd0RgdgM.asa (raw, json)
Hash identifier:          QKVQOXrc16Rv1esQVhy/4W+ZeekcFYY56OZCN7aSiBQ=
Subject key identifier:   44:A5:A2:BF:F6:FC:1E:C9:BB:4D:93:FA:FC:64:12:77:44:60:76:03
Certificate issuer:       /CN=b467367967dc763349fd0b50e31f75b823028590
Certificate serial:       019EADD22819C1A1754107921D0F93951661
Authority key identifier: B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/RKWiv_b8Hsm7TZP6_GQSd0RgdgM.asa
Signing time:             Tue 09 Jun 2026 19:18:11 +0000
ASPA not before:          Tue 09 Jun 2026 19:18:11 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            199484
Providers:                AS: 3223
                          AS: 201178
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 19:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ad:d2:28:19:c1:a1:75:41:07:92:1d:0f:93:95:16:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b467367967dc763349fd0b50e31f75b823028590
        Validity
            Not Before: Jun  9 19:18:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=44a5a2bff6fc1ec9bb4d93fafc64127744607603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:2c:59:b6:e7:5e:cf:a0:a3:5c:e4:41:77:25:
                    ae:1a:a5:24:d5:cd:c3:bd:b6:b9:98:98:88:85:ba:
                    a2:01:6b:3c:d2:c7:8c:af:2a:bb:93:0d:10:ff:8a:
                    62:ea:ec:47:40:d8:c8:76:d8:42:b3:df:a4:73:84:
                    74:8c:2f:cb:2d:58:34:48:f5:f7:20:73:ac:4c:ff:
                    94:54:3c:30:98:7b:ed:87:43:db:70:ef:f7:4c:13:
                    9a:b9:dd:19:0f:6d:b2:15:36:e3:f2:66:74:b4:c8:
                    eb:69:59:73:e7:47:bc:dc:66:67:82:dd:5d:35:b2:
                    02:94:2d:83:1e:bf:be:5c:f8:5f:87:8c:81:e8:68:
                    2e:81:21:63:19:1d:f5:14:9e:af:8e:eb:6c:b1:42:
                    18:8c:a8:b3:71:27:ee:98:2a:4b:59:43:32:25:03:
                    f7:0b:af:1f:89:44:a5:dd:72:f5:62:bf:8a:13:1c:
                    8d:9e:0d:54:fa:06:77:95:91:53:9d:2f:e3:3b:f9:
                    d5:bf:6f:6b:2e:16:4d:4f:be:97:af:1b:78:06:25:
                    df:6e:c6:b6:e4:a4:f4:10:a7:1f:e0:df:aa:cc:e0:
                    ba:e4:0a:8b:01:16:60:d3:f8:22:8c:f5:b4:02:c7:
                    a7:dd:5e:55:67:47:d0:91:2e:f6:16:f7:fd:8f:6a:
                    a8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A5:A2:BF:F6:FC:1E:C9:BB:4D:93:FA:FC:64:12:77:44:60:76:03
            X509v3 Authority Key Identifier:
                keyid:B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/RKWiv_b8Hsm7TZP6_GQSd0RgdgM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199484

    Signature Algorithm: sha256WithRSAEncryption
         04:93:8a:ca:fa:f4:dc:98:0c:14:2f:74:63:78:1c:90:7b:5d:
         9c:06:19:bf:16:7d:5f:e7:09:32:c2:03:9d:24:66:ca:dd:1c:
         78:91:74:61:f0:1a:66:75:56:a0:94:c8:a4:20:3a:4d:f8:01:
         96:c8:86:3b:ec:c1:ce:d3:6d:78:8c:1e:29:53:74:c2:c1:80:
         1f:fd:f0:9e:d0:57:91:ce:2f:f1:ad:78:12:4f:4e:0c:70:e9:
         9c:1b:30:1e:ac:9f:9a:15:16:90:d9:d6:3a:f0:ba:e1:b3:49:
         b1:c8:37:31:f7:63:6e:51:6b:19:a9:8f:67:d9:7f:41:7e:af:
         8e:df:72:11:49:77:8f:6f:1f:0f:99:76:08:94:f5:1a:c1:12:
         1c:3b:d2:f9:c1:67:f7:70:38:56:9a:85:c8:06:3c:fb:72:76:
         6a:4f:ef:ed:11:a1:0b:b9:3d:09:69:33:b0:f6:f8:c8:d9:91:
         b1:84:ac:21:9f:8a:10:da:09:8b:8e:0b:ac:73:d8:27:b5:85:
         e8:00:3d:1e:06:4c:92:b1:cb:cd:28:9d:2e:e9:20:45:82:35:
         7d:50:b0:6a:51:56:05:51:6e:04:82:df:0e:9c:e2:c7:02:cf:
         d2:cd:44:39:11:34:5e:b5:1e:da:03:f7:07:4a:70:ea:05:ce:
         ca:30:40:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:39:41 2026 by rpki-client