Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/utVvz_2zL-EeYbGI4JyxvPVNUDo.asa
File:                     utVvz_2zL-EeYbGI4JyxvPVNUDo.asa (raw, json)
Hash identifier:          7iy+jOFotMzLTvIA5sNqjzvMdNUTu9coEXVSF+yDsMo=
Subject key identifier:   BA:D5:6F:CF:FD:B3:2F:E1:1E:61:B1:88:E0:9C:B1:BC:F5:4D:50:3A
Certificate issuer:       /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Certificate serial:       01A019DAF9B96441BEE64B3E8F58CA376337
Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/utVvz_2zL-EeYbGI4JyxvPVNUDo.asa
Signing time:             Wed 19 Aug 2026 11:49:36 +0000
ASPA not before:          Wed 19 Aug 2026 11:49:36 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            13238
Providers:                AS: 1299
                          AS: 9002
                          AS: 20764
                          AS: 57304
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 02:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:19:da:f9:b9:64:41:be:e6:4b:3e:8f:58:ca:37:63:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
        Validity
            Not Before: Aug 19 11:49:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bad56fcffdb32fe11e61b188e09cb1bcf54d503a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0e:38:b0:bf:5e:b8:fb:e3:22:d7:2d:69:cf:
                    48:a7:7a:3c:85:53:1a:35:37:3f:a9:05:31:45:56:
                    cb:b6:fd:35:fe:d9:6a:b7:e5:39:5a:a1:84:ac:08:
                    2a:24:0c:7f:94:6c:cb:95:a1:66:8d:fd:30:05:77:
                    0c:f0:62:fe:00:57:85:f6:9f:da:5b:80:ea:f9:8d:
                    0c:d0:76:4a:b0:f1:6c:d8:f7:39:61:36:0d:be:84:
                    54:be:d1:ee:50:d2:a3:4e:10:8a:d1:30:f0:a5:63:
                    16:50:4d:09:8a:13:28:3e:97:13:8e:b6:02:9b:47:
                    57:cf:3d:75:c2:00:e4:c2:17:dc:82:ba:d1:a0:55:
                    fb:99:cb:40:5f:b6:77:99:0a:02:7e:1e:07:82:96:
                    5e:61:a7:c0:6e:9e:89:e2:a7:64:1d:d3:ce:7c:58:
                    45:ff:49:2b:6e:2b:13:78:d7:58:f9:a7:78:f2:3d:
                    52:0e:06:5f:35:a5:3e:5e:e4:47:1b:ac:41:83:19:
                    c1:42:36:8b:0a:65:02:e9:a2:50:3a:b0:ce:e1:d0:
                    c5:df:7e:c8:10:a9:9f:22:bb:8c:95:59:18:07:c6:
                    43:3f:d0:8a:5e:35:43:97:ff:dc:3f:3d:4f:c6:99:
                    c9:ba:0d:cc:da:b8:be:b4:c6:a9:24:90:a2:e6:79:
                    e9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D5:6F:CF:FD:B3:2F:E1:1E:61:B1:88:E0:9C:B1:BC:F5:4D:50:3A
            X509v3 Authority Key Identifier:
                keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/utVvz_2zL-EeYbGI4JyxvPVNUDo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13238

    Signature Algorithm: sha256WithRSAEncryption
         49:1a:3a:b6:eb:9f:e7:09:76:36:69:dc:0e:65:82:2f:17:f5:
         3e:bc:08:f8:9d:52:8d:01:fa:54:b8:1e:84:2f:21:4f:eb:c4:
         68:ef:82:a8:0b:93:0c:d8:56:87:ab:66:e8:5e:63:ea:8f:3c:
         27:13:7a:db:a3:b0:d6:e7:56:c1:50:b7:b8:d6:69:bb:c2:4d:
         69:f3:3d:98:76:0d:f0:7d:e2:7a:07:30:69:eb:cb:2c:6c:11:
         b1:0b:cb:bf:87:a5:d4:6c:17:b6:5b:47:b1:bc:35:09:c0:e6:
         ce:08:89:cd:9f:d4:fa:76:66:7c:e1:22:6f:9d:ec:02:f0:e0:
         b3:61:95:36:83:e3:73:2f:92:50:3e:11:05:a8:8c:6c:bd:63:
         4e:fc:09:04:e7:66:2c:5a:e2:16:ba:0f:9f:bf:7d:39:ea:f6:
         36:f8:32:4b:8f:ba:02:c8:cc:a4:c7:e1:db:dc:66:65:83:62:
         d9:32:ca:60:85:ae:37:c0:b2:af:6e:a8:8b:9b:15:42:aa:74:
         c0:ec:0f:1d:4d:c9:ee:36:2e:06:96:46:6a:ce:c4:52:99:6e:
         42:8b:f8:92:65:ae:e9:73:6c:b9:ea:ff:d4:4d:3a:86:f3:ee:
         4c:14:6f:6c:74:8f:35:32:95:d0:14:91:ca:f8:2e:e1:ae:00:
         95:ec:32:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:37:22 2026 by rpki-client