Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/96UsaTKEjdZ3wGsAHj4Q93Aoh6I.asa
File:                     96UsaTKEjdZ3wGsAHj4Q93Aoh6I.asa (raw, json)
Hash identifier:          /HHj4PFLDbsQcaDY5XUjTsmz/wfOfGvG+NtQ/eHmb0I=
Subject key identifier:   F7:A5:2C:69:32:84:8D:D6:77:C0:6B:00:1E:3E:10:F7:70:28:87:A2
Certificate issuer:       /CN=51f29d184bcc50fe654ddef4015de17d246fd2a3
Certificate serial:       019D7EC7EED5D54589DE85F96C38D6E90398
Authority key identifier: 51:F2:9D:18:4B:CC:50:FE:65:4D:DE:F4:01:5D:E1:7D:24:6F:D2:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/96UsaTKEjdZ3wGsAHj4Q93Aoh6I.asa
Signing time:             Sat 11 Apr 2026 23:02:05 +0000
ASPA not before:          Sat 11 Apr 2026 23:02:05 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            206033
Providers:                AS: 13335
                          AS: 20473
                          AS: 52025
                          AS: 60068
                          AS: 136557
                          AS: 137409
                          AS: 199524
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:7e:c7:ee:d5:d5:45:89:de:85:f9:6c:38:d6:e9:03:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51f29d184bcc50fe654ddef4015de17d246fd2a3
        Validity
            Not Before: Apr 11 23:02:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f7a52c6932848dd677c06b001e3e10f7702887a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:39:09:8f:f6:7e:48:8e:f9:9b:39:2f:c4:47:
                    d5:ee:83:8d:66:5f:35:6d:df:f8:bc:33:68:b8:e0:
                    64:c7:86:f7:65:f8:76:76:72:66:3e:be:d9:0b:77:
                    5f:0a:e5:f1:06:04:71:d2:f6:12:0a:dd:f4:88:a1:
                    a6:da:e3:b0:04:46:4b:bb:4e:a8:4e:81:7a:29:e0:
                    1c:62:e4:e0:51:67:b7:c8:4e:cd:ff:c8:2a:6d:e4:
                    47:7a:be:ba:ce:c3:71:94:d0:c2:f0:4f:4c:f4:1d:
                    8f:a2:29:0b:8e:4e:a8:ad:3c:f1:a5:7c:15:46:27:
                    4a:8c:0b:81:55:ba:34:64:06:83:5a:89:36:c0:c8:
                    6d:bc:29:58:a1:6f:04:90:8a:b6:4f:5f:e5:cd:99:
                    3e:da:54:f6:88:a1:e4:e1:12:12:c1:bb:d5:2d:8b:
                    e8:4e:51:b2:b9:85:c9:23:fb:8b:39:f1:6c:93:20:
                    49:86:1d:8b:10:84:64:0d:18:13:fa:fd:00:1d:b1:
                    b4:bd:7f:21:5a:c9:fe:65:c2:7d:3e:1c:e5:31:56:
                    d1:09:b8:d2:43:32:00:8e:44:5b:c6:27:eb:c1:72:
                    dc:88:6e:93:7f:29:85:d6:f7:19:92:87:72:2b:75:
                    cc:13:22:72:5e:46:61:40:4f:ae:94:f6:00:24:54:
                    08:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A5:2C:69:32:84:8D:D6:77:C0:6B:00:1E:3E:10:F7:70:28:87:A2
            X509v3 Authority Key Identifier:
                keyid:51:F2:9D:18:4B:CC:50:FE:65:4D:DE:F4:01:5D:E1:7D:24:6F:D2:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/96UsaTKEjdZ3wGsAHj4Q93Aoh6I.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206033

    Signature Algorithm: sha256WithRSAEncryption
         1b:14:67:cf:d4:63:69:c9:de:b5:fb:e3:9e:6e:cd:0e:0d:4f:
         56:20:a3:5f:c8:22:41:04:32:1c:df:a4:0d:82:21:da:d1:fe:
         bf:f2:cf:90:a0:80:7b:b6:42:67:34:da:8d:ae:f1:7b:d8:35:
         25:72:38:9b:a2:1d:f4:02:73:a7:ce:30:f6:d7:e8:3a:e3:a5:
         d2:83:3c:90:9e:9b:3c:9e:17:59:b4:06:88:13:0a:32:41:fe:
         9d:8c:aa:bf:a8:51:b3:96:ae:1b:41:e3:d0:0c:0a:8e:65:df:
         90:04:00:61:8c:9a:55:06:45:59:fc:c4:45:bc:13:77:55:da:
         9d:c7:18:b1:18:ee:b6:7b:28:36:93:e4:5a:35:44:75:96:37:
         e7:e9:8c:ce:a6:35:a7:a3:c1:46:a3:27:50:8b:04:2c:20:4d:
         66:a1:5c:2e:0f:04:90:ab:bb:b7:ca:2a:46:ec:ce:56:0f:19:
         19:27:53:75:1a:fc:6a:b7:27:2f:7c:e6:bf:8a:c2:54:19:99:
         15:ff:b3:57:dc:af:52:f9:d2:12:a3:83:e7:08:8f:35:77:93:
         ea:72:f1:11:a1:53:13:ad:20:59:d4:a2:bb:c8:aa:5b:e2:d9:
         26:57:ae:58:98:99:b1:49:01:8d:1e:f3:0a:e7:4e:de:01:b3:
         9b:65:4e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:54:32 2026 by rpki-client