Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/Abe8lBAp4ym_lOiJBaHo-ZSf0P0.asa
File:                     Abe8lBAp4ym_lOiJBaHo-ZSf0P0.asa (raw, json)
Hash identifier:          ZwGIBcduzoBeABc5t5DJNgUmOBS/j6x3Hm/DWW0QamM=
Subject key identifier:   01:B7:BC:94:10:29:E3:29:BF:94:E8:89:05:A1:E8:F9:94:9F:D0:FD
Certificate issuer:       /CN=51f29d184bcc50fe654ddef4015de17d246fd2a3
Certificate serial:       019F981D239275E31363D10131174B2326BE
Authority key identifier: 51:F2:9D:18:4B:CC:50:FE:65:4D:DE:F4:01:5D:E1:7D:24:6F:D2:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/Abe8lBAp4ym_lOiJBaHo-ZSf0P0.asa
Signing time:             Sat 25 Jul 2026 07:11:14 +0000
ASPA not before:          Sat 25 Jul 2026 07:11:14 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            206033
Providers:                AS: 9002
                          AS: 13335
                          AS: 20473
                          AS: 60068
                          AS: 136557
                          AS: 137409
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:98:1d:23:92:75:e3:13:63:d1:01:31:17:4b:23:26:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51f29d184bcc50fe654ddef4015de17d246fd2a3
        Validity
            Not Before: Jul 25 07:11:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=01b7bc941029e329bf94e88905a1e8f9949fd0fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:8a:63:2d:7d:d3:55:47:b4:9f:81:48:1b:c6:
                    5a:98:5e:c3:17:a5:f7:c7:fa:a5:1d:a1:b8:ed:81:
                    c6:f4:e2:05:21:22:2c:45:1f:72:a1:dc:4e:5d:af:
                    22:b9:7e:f4:83:89:43:cd:6a:b9:8e:b2:83:69:19:
                    c0:c8:0a:77:cc:0a:37:26:e2:4d:85:78:0b:98:13:
                    b8:61:e2:8a:1b:3c:b6:df:46:16:9e:e8:30:e5:d9:
                    d9:09:40:fa:d6:00:16:2a:1f:ea:a7:22:ef:16:fb:
                    85:33:5f:d4:11:0e:7d:72:9c:86:27:ec:df:d0:4c:
                    3f:8e:cf:e1:49:5a:21:b5:5c:3d:1d:30:21:a9:11:
                    96:57:4b:a7:80:9e:ad:26:af:f3:c2:f6:04:f0:7a:
                    16:43:e1:8a:6e:e1:8a:81:24:cc:83:51:2d:74:bc:
                    b6:9d:2e:b2:fb:f4:b3:22:74:77:c2:bd:20:b9:ae:
                    fd:25:17:dd:e4:19:e8:f0:80:39:ab:cc:35:eb:0a:
                    d4:c0:e1:9c:72:7c:37:77:ea:09:59:e4:ec:75:47:
                    77:7b:99:ce:f9:05:26:e1:34:e2:e1:32:70:79:44:
                    64:3e:6a:f2:76:7a:da:55:2d:d7:b0:8a:ab:2d:97:
                    9b:d9:48:f1:20:a4:1e:94:c5:47:3b:7c:86:ef:31:
                    05:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B7:BC:94:10:29:E3:29:BF:94:E8:89:05:A1:E8:F9:94:9F:D0:FD
            X509v3 Authority Key Identifier:
                keyid:51:F2:9D:18:4B:CC:50:FE:65:4D:DE:F4:01:5D:E1:7D:24:6F:D2:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/Abe8lBAp4ym_lOiJBaHo-ZSf0P0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206033

    Signature Algorithm: sha256WithRSAEncryption
         b1:7c:fc:0a:49:0e:b2:4f:78:38:9d:ed:32:cb:a7:b8:70:dc:
         20:a7:fd:0f:91:bc:c3:fd:0e:1f:c9:27:45:6d:59:26:f9:38:
         3f:7f:47:10:e9:60:df:3b:53:6b:13:96:4d:40:db:cb:9d:3e:
         68:60:7c:8f:5c:92:1f:05:03:07:34:24:b3:75:bd:0c:fb:84:
         94:f2:10:9d:ea:e9:3b:11:07:d6:94:5d:4d:36:c2:bf:15:6c:
         c8:40:90:c2:bd:84:b8:26:61:25:ac:df:91:26:5c:83:ff:b1:
         d8:0c:f8:0d:ed:4c:a4:f7:f7:9d:8b:9a:c8:eb:9b:bd:32:9d:
         5c:cf:5b:c0:af:95:7b:99:ca:60:1e:91:05:de:95:5f:99:ff:
         98:f2:93:48:02:61:d7:28:93:f9:70:15:47:7e:c9:52:99:ac:
         ce:fe:e4:64:11:3d:fb:a9:a5:56:08:19:eb:a0:43:ba:f3:43:
         3b:c3:ba:b2:1b:89:19:b6:ef:53:3c:ac:10:3d:07:56:6d:2d:
         3a:48:b4:68:60:de:fc:4a:11:07:dc:37:14:59:ee:78:cb:d0:
         8d:44:69:ce:88:62:48:f6:e0:b4:da:3c:c8:07:e7:9a:97:31:
         b9:76:e5:2c:0c:ec:ef:04:95:d6:1e:12:fa:b8:d5:13:ee:c2:
         e0:54:d7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 12:30:40 2026 by rpki-client