Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/LH2PXydQzSuepDdoUQdoR47rCyM.asa
File:                     LH2PXydQzSuepDdoUQdoR47rCyM.asa (raw, json)
Hash identifier:          l6vxwAT+mjE8hg/FgROSMXiuGe3hVbBF986r/HMD6bc=
Subject key identifier:   2C:7D:8F:5F:27:50:CD:2B:9E:A4:37:68:51:07:68:47:8E:EB:0B:23
Certificate issuer:       /CN=51f29d184bcc50fe654ddef4015de17d246fd2a3
Certificate serial:       019C35B138A90F069633D50B3DFB6BAB4E9D
Authority key identifier: 51:F2:9D:18:4B:CC:50:FE:65:4D:DE:F4:01:5D:E1:7D:24:6F:D2:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/LH2PXydQzSuepDdoUQdoR47rCyM.asa
Signing time:             Sat 07 Feb 2026 01:22:12 +0000
ASPA not before:          Sat 07 Feb 2026 01:22:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            206033
Providers:                AS: 1002
                          AS: 13335
                          AS: 20473
                          AS: 49544
                          AS: 52025
                          AS: 60068
                          AS: 137409
                          AS: 396356
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 04:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:35:b1:38:a9:0f:06:96:33:d5:0b:3d:fb:6b:ab:4e:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51f29d184bcc50fe654ddef4015de17d246fd2a3
        Validity
            Not Before: Feb  7 01:22:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2c7d8f5f2750cd2b9ea43768510768478eeb0b23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:51:bb:c0:2d:9d:0d:16:f7:aa:92:b0:64:bd:
                    40:81:a3:9a:d7:9c:dc:c6:2e:cc:8d:3d:86:70:9a:
                    1c:31:e3:25:56:ec:32:a2:ca:78:f5:68:5a:65:79:
                    0a:24:09:f0:35:25:e7:34:2f:69:82:92:2b:e3:06:
                    14:ad:ec:43:53:31:04:1c:24:f9:02:a9:83:16:04:
                    d2:5d:62:c2:d0:94:e9:83:19:12:30:2b:b0:71:ac:
                    b7:cf:38:7c:ba:47:bc:3f:aa:5a:75:88:38:10:d7:
                    0b:4e:b0:30:e7:30:ba:74:73:1f:2a:bc:7d:f8:8a:
                    37:b0:30:df:82:8d:c9:cf:97:c3:75:72:3b:b3:0b:
                    ac:7e:b4:c3:36:e2:5e:84:1c:68:20:3a:b4:46:33:
                    77:cc:06:6f:4f:78:c8:10:8f:2c:37:25:6e:27:8f:
                    ac:0b:a7:53:3f:bc:64:99:85:ad:d4:34:2b:42:61:
                    e0:ae:1c:14:57:ad:7f:c2:2f:df:70:99:09:f1:6f:
                    6e:f7:21:fa:54:7a:83:bd:4f:c7:42:4e:01:5d:9a:
                    03:9a:7d:cd:fd:37:e5:d8:33:f6:d3:83:d2:9c:ad:
                    e4:15:81:a5:1b:39:a0:4a:b3:46:f5:6f:73:7f:63:
                    6e:ef:3d:5e:4e:90:47:6b:a4:8e:c0:26:a6:25:23:
                    fc:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:7D:8F:5F:27:50:CD:2B:9E:A4:37:68:51:07:68:47:8E:EB:0B:23
            X509v3 Authority Key Identifier:
                keyid:51:F2:9D:18:4B:CC:50:FE:65:4D:DE:F4:01:5D:E1:7D:24:6F:D2:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/LH2PXydQzSuepDdoUQdoR47rCyM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206033

    Signature Algorithm: sha256WithRSAEncryption
         62:91:3c:26:87:4c:f7:8d:f1:2e:54:25:21:6a:55:3c:7e:21:
         ef:ea:fd:a0:bc:8e:a5:ed:80:20:86:b2:ad:ed:e1:d8:ca:19:
         2f:66:be:f6:91:6f:82:c3:df:e5:89:20:b7:41:cb:93:38:50:
         42:df:57:32:3a:86:d3:63:06:e3:67:6d:25:8a:c1:04:e5:fc:
         ef:c9:e7:d1:3a:45:95:42:04:eb:35:34:14:fc:4f:90:f0:a6:
         22:c3:2d:4c:33:16:49:9e:92:44:7d:8f:47:09:37:9d:66:4f:
         db:39:07:90:6e:27:6d:46:25:ab:94:90:65:8a:fe:7f:d0:4e:
         0a:e3:2f:9d:ff:a8:90:dd:16:5c:48:e8:19:7f:70:bb:b6:42:
         8f:a7:fb:2e:54:48:82:c9:4c:ca:cf:7f:ff:52:7b:2c:0f:25:
         05:b3:6b:ee:cd:c7:ac:09:25:60:be:af:29:c4:27:fe:ce:23:
         18:4d:9c:56:0c:f2:4a:e7:14:36:40:0a:1b:67:40:29:68:c6:
         7a:57:50:f1:a3:a2:0c:b0:7a:57:2a:5e:ab:fc:aa:a7:79:60:
         e4:bf:67:a1:3b:4c:e1:ab:99:02:1c:bc:c0:7a:6f:2f:31:12:
         5c:0e:fc:bc:6b:fd:b5:53:52:bf:93:62:2b:b3:d0:e6:35:db:
         ee:ae:44:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:02:10 2026 by rpki-client