Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/jgD1GTXsm3n5JwyXP57oSoUwOXs.asa
File:                     jgD1GTXsm3n5JwyXP57oSoUwOXs.asa (raw, json)
Hash identifier:          nBQL1SbLriRKXkdqanEpebon9wOpjIUD2AKKZwRdH68=
Subject key identifier:   8E:00:F5:19:35:EC:9B:79:F9:27:0C:97:3F:9E:E8:4A:85:30:39:7B
Certificate issuer:       /CN=7299ce64a0f1624d7bb2d2969e5c11adbaa5485c
Certificate serial:       019D7C91724D3CBA94648D8D17B487968794
Authority key identifier: 72:99:CE:64:A0:F1:62:4D:7B:B2:D2:96:9E:5C:11:AD:BA:A5:48:5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/jgD1GTXsm3n5JwyXP57oSoUwOXs.asa
Signing time:             Sat 11 Apr 2026 12:43:19 +0000
ASPA not before:          Sat 11 Apr 2026 12:43:19 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214499
Providers:                AS: 5603
                          AS: 197579
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:7c:91:72:4d:3c:ba:94:64:8d:8d:17:b4:87:96:87:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7299ce64a0f1624d7bb2d2969e5c11adbaa5485c
        Validity
            Not Before: Apr 11 12:43:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8e00f51935ec9b79f9270c973f9ee84a8530397b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:97:94:0b:34:98:36:d8:fd:36:2f:91:90:85:
                    e5:a5:e9:f1:b4:c6:06:a4:93:ee:1b:23:0f:2a:fd:
                    49:f8:c3:ca:a7:43:90:dc:cf:ce:36:24:93:c7:f8:
                    0a:a8:f7:32:c9:ed:f6:9e:2b:38:58:e7:ad:de:5a:
                    f3:f6:f7:66:5b:90:aa:f9:5d:ca:7c:2f:29:e3:ca:
                    c3:8a:98:94:f1:08:4f:85:cf:38:6e:62:ca:81:88:
                    d9:64:e1:64:20:a5:e9:b9:a0:70:0a:40:7f:c1:c3:
                    73:ab:eb:7d:ce:c0:16:5f:a8:ea:61:3d:ae:b6:e1:
                    2d:71:e6:e3:58:aa:66:10:6c:fc:e7:ce:df:92:fe:
                    e0:f8:b7:bb:39:0e:1e:65:40:3b:48:66:79:df:5d:
                    20:5c:f1:cc:ee:9c:f3:37:90:3f:80:db:36:2f:73:
                    96:c8:89:95:92:76:9c:ad:17:fb:b1:a4:31:78:28:
                    af:32:28:a4:cd:12:be:6b:e5:1f:99:d7:53:91:ed:
                    90:9d:9b:9f:70:3a:a6:52:4d:77:46:09:a5:85:07:
                    88:ab:ef:77:aa:3c:a8:a6:c8:70:6d:0e:05:33:26:
                    05:ae:c3:89:d9:c2:21:78:3d:22:8f:9a:27:a6:54:
                    1c:5e:da:6e:cd:91:18:2b:28:88:4d:27:60:ff:08:
                    77:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:00:F5:19:35:EC:9B:79:F9:27:0C:97:3F:9E:E8:4A:85:30:39:7B
            X509v3 Authority Key Identifier:
                keyid:72:99:CE:64:A0:F1:62:4D:7B:B2:D2:96:9E:5C:11:AD:BA:A5:48:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/jgD1GTXsm3n5JwyXP57oSoUwOXs.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214499

    Signature Algorithm: sha256WithRSAEncryption
         09:30:a9:9d:e3:eb:60:d5:71:86:20:f7:c1:86:9a:2d:ec:e2:
         91:f2:5b:77:4e:5e:c6:61:1c:21:d0:c4:02:62:13:9b:de:d2:
         c1:8b:ac:86:dc:56:52:e7:22:99:98:9f:63:27:e8:2f:dc:82:
         37:44:a0:21:a9:d6:f7:82:3c:1a:31:f5:6f:6b:21:0d:06:c2:
         f6:82:fb:f3:c6:54:14:ca:85:e7:82:17:07:21:44:58:12:c3:
         39:e6:37:dc:28:a8:14:01:76:a2:bf:8e:19:01:95:6a:09:e3:
         b6:9a:56:64:49:2c:9a:c1:7b:04:26:60:3e:a1:8e:e2:93:ed:
         6d:6c:69:30:a5:13:ac:d6:d4:29:9c:f0:70:7e:5c:85:09:24:
         37:49:fe:28:93:85:7f:cf:7b:e5:a6:65:f6:bf:e4:e3:31:cd:
         fe:57:73:95:cc:1b:b2:14:43:0c:2b:8a:79:b9:cd:ee:42:14:
         11:5b:0c:51:99:d5:91:fc:01:e2:d2:ce:7e:fc:e9:1a:89:3c:
         0c:a1:ce:64:d6:2c:86:cc:df:0b:18:b8:38:7c:3b:3e:48:e8:
         a1:f3:97:e7:c2:f4:c2:8c:b0:05:21:f7:0e:03:4e:23:71:7a:
         b3:28:94:7f:e8:5f:aa:c9:6b:23:f9:62:93:af:0c:d8:73:ed:
         b3:59:bd:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:18:53 2026 by rpki-client