Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/zkLVUigEz4LNZ2zhuWJBHwJfHuo.asa
File:                     zkLVUigEz4LNZ2zhuWJBHwJfHuo.asa (raw, json)
Hash identifier:          PXcCM5Lh6x9uec+divpobIpUSKP+kseMCox7ZsGLoDk=
Subject key identifier:   CE:42:D5:52:28:04:CF:82:CD:67:6C:E1:B9:62:41:1F:02:5F:1E:EA
Certificate issuer:       /CN=f1750017dc0d936e9aa166931937df7892afe9f1
Certificate serial:       019FA60021D5808F8B85D0647CBC1B364C47
Authority key identifier: F1:75:00:17:DC:0D:93:6E:9A:A1:66:93:19:37:DF:78:92:AF:E9:F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8XUAF9wNk26aoWaTGTffeJKv6fE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/zkLVUigEz4LNZ2zhuWJBHwJfHuo.asa
Signing time:             Mon 27 Jul 2026 23:54:14 +0000
ASPA not before:          Mon 27 Jul 2026 23:54:14 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            205413
Providers:                AS: 2027
                          AS: 207849
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8XUAF9wNk26aoWaTGTffeJKv6fE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a6:00:21:d5:80:8f:8b:85:d0:64:7c:bc:1b:36:4c:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1750017dc0d936e9aa166931937df7892afe9f1
        Validity
            Not Before: Jul 27 23:54:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ce42d5522804cf82cd676ce1b962411f025f1eea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:45:95:a5:7a:a0:81:4c:ec:b6:8e:86:81:d3:
                    e2:b0:23:9d:c5:b7:63:1a:4e:49:d7:7d:05:d3:11:
                    57:d3:0f:42:55:50:b0:10:11:80:ed:20:bb:ea:78:
                    15:e3:fc:8c:90:ad:01:d3:2d:94:5b:e4:db:fc:17:
                    0a:fe:6e:8e:b4:f2:8c:6b:d8:e4:b1:a6:0b:7e:84:
                    3b:0c:0d:8f:25:1f:9d:82:55:1c:9f:29:dd:20:8d:
                    11:cd:ac:02:bb:90:da:9e:e8:c6:3b:3e:c8:82:40:
                    b5:c1:b3:f5:d8:39:fe:82:d5:75:db:d3:f6:ce:96:
                    45:5a:fd:7b:3a:18:9c:e8:0d:eb:95:6e:94:23:96:
                    d9:8c:fe:61:f9:c3:84:d2:5a:d2:ac:0d:33:22:2c:
                    49:a7:3e:2f:8a:ae:df:69:5a:62:cc:b0:da:42:36:
                    88:c1:e4:ff:de:4b:2c:c0:8c:f7:6c:2a:2f:f7:f7:
                    56:8e:f5:fb:26:d9:bb:4d:ff:dd:45:39:42:1e:2b:
                    9d:d6:02:73:a6:28:4d:6e:8a:52:cb:46:f9:6f:dd:
                    dc:55:d8:42:4b:b7:c5:d6:a2:41:66:32:b5:80:70:
                    35:a8:eb:a0:72:63:f8:85:5c:20:61:de:64:8a:12:
                    0f:3c:7b:77:f3:79:fc:63:00:84:61:77:6b:85:19:
                    fe:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:42:D5:52:28:04:CF:82:CD:67:6C:E1:B9:62:41:1F:02:5F:1E:EA
            X509v3 Authority Key Identifier:
                keyid:F1:75:00:17:DC:0D:93:6E:9A:A1:66:93:19:37:DF:78:92:AF:E9:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XUAF9wNk26aoWaTGTffeJKv6fE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/zkLVUigEz4LNZ2zhuWJBHwJfHuo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205413

    Signature Algorithm: sha256WithRSAEncryption
         36:1b:a0:88:0b:29:26:5f:42:d6:37:e2:10:57:68:11:0f:50:
         47:87:c3:b1:f8:3f:cd:06:02:ac:bb:d9:27:31:b8:f5:52:b5:
         57:1e:e2:c1:1d:32:1a:55:96:e5:8e:ec:95:94:27:84:c5:cf:
         2e:62:59:0a:5a:cb:ab:8b:5f:bc:1d:7a:51:58:4b:e2:51:a7:
         21:7d:01:b8:8e:a2:b2:df:0b:57:ee:5f:3d:73:58:87:02:2c:
         99:6c:49:1d:b1:dd:80:df:09:63:8f:fd:ac:bf:83:f2:5c:92:
         74:dc:15:b2:ac:64:50:4a:28:7f:a6:49:5e:38:d5:d3:20:45:
         6b:69:21:de:5b:22:0f:e1:a9:93:5b:b6:06:2b:26:04:ad:6d:
         44:13:83:12:e1:17:30:e4:99:d3:4f:84:7b:2f:f7:9b:4a:1d:
         15:de:0f:b3:2e:53:90:a5:8e:75:c6:6f:65:5b:43:f1:f1:e5:
         4b:e8:cb:ce:96:fd:0b:e8:96:10:e0:d8:3c:dc:a2:42:f4:2a:
         ae:36:0f:b4:0b:70:e1:26:8b:38:0a:3a:ff:8e:20:6d:fd:96:
         aa:7a:31:e3:35:f3:a3:d4:5f:52:5d:02:24:ed:62:e0:2c:04:
         a7:c9:41:a8:46:09:95:02:9b:01:47:98:e3:bd:2b:54:68:64:
         e7:7b:9d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 12:31:11 2026 by rpki-client