Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/GT7pZTJLcx4wvvTzLBrLYmXvQT8.asa
File:                     GT7pZTJLcx4wvvTzLBrLYmXvQT8.asa (raw, json)
Hash identifier:          /TnkKxjd0Hck7Slm7rWRT+Tknob7IBUp/DRYoMT5rBI=
Subject key identifier:   19:3E:E9:65:32:4B:73:1E:30:BE:F4:F3:2C:1A:CB:62:65:EF:41:3F
Certificate issuer:       /CN=647664ba5773614a3c44f90c12ae725548a75cd4
Certificate serial:       019C42D3F5347E5631DA9E17E35CC602937E
Authority key identifier: 64:76:64:BA:57:73:61:4A:3C:44:F9:0C:12:AE:72:55:48:A7:5C:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/GT7pZTJLcx4wvvTzLBrLYmXvQT8.asa
Signing time:             Mon 09 Feb 2026 14:35:12 +0000
ASPA not before:          Mon 09 Feb 2026 14:35:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            213449
Providers:                AS: 1299
                          AS: 6204
                          AS: 6939
                          AS: 11967
                          AS: 34927
                          AS: 47536
                          AS: 49600
                          AS: 58087
                          AS: 142064
                          AS: 200132
                          AS: 203446
                          AS: 211588
                          AS: 213753
                          AS: 214809
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 02:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:d3:f5:34:7e:56:31:da:9e:17:e3:5c:c6:02:93:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647664ba5773614a3c44f90c12ae725548a75cd4
        Validity
            Not Before: Feb  9 14:35:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=193ee965324b731e30bef4f32c1acb6265ef413f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a9:4d:be:58:fd:bd:8f:0a:4b:dc:6a:9c:d5:
                    a0:97:da:77:9a:f3:70:e1:c3:3f:e6:bf:c4:f5:09:
                    d5:f2:71:ad:ca:55:4b:2b:1e:01:b1:d7:b9:d6:50:
                    c9:2d:44:4a:df:07:d8:bb:8a:62:dc:37:4f:d0:63:
                    8c:fe:f6:cb:17:6d:4c:a8:08:f3:7b:0a:69:55:82:
                    11:fa:63:ce:c4:ec:21:ac:ec:36:3e:ae:ba:35:da:
                    a9:d4:4f:a2:5d:e0:4c:8d:e6:6a:c5:da:20:86:97:
                    45:eb:e9:ee:d7:74:da:a4:39:fb:9c:35:3a:99:99:
                    eb:62:ca:ad:b6:d8:46:c6:2f:0f:dc:1f:d4:63:4e:
                    60:bb:b4:2f:ab:4c:74:2d:2e:4f:39:0c:78:17:e6:
                    9e:be:8b:0e:b0:3d:ed:8f:fa:f0:ac:87:fd:66:0a:
                    05:54:a0:7d:45:78:31:60:10:27:bf:a7:58:2b:3a:
                    40:45:0e:df:3e:60:b4:fa:c8:b4:dd:b6:58:34:41:
                    08:dc:70:f1:d9:d4:37:fb:1d:40:a3:13:a6:3b:5f:
                    ec:2b:12:08:04:1d:d6:2a:91:dc:e0:a1:b7:50:6f:
                    28:63:49:7c:f2:0c:0c:27:f6:b8:dc:17:58:8e:00:
                    19:cc:92:89:42:16:05:ba:a4:e0:72:97:e4:fd:35:
                    3a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:3E:E9:65:32:4B:73:1E:30:BE:F4:F3:2C:1A:CB:62:65:EF:41:3F
            X509v3 Authority Key Identifier:
                keyid:64:76:64:BA:57:73:61:4A:3C:44:F9:0C:12:AE:72:55:48:A7:5C:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/GT7pZTJLcx4wvvTzLBrLYmXvQT8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213449

    Signature Algorithm: sha256WithRSAEncryption
         46:c5:83:f0:2c:a3:2e:e0:30:8a:3b:bc:47:69:a2:7f:23:d5:
         7e:67:f8:33:2f:41:2f:84:04:b3:93:01:3c:a3:52:60:a0:f0:
         35:6d:96:97:4c:a2:d6:50:2c:18:8a:98:08:3b:33:d7:d5:e3:
         ad:04:59:c2:ca:8c:e0:e2:1a:6b:0e:58:8d:39:ac:d6:84:e1:
         9b:c6:24:8a:37:39:d8:d4:7b:ae:b4:89:47:0b:04:06:a8:1b:
         49:a4:13:f8:3f:d1:af:46:a9:d5:8f:13:fc:15:19:9c:21:af:
         41:fb:f7:41:ff:3c:b1:76:78:a2:3f:9d:df:27:14:d8:56:16:
         d5:69:11:c2:28:26:59:da:90:b6:85:91:ae:ac:43:6f:ea:5b:
         2e:80:78:3f:b2:c9:3e:f4:d7:46:ce:29:78:b3:1e:87:d9:5b:
         d6:a0:5c:2e:07:38:bd:cf:10:9d:7f:a4:7f:66:01:b5:f9:1a:
         c5:31:4f:38:a3:67:16:11:d2:44:25:56:47:98:43:d4:bf:69:
         c3:ce:bf:9a:65:b0:3a:c4:ea:a3:9a:54:5d:e5:a7:bd:00:9c:
         40:4b:0f:ae:b8:f4:a0:3a:a8:60:9f:fe:8a:07:56:b2:5e:6b:
         7f:5e:bc:ed:e7:e8:56:27:8e:ec:52:d5:ee:f1:de:0d:dd:5a:
         e3:4e:96:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:02:40 2026 by rpki-client