Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/egWOQdMCICFVY-fSqkSUyufqt9w.asa
File:                     egWOQdMCICFVY-fSqkSUyufqt9w.asa (raw, json)
Hash identifier:          KLL7Z4S+Cwpn2TeUDxPx/ngJ0cRsd9rXvcGeQB6iLDk=
Subject key identifier:   7A:05:8E:41:D3:02:20:21:55:63:E7:D2:AA:44:94:CA:E7:EA:B7:DC
Certificate issuer:       /CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
Certificate serial:       019C8B2D49B8C223C0894482EF50A49E082E
Authority key identifier: 5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/egWOQdMCICFVY-fSqkSUyufqt9w.asa
Signing time:             Mon 23 Feb 2026 15:45:26 +0000
ASPA not before:          Mon 23 Feb 2026 15:45:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            209200
Providers:                AS: 48789
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:8b:2d:49:b8:c2:23:c0:89:44:82:ef:50:a4:9e:08:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
        Validity
            Not Before: Feb 23 15:45:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7a058e41d30220215563e7d2aa4494cae7eab7dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:be:29:36:2f:b0:ef:f9:cb:89:00:42:f1:1a:
                    5d:34:a9:fe:01:25:e8:6d:49:db:3b:51:ad:af:67:
                    b7:61:b4:ae:06:7b:84:7b:3d:ef:a0:7a:5a:d8:ce:
                    eb:d4:8c:7a:b0:91:c8:c3:e3:8d:e0:a5:b9:bb:d9:
                    8c:11:a7:ea:3a:a4:25:91:2c:87:d1:66:a0:b6:58:
                    16:25:3c:7e:54:f1:44:c5:5f:33:b1:b5:d3:41:b3:
                    20:af:f6:07:7d:dd:d3:69:77:c5:8d:39:62:d3:6f:
                    30:c9:18:94:d2:a3:74:08:1b:83:64:aa:b9:90:52:
                    27:7d:a8:22:9b:47:6c:d7:d6:78:f0:96:0f:a1:d2:
                    9a:6f:d9:59:21:90:8f:d1:23:c9:3b:cc:0f:4e:d5:
                    1e:85:14:95:72:92:e9:83:7c:c3:24:5b:45:d5:dd:
                    1c:e6:96:51:9a:64:8c:7b:23:24:5d:b7:3b:09:9d:
                    54:a8:09:96:dd:db:55:e9:bf:1f:8a:36:bc:56:f7:
                    5d:34:e7:f6:69:89:9e:ec:1e:2f:1d:84:be:c0:36:
                    f2:3f:99:bd:60:ea:8c:af:08:81:ac:a9:92:01:e7:
                    08:93:19:9b:b3:eb:fd:c7:4e:7f:41:74:2a:40:b9:
                    86:4f:3e:4d:3a:68:89:71:19:64:08:16:98:dc:63:
                    a5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:05:8E:41:D3:02:20:21:55:63:E7:D2:AA:44:94:CA:E7:EA:B7:DC
            X509v3 Authority Key Identifier:
                keyid:5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/egWOQdMCICFVY-fSqkSUyufqt9w.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209200

    Signature Algorithm: sha256WithRSAEncryption
         da:22:cf:22:e5:c7:2d:e8:e6:4e:d5:02:e3:48:d9:ed:e2:8b:
         cc:38:08:ce:4d:65:f3:23:02:99:33:bf:8f:1b:b6:5f:49:26:
         25:f5:89:ff:a8:16:e9:00:f0:f6:55:7b:54:1b:4a:e6:78:d1:
         d3:84:9c:e9:a9:4e:d9:57:35:a7:fd:bc:c7:7c:a2:b4:83:ec:
         e3:04:c0:4d:a0:7d:b3:46:95:9d:cb:23:01:31:9e:b0:5f:ef:
         81:95:60:fa:39:c4:e6:50:b1:98:58:c0:a6:e4:d7:06:6d:21:
         a8:e7:33:2e:2b:82:db:2f:c0:37:6c:92:84:3b:7c:24:11:fd:
         d6:46:d0:fe:82:41:e9:50:70:cc:22:03:94:6a:41:a3:cb:76:
         f1:49:92:88:b3:da:b8:85:fe:8f:bc:23:5e:2b:ce:18:fc:22:
         32:d9:f5:5a:49:d8:20:53:69:00:ca:e2:f7:eb:02:a1:e1:59:
         1c:e1:15:33:6d:08:9b:5b:a8:45:59:88:a8:df:63:83:84:47:
         5c:9d:58:f8:b3:69:b6:ed:09:81:93:28:b3:5c:ca:7c:cb:c6:
         44:7b:85:b0:99:7f:dc:9d:bc:ed:1e:89:1f:b3:fe:d3:10:f9:
         03:79:bd:04:13:0b:97:2e:ae:ed:14:21:9c:5f:fc:90:1c:5d:
         36:c6:5a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:02:43 2026 by rpki-client