Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/UUFYP2GnG27gknclmWjbFXee-5c.asa
File:                     UUFYP2GnG27gknclmWjbFXee-5c.asa (raw, json)
Hash identifier:          vtuGXz4SCbN+csRPRpu2i0eRfkh5mJ/Z4XlVSXzxMy4=
Subject key identifier:   51:41:58:3F:61:A7:1B:6E:E0:92:77:25:99:68:DB:15:77:9E:FB:97
Certificate issuer:       /CN=aac575cafa00bc41d57c494ac1f5dbcfee78332e
Certificate serial:       019D5EE910D02C2720CB1EE1DCFB6DB71C68
Authority key identifier: AA:C5:75:CA:FA:00:BC:41:D5:7C:49:4A:C1:F5:DB:CF:EE:78:33:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qsV1yvoAvEHVfElKwfXbz-54My4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/UUFYP2GnG27gknclmWjbFXee-5c.asa
Signing time:             Sun 05 Apr 2026 18:30:25 +0000
ASPA not before:          Sun 05 Apr 2026 18:30:25 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            206478
Providers:                AS: 15955
                          AS: 42162
                          AS: 58299
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qsV1yvoAvEHVfElKwfXbz-54My4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:5e:e9:10:d0:2c:27:20:cb:1e:e1:dc:fb:6d:b7:1c:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac575cafa00bc41d57c494ac1f5dbcfee78332e
        Validity
            Not Before: Apr  5 18:30:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5141583f61a71b6ee09277259968db15779efb97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9e:9b:e4:e4:81:cd:a8:72:57:63:e5:29:01:
                    22:4d:9e:7c:4d:18:3e:70:11:5e:09:ed:81:0f:ca:
                    5b:0d:0c:bc:54:e1:aa:71:cb:c8:d7:1e:a1:59:0a:
                    1f:39:d3:2a:2d:34:d6:b8:2e:df:24:95:41:f7:e5:
                    66:ac:6d:a7:39:47:56:d7:f2:12:ba:72:77:40:ba:
                    fb:2a:47:16:14:87:98:3d:9d:6f:85:15:5c:77:24:
                    61:f5:58:f4:04:dc:5b:92:ae:75:b9:42:e2:4e:28:
                    b9:48:f6:46:2c:69:9a:22:d1:b9:2e:50:f0:55:c9:
                    01:b9:35:e0:77:ed:e8:ef:c3:d6:1e:38:2b:ef:11:
                    40:a9:f6:65:b8:a4:af:ad:0d:45:f4:16:5d:69:d2:
                    23:dd:8e:bd:bf:99:17:6b:6f:1c:3f:8a:70:72:6a:
                    48:6d:d5:6c:ff:72:7a:96:b4:06:9d:40:a2:53:73:
                    d6:81:fb:4f:e1:65:b5:fd:31:16:d1:f0:8c:3e:12:
                    1d:0b:3a:cb:0c:4e:c0:41:a2:7a:6d:d3:c4:96:e4:
                    93:cf:7d:5f:3f:85:88:45:18:d1:13:56:40:ea:4c:
                    21:f1:71:c7:28:d3:22:d1:e6:85:99:5c:77:ce:10:
                    57:a5:9a:62:88:47:94:e5:0f:47:d9:8c:a8:ac:25:
                    a0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:41:58:3F:61:A7:1B:6E:E0:92:77:25:99:68:DB:15:77:9E:FB:97
            X509v3 Authority Key Identifier:
                keyid:AA:C5:75:CA:FA:00:BC:41:D5:7C:49:4A:C1:F5:DB:CF:EE:78:33:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsV1yvoAvEHVfElKwfXbz-54My4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/UUFYP2GnG27gknclmWjbFXee-5c.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206478

    Signature Algorithm: sha256WithRSAEncryption
         05:73:9d:c5:c9:9c:6e:bc:74:30:94:7d:31:5e:ae:d2:b7:05:
         98:68:d8:82:69:c3:c4:4a:ab:db:4f:e6:4f:ed:97:15:ee:24:
         25:4a:d2:eb:c2:c8:2d:95:ff:48:af:16:e3:f9:af:d5:6d:07:
         80:1d:3d:7e:07:17:4d:c7:76:7a:66:2b:d3:40:41:a0:13:f3:
         dd:9e:2c:cf:23:d2:f6:3c:13:6d:05:dc:aa:b0:27:9d:80:df:
         a9:e9:9b:49:64:60:02:41:ef:dd:d2:9a:23:e5:c0:88:e0:aa:
         42:6a:ad:99:c0:c8:8e:87:d8:23:74:50:2f:f1:76:d2:72:f2:
         19:c8:a1:59:73:f4:74:0d:f9:2d:53:4a:b5:9e:a3:f2:4e:e9:
         e3:ab:e6:8f:79:b5:50:12:f9:f4:b7:3c:20:3b:9a:f5:c9:56:
         67:ea:c8:b0:01:5a:c5:e0:5d:11:79:a0:eb:5a:38:a9:d6:c2:
         d7:fe:85:bc:bc:8a:66:af:42:ff:ab:25:e3:3e:ed:fb:a2:36:
         dc:97:ee:64:53:da:4c:77:a0:e0:cd:22:d9:ab:5b:51:2d:6d:
         e5:12:89:30:78:2f:73:a4:b4:6f:06:05:16:80:30:39:08:6a:
         7f:c3:ae:6a:5c:4e:3e:78:69:32:67:71:eb:44:c2:43:da:a6:
         f2:14:09:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:45:25 2026 by rpki-client