Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/ZXtAvGieZF0UNxjzkMUWW7L33Fg.asa
File:                     ZXtAvGieZF0UNxjzkMUWW7L33Fg.asa (raw, json)
Hash identifier:          IfrPVXvXZXPI5Bs8Ll1fYOxjNpHmlPmR4BZz8+zT3CE=
Subject key identifier:   65:7B:40:BC:68:9E:64:5D:14:37:18:F3:90:C5:16:5B:B2:F7:DC:58
Certificate issuer:       /CN=07664130764480ef2dd8178116b5dd0c59d2e994
Certificate serial:       019C200E8D8FF60988A96F54A7F0598110D9
Authority key identifier: 07:66:41:30:76:44:80:EF:2D:D8:17:81:16:B5:DD:0C:59:D2:E9:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/ZXtAvGieZF0UNxjzkMUWW7L33Fg.asa
Signing time:             Mon 02 Feb 2026 20:32:30 +0000
ASPA not before:          Mon 02 Feb 2026 20:32:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214476
Providers:                AS: 13030
                          AS: 34927
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:20:0e:8d:8f:f6:09:88:a9:6f:54:a7:f0:59:81:10:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07664130764480ef2dd8178116b5dd0c59d2e994
        Validity
            Not Before: Feb  2 20:32:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=657b40bc689e645d143718f390c5165bb2f7dc58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:39:19:25:54:5b:2b:8e:3d:ed:55:67:a8:b2:
                    84:bb:ab:61:a3:c7:0d:ba:63:54:ff:2a:ad:89:85:
                    f5:ff:24:6b:36:9a:ec:29:7f:ca:5e:7a:c6:f4:ed:
                    81:5c:34:a7:25:3d:d5:43:f6:e2:e0:6d:68:e9:b0:
                    50:74:cb:79:75:5a:df:7f:2c:09:44:d4:e4:8d:ce:
                    2f:98:1b:10:47:58:25:c9:07:d0:90:94:31:9b:4b:
                    4f:d4:f4:d4:89:1c:ea:35:87:ba:1d:66:cf:9e:d0:
                    83:50:4f:3a:fb:6e:24:b9:bd:b3:e2:e4:10:73:ac:
                    35:50:ab:61:33:1c:fd:4b:0c:78:49:76:22:13:fc:
                    1f:a5:6b:33:f0:46:e4:72:7d:32:b7:d7:89:a8:5c:
                    36:2d:77:2e:c5:fb:7e:9b:6f:bf:55:56:c8:6a:1c:
                    ea:cb:78:a0:96:4b:e3:69:28:3a:db:44:f1:9c:9d:
                    92:b1:20:94:6a:55:97:b0:e6:7f:b9:ac:fb:ca:89:
                    32:43:ae:81:b2:c1:e6:d2:d9:64:f8:cb:99:66:68:
                    c8:68:ec:0b:ad:41:bd:83:14:15:e1:0c:bf:92:b1:
                    9b:e8:57:85:f8:4d:21:11:95:5e:da:a0:b8:aa:e3:
                    30:bf:71:2c:0a:e7:da:7c:08:5c:31:bd:39:9f:3b:
                    46:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:7B:40:BC:68:9E:64:5D:14:37:18:F3:90:C5:16:5B:B2:F7:DC:58
            X509v3 Authority Key Identifier:
                keyid:07:66:41:30:76:44:80:EF:2D:D8:17:81:16:B5:DD:0C:59:D2:E9:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/ZXtAvGieZF0UNxjzkMUWW7L33Fg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214476

    Signature Algorithm: sha256WithRSAEncryption
         6d:72:60:38:b4:86:d0:90:3d:5c:65:13:56:04:5c:72:63:4b:
         6b:98:8e:8e:62:25:9d:37:f2:05:7d:7b:32:92:4d:ae:b5:97:
         41:9d:32:4f:20:60:80:b9:35:f0:9f:67:f7:4a:a3:03:45:95:
         89:7f:60:73:d0:72:e8:00:a9:f9:15:6b:96:2f:1d:ae:65:30:
         38:a0:3b:03:1d:cc:3a:11:31:3f:71:f4:65:0e:95:ee:8a:00:
         eb:18:cd:83:ed:f6:58:12:5d:b1:bd:13:23:c1:65:de:24:ec:
         87:5e:4e:af:b1:c7:bc:ec:71:88:32:ba:3e:10:a4:e6:69:db:
         c8:64:25:50:ab:b6:8f:d0:00:2d:64:7c:1c:2e:c8:48:56:3e:
         ef:ec:90:5b:32:5d:3b:b9:9d:b0:c6:57:af:1a:09:69:7f:b0:
         38:23:96:3a:96:fd:76:c5:1a:bf:41:d2:bc:57:88:b4:5b:b9:
         38:b0:c7:30:92:65:c9:9c:b9:cc:db:43:27:c3:6a:4f:c6:00:
         e9:9e:a9:75:e0:34:05:4e:14:fb:86:ce:33:7b:77:74:76:b7:
         80:d1:09:3c:fb:51:d2:62:4e:8b:f3:ee:da:16:87:ba:8a:35:
         ac:94:a8:60:58:c7:a6:33:1d:30:ad:0f:ed:53:29:fd:2a:ff:
         d6:1c:c5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:02:49 2026 by rpki-client