Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/08c87e-256c-4802-ae6c-e2a3ddb653d2/1/SjegFY-bg73RyFDQETCva36kqVo.asa
File:                     SjegFY-bg73RyFDQETCva36kqVo.asa (raw, json)
Hash identifier:          tJ7DlXPrtD85xuM0mM4j2KqjG3Y5z7UUAcw0fjYUsKk=
Subject key identifier:   4A:37:A0:15:8F:9B:83:BD:D1:C8:50:D0:11:30:AF:6B:7E:A4:A9:5A
Certificate issuer:       /CN=1a27ef63af3bc29b6f6418a499f02764a4383cb7
Certificate serial:       019FA8B8D1CA209F6A3346A0B8C81973915D
Authority key identifier: 1A:27:EF:63:AF:3B:C2:9B:6F:64:18:A4:99:F0:27:64:A4:38:3C:B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GifvY687wptvZBikmfAnZKQ4PLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/08c87e-256c-4802-ae6c-e2a3ddb653d2/1/SjegFY-bg73RyFDQETCva36kqVo.asa
Signing time:             Tue 28 Jul 2026 12:35:12 +0000
ASPA not before:          Tue 28 Jul 2026 12:35:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            215599
Providers:                AS: 50124
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/08c87e-256c-4802-ae6c-e2a3ddb653d2/1/GifvY687wptvZBikmfAnZKQ4PLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/08c87e-256c-4802-ae6c-e2a3ddb653d2/1/GifvY687wptvZBikmfAnZKQ4PLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GifvY687wptvZBikmfAnZKQ4PLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:b8:d1:ca:20:9f:6a:33:46:a0:b8:c8:19:73:91:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a27ef63af3bc29b6f6418a499f02764a4383cb7
        Validity
            Not Before: Jul 28 12:35:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4a37a0158f9b83bdd1c850d01130af6b7ea4a95a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ff:5d:66:81:d6:dd:75:14:88:21:12:00:4b:
                    80:8a:fb:9c:29:6a:1f:47:4f:a2:00:cb:74:7d:cf:
                    b3:58:fc:46:3f:ea:22:2d:da:cb:f3:14:24:12:5e:
                    7a:59:09:58:5d:cc:6a:f5:bc:9a:45:fa:d2:8f:fb:
                    e2:51:2c:4d:80:56:d8:05:f2:43:db:13:fd:77:81:
                    4e:05:6b:d2:18:66:db:34:1e:e6:db:d5:e9:59:25:
                    7a:8d:56:a4:ea:b9:06:b9:37:5b:7d:60:4d:30:26:
                    94:4a:50:06:bc:78:79:ff:4e:b5:3a:2c:5c:37:e5:
                    c0:d3:50:f0:54:14:e8:0e:a2:99:94:e8:20:8f:4f:
                    07:f4:3b:cc:c0:14:02:45:f3:e7:25:38:46:a5:70:
                    f2:71:96:e5:80:38:c8:7b:83:58:00:32:54:38:70:
                    4d:74:2a:29:57:e6:ad:71:a8:4a:aa:7d:3f:96:6b:
                    09:10:40:e3:26:43:80:cd:7f:43:4c:73:4f:32:5f:
                    af:1f:d1:73:82:bc:f9:36:e0:2b:9b:3b:b5:aa:8f:
                    23:b4:29:7b:91:5b:ae:00:07:48:46:38:a9:ba:fa:
                    b0:cb:64:4b:da:10:ff:dc:a0:a4:34:05:6d:37:cd:
                    a6:c7:17:cd:62:23:9e:1e:d5:7c:e4:e8:51:48:fa:
                    60:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:37:A0:15:8F:9B:83:BD:D1:C8:50:D0:11:30:AF:6B:7E:A4:A9:5A
            X509v3 Authority Key Identifier:
                keyid:1A:27:EF:63:AF:3B:C2:9B:6F:64:18:A4:99:F0:27:64:A4:38:3C:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GifvY687wptvZBikmfAnZKQ4PLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/08c87e-256c-4802-ae6c-e2a3ddb653d2/1/SjegFY-bg73RyFDQETCva36kqVo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/08c87e-256c-4802-ae6c-e2a3ddb653d2/1/GifvY687wptvZBikmfAnZKQ4PLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215599

    Signature Algorithm: sha256WithRSAEncryption
         15:da:dc:95:27:4b:3f:08:44:2e:ca:d0:8a:9e:7d:46:2b:2f:
         af:ac:51:3a:93:4d:7d:6f:41:91:8e:38:33:25:bc:e4:93:33:
         5a:03:8b:6a:52:e5:7c:6e:6d:6a:de:2e:fa:31:70:00:77:74:
         be:c0:4f:b0:05:7e:0b:d0:22:b9:73:8e:7b:3f:1d:bd:77:38:
         af:c6:a0:cc:e4:fa:07:e3:0a:ea:19:fe:c5:ae:20:b3:37:ee:
         2e:ee:2a:03:8f:eb:55:12:b7:40:72:9c:b6:fa:71:da:63:74:
         e0:6e:42:fa:bc:a3:68:7e:de:43:c1:9c:ad:1e:4c:22:6d:51:
         85:78:4e:83:09:88:28:12:26:d2:0f:b7:79:f3:6b:62:03:83:
         75:ac:9b:c4:a3:02:45:14:f9:c3:ef:85:c5:5d:9f:94:9d:dd:
         4a:2d:19:ca:a8:27:35:a5:b5:62:e8:bd:59:24:f6:09:9b:17:
         e9:f2:7c:d6:3d:da:63:18:fc:2b:c1:18:2e:4a:b5:40:cb:86:
         61:5a:ca:3a:eb:ad:70:54:39:39:34:98:ad:5c:c1:27:33:4d:
         44:c0:8e:ad:7d:28:0f:84:9d:70:21:05:04:92:22:c2:1f:df:
         ba:06:0d:16:ca:d5:b3:56:ce:08:3a:0f:9c:b0:e6:e4:03:94:
         6b:1d:4d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:23:24 2026 by rpki-client