Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/f00f6f-9581-43fb-ac57-026ca26f5f4d/1/U4eblVEKc4IZaVuSkD_ZZ5nl1F4.asa
File:                     U4eblVEKc4IZaVuSkD_ZZ5nl1F4.asa (raw, json)
Hash identifier:          7ysjqKeh8pWQ5x4cFgiRYGEspiKKEMK6cNLUDt3h7Lg=
Subject key identifier:   53:87:9B:95:51:0A:73:82:19:69:5B:92:90:3F:D9:67:99:E5:D4:5E
Certificate issuer:       /CN=e4c927f191856f8c338a08274180eb2c233014fe
Certificate serial:       01A1320CC0E6DC787A201DF08458523F4DE3
Authority key identifier: E4:C9:27:F1:91:85:6F:8C:33:8A:08:27:41:80:EB:2C:23:30:14:FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Mkn8ZGFb4wziggnQYDrLCMwFP4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/f00f6f-9581-43fb-ac57-026ca26f5f4d/1/U4eblVEKc4IZaVuSkD_ZZ5nl1F4.asa
Signing time:             Mon 12 Oct 2026 21:37:38 +0000
ASPA not before:          Mon 12 Oct 2026 21:37:38 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            210349
Providers:                AS: 34872
                          AS: 52025
                          AS: 205684
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/f00f6f-9581-43fb-ac57-026ca26f5f4d/1/5Mkn8ZGFb4wziggnQYDrLCMwFP4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/f00f6f-9581-43fb-ac57-026ca26f5f4d/1/5Mkn8ZGFb4wziggnQYDrLCMwFP4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Mkn8ZGFb4wziggnQYDrLCMwFP4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 08:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:32:0c:c0:e6:dc:78:7a:20:1d:f0:84:58:52:3f:4d:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4c927f191856f8c338a08274180eb2c233014fe
        Validity
            Not Before: Oct 12 21:37:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=53879b95510a738219695b92903fd96799e5d45e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cd:7a:3c:37:aa:5c:2c:84:f7:8e:2f:a9:ea:
                    5e:34:de:ec:81:5f:96:01:0a:e5:45:76:7f:0c:13:
                    c3:c7:89:32:5f:1a:0d:b8:30:34:92:12:7b:29:f5:
                    c8:a7:fc:35:b9:ac:f0:c5:57:55:b9:76:af:f1:42:
                    85:44:d1:58:cf:d2:c5:2c:f5:f2:bf:15:fe:ae:f0:
                    3e:62:00:30:2d:e0:ce:5e:09:36:87:65:d7:b4:7d:
                    db:64:24:94:f3:83:cb:f6:e6:02:27:47:34:f9:e0:
                    d9:1b:85:f2:13:b0:1a:bd:5e:ff:40:68:40:fb:8c:
                    f4:a1:59:a5:01:53:ba:95:76:e0:f4:1d:42:53:59:
                    f1:d1:18:ab:0f:ce:61:cb:b5:72:ac:3c:d8:ef:78:
                    bf:f0:a4:13:06:09:71:4b:24:cf:62:f5:3d:7d:f5:
                    95:8b:4a:f6:41:9d:b0:66:35:8f:89:4f:89:f4:b5:
                    01:a5:a7:af:be:ed:d1:6d:04:1a:de:9a:eb:a3:3c:
                    a6:d7:8a:ea:16:ff:2b:2d:1e:8e:9c:90:7a:86:f2:
                    fa:9e:bc:3d:10:19:f0:12:d9:36:d3:16:80:99:da:
                    a6:69:fc:fa:90:50:aa:de:0b:dc:39:20:a5:1f:18:
                    0b:69:78:8a:1f:09:49:37:d2:9a:ea:9e:15:cb:77:
                    5c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:87:9B:95:51:0A:73:82:19:69:5B:92:90:3F:D9:67:99:E5:D4:5E
            X509v3 Authority Key Identifier:
                keyid:E4:C9:27:F1:91:85:6F:8C:33:8A:08:27:41:80:EB:2C:23:30:14:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mkn8ZGFb4wziggnQYDrLCMwFP4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/f00f6f-9581-43fb-ac57-026ca26f5f4d/1/U4eblVEKc4IZaVuSkD_ZZ5nl1F4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/f00f6f-9581-43fb-ac57-026ca26f5f4d/1/5Mkn8ZGFb4wziggnQYDrLCMwFP4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210349

    Signature Algorithm: sha256WithRSAEncryption
         7c:8d:2c:36:51:da:27:d8:56:0a:a9:74:d8:91:d4:f7:1f:b5:
         1f:03:40:ec:05:d1:a7:77:79:74:68:e2:5b:b5:03:c8:2f:1d:
         e5:b8:94:37:8c:10:5f:bc:50:92:04:54:aa:c1:78:6f:e5:5b:
         42:9b:ef:c3:fb:44:6c:86:db:77:cb:0a:78:05:91:a7:b9:65:
         50:e5:91:dc:fe:bc:48:d8:68:73:e2:2a:3b:bd:68:02:b3:06:
         4e:73:4d:d9:9e:2a:69:13:a0:13:f7:c9:f7:24:43:a1:e1:c3:
         37:0e:0d:73:55:00:ae:9b:25:63:c7:fc:76:39:87:9f:7e:cb:
         1e:04:31:d8:11:96:8a:b5:86:ab:af:70:78:dd:fa:87:55:35:
         6f:30:3d:8c:88:e5:3a:e6:a0:68:23:fe:44:a1:24:bd:00:c6:
         4c:a2:55:0e:c1:36:d9:1f:1f:da:78:98:59:9a:1b:1c:61:f2:
         63:d9:bd:c5:29:28:3a:8c:a7:52:d1:3a:3f:b6:0a:e8:14:b2:
         64:b4:ed:41:68:ca:2e:0f:00:14:4c:e6:79:d4:09:8b:7a:e1:
         07:8d:e8:25:06:af:18:9a:f5:b7:bb:c0:98:82:76:e8:df:04:
         45:37:2f:b6:a8:6f:b2:1a:92:68:9e:85:b6:f2:be:bd:ad:63:
         74:89:77:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 18:52:02 2026 by rpki-client