Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/LjNmY6j80e5Z-XSgjG-bQsPZy0E.asa
File:                     LjNmY6j80e5Z-XSgjG-bQsPZy0E.asa (raw, json)
Hash identifier:          bHfBhjpP6ZYXKfpTvBEzIvQ1XzENtXIscNWtd4z1rmc=
Subject key identifier:   2E:33:66:63:A8:FC:D1:EE:59:F9:74:A0:8C:6F:9B:42:C3:D9:CB:41
Certificate issuer:       /CN=be7c79e9a21db26bd6ae0750276db1b0afa7ecdb
Certificate serial:       01A154E6DEA601B59C1A06F53CD85AA9E441
Authority key identifier: BE:7C:79:E9:A2:1D:B2:6B:D6:AE:07:50:27:6D:B1:B0:AF:A7:EC:DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vnx56aIdsmvWrgdQJ22xsK-n7Ns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/LjNmY6j80e5Z-XSgjG-bQsPZy0E.asa
Signing time:             Mon 19 Oct 2026 16:02:58 +0000
ASPA not before:          Mon 19 Oct 2026 16:02:58 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            213748
Providers:                AS: 20473
                          AS: 34872
                          AS: 41108
                          AS: 52025
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vnx56aIdsmvWrgdQJ22xsK-n7Ns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 01:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:54:e6:de:a6:01:b5:9c:1a:06:f5:3c:d8:5a:a9:e4:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be7c79e9a21db26bd6ae0750276db1b0afa7ecdb
        Validity
            Not Before: Oct 19 16:02:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2e336663a8fcd1ee59f974a08c6f9b42c3d9cb41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:73:27:9a:90:5b:51:7e:1c:18:59:93:94:7d:
                    1c:60:96:ad:37:4d:ea:15:31:e7:f4:e1:9f:25:b6:
                    84:e7:a0:44:9b:16:68:5e:33:a9:16:5d:d6:0d:1e:
                    09:bb:9d:34:8b:1e:d6:cb:86:ec:1d:6a:35:14:a4:
                    2a:1f:43:11:c1:c2:32:e3:21:71:fd:50:38:44:2f:
                    29:c0:ee:de:10:de:55:bd:b1:82:e3:10:f7:fc:4e:
                    fb:da:2e:6a:d3:30:71:fb:7a:2a:77:44:da:b1:4a:
                    1b:35:d3:ec:5f:55:13:3b:d3:f3:fc:14:c3:4a:3d:
                    7c:8d:bb:c1:79:0a:7c:b3:0e:02:6c:69:25:51:58:
                    36:f7:80:1b:79:d7:99:25:a2:fc:ed:7f:e5:8d:eb:
                    8d:8f:4f:aa:41:f5:da:57:47:74:f3:76:59:b3:96:
                    2a:a9:7d:f8:c2:0a:2f:ba:a0:99:dc:5d:60:9c:24:
                    a5:38:29:ce:6b:99:aa:30:77:bc:2f:65:f1:fd:49:
                    99:62:a4:71:81:07:0f:7a:df:80:05:b6:ec:85:16:
                    32:8d:9d:fa:30:c6:52:15:60:d8:43:0f:52:12:40:
                    82:73:bc:df:77:df:f4:e4:88:6d:ff:18:1b:cf:02:
                    b4:97:e5:af:20:9b:ca:b9:f7:6f:61:c2:82:73:0b:
                    a0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:33:66:63:A8:FC:D1:EE:59:F9:74:A0:8C:6F:9B:42:C3:D9:CB:41
            X509v3 Authority Key Identifier:
                keyid:BE:7C:79:E9:A2:1D:B2:6B:D6:AE:07:50:27:6D:B1:B0:AF:A7:EC:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnx56aIdsmvWrgdQJ22xsK-n7Ns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/LjNmY6j80e5Z-XSgjG-bQsPZy0E.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213748

    Signature Algorithm: sha256WithRSAEncryption
         ad:69:ce:6c:c1:97:26:bd:26:e8:6f:74:ef:20:69:8d:5f:b2:
         b9:ee:45:a4:ed:b3:a2:51:55:13:93:a6:4f:94:dd:2f:12:80:
         37:3e:78:34:2c:ed:97:fa:5b:ae:d2:77:22:6e:54:99:4c:a3:
         dd:0f:75:03:97:4b:39:62:a4:1b:c7:29:20:f0:11:5a:f6:7e:
         6b:72:e2:72:1e:45:41:6c:ea:66:7d:75:ce:c5:d5:24:41:49:
         65:3b:69:4a:c0:dc:65:81:3e:0a:fe:7c:46:0b:03:b1:2e:e4:
         8b:61:29:11:42:e8:7d:84:cc:13:94:65:40:85:f1:1c:08:d9:
         96:ad:d2:a4:19:22:71:c1:74:1f:c9:30:27:35:4f:f4:72:b5:
         9d:00:f2:c8:11:79:d5:8c:d8:1f:13:c8:0b:2a:ea:e6:27:8f:
         4a:84:94:35:65:b3:7f:f1:25:42:57:25:ca:58:8f:31:ba:c5:
         d5:63:fd:48:13:8f:a0:e0:4c:d5:39:44:fe:9a:ce:7f:f5:02:
         aa:e8:f8:78:04:de:d9:ee:3b:a0:98:d7:0e:55:d8:89:ff:40:
         5d:af:83:6c:92:34:15:19:f3:b7:40:4b:f2:39:f9:fc:5f:0c:
         7e:4d:73:0a:0f:3b:18:51:7a:1a:50:a3:2f:d1:19:02:15:87:
         04:14:3f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:41:54 2026 by rpki-client