Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/4840a9-0405-47cf-83b5-08767dda349f/1/5rBPZdaUmnnvoDphMpg0g3YswCw.asa
File:                     5rBPZdaUmnnvoDphMpg0g3YswCw.asa (raw, json)
Hash identifier:          7Eg90jHkUTWS1OEeoEBVZ3nD/aanQ7UPalxj2Kd5AAo=
Subject key identifier:   E6:B0:4F:65:D6:94:9A:79:EF:A0:3A:61:32:98:34:83:76:2C:C0:2C
Certificate issuer:       /CN=acf07ef310739e3d5e79501cacea89a7cab2fe27
Certificate serial:       019FA9270640C0AD0569C42366E6A069140B
Authority key identifier: AC:F0:7E:F3:10:73:9E:3D:5E:79:50:1C:AC:EA:89:A7:CA:B2:FE:27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rPB-8xBznj1eeVAcrOqJp8qy_ic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/4840a9-0405-47cf-83b5-08767dda349f/1/5rBPZdaUmnnvoDphMpg0g3YswCw.asa
Signing time:             Tue 28 Jul 2026 14:35:34 +0000
ASPA not before:          Tue 28 Jul 2026 14:35:34 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            211170
Providers:                AS: 2914
                          AS: 3320
                          AS: 6805
                          AS: 16374
                          AS: 55002
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/4840a9-0405-47cf-83b5-08767dda349f/1/rPB-8xBznj1eeVAcrOqJp8qy_ic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/4840a9-0405-47cf-83b5-08767dda349f/1/rPB-8xBznj1eeVAcrOqJp8qy_ic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rPB-8xBznj1eeVAcrOqJp8qy_ic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 23:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:27:06:40:c0:ad:05:69:c4:23:66:e6:a0:69:14:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acf07ef310739e3d5e79501cacea89a7cab2fe27
        Validity
            Not Before: Jul 28 14:35:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e6b04f65d6949a79efa03a6132983483762cc02c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ac:9f:90:5b:5b:68:ed:dc:19:74:4f:09:da:
                    09:78:3c:ab:17:03:66:dd:89:27:2c:e5:53:da:2e:
                    ef:74:22:92:46:44:db:45:49:72:0d:ac:e7:41:2d:
                    44:f7:58:75:af:09:dc:71:fa:23:04:1d:f7:96:6b:
                    1d:c1:32:43:68:c7:ca:bc:82:4c:b9:56:57:ba:6a:
                    39:de:a9:45:28:b3:c1:d9:f7:65:98:64:25:e8:f5:
                    e7:00:af:4a:84:ab:e9:17:5b:d2:db:ed:23:c8:65:
                    a2:b3:64:f1:22:a1:d9:2d:37:fe:de:2c:1d:0a:f3:
                    4c:fc:6c:28:b1:0f:8e:ac:4a:45:45:03:61:37:8a:
                    77:bb:05:10:1e:96:af:87:fe:a0:6e:a4:6f:50:3e:
                    1a:b6:cb:cc:23:be:d9:10:57:7a:e8:d8:6b:36:ce:
                    8a:51:af:f9:3b:ec:07:d2:1f:40:5b:2e:d6:3f:b0:
                    b0:13:33:6a:e7:21:42:52:ac:6d:1c:76:a7:b9:99:
                    e9:c6:c9:a0:fc:3d:d0:e1:84:e6:ae:c8:64:a8:09:
                    a8:d2:2c:0a:2f:a1:f7:72:af:33:84:26:4b:21:c4:
                    c5:db:d8:94:b1:74:b0:03:b6:3b:22:5d:09:f2:e9:
                    81:ff:62:1b:08:13:73:1a:14:2e:67:fe:0e:88:96:
                    89:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B0:4F:65:D6:94:9A:79:EF:A0:3A:61:32:98:34:83:76:2C:C0:2C
            X509v3 Authority Key Identifier:
                keyid:AC:F0:7E:F3:10:73:9E:3D:5E:79:50:1C:AC:EA:89:A7:CA:B2:FE:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPB-8xBznj1eeVAcrOqJp8qy_ic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4840a9-0405-47cf-83b5-08767dda349f/1/5rBPZdaUmnnvoDphMpg0g3YswCw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4840a9-0405-47cf-83b5-08767dda349f/1/rPB-8xBznj1eeVAcrOqJp8qy_ic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211170

    Signature Algorithm: sha256WithRSAEncryption
         88:00:dc:14:76:84:89:c9:50:3a:69:5a:42:9e:e3:d4:86:be:
         97:2a:44:e0:93:76:ae:90:dc:0c:ef:5a:3c:7d:be:d4:94:97:
         a1:f1:80:d5:71:4a:64:bc:ba:88:d0:97:91:6c:77:6c:a7:59:
         32:c2:42:3e:60:88:ae:64:8a:47:41:8e:11:2e:a4:2e:a3:12:
         07:6f:dc:e3:13:c4:b4:58:ca:65:67:bf:2a:77:ac:66:7b:fc:
         2b:c1:1d:20:5a:0e:35:1c:73:40:6b:c6:b9:e4:a5:8c:7f:2f:
         5a:69:12:6a:66:3f:5d:0e:de:97:ed:e8:85:7a:d8:c3:e8:47:
         99:87:59:ff:13:66:09:15:8e:75:cb:6e:f6:12:73:af:a4:bb:
         3c:90:6e:be:d6:52:d8:b3:e4:36:1e:e7:1c:1e:5c:d3:d1:1b:
         2f:8c:7e:df:ac:0b:f4:25:1e:d6:f9:fc:a7:99:a0:ce:c8:3d:
         22:c3:d7:0f:ef:93:af:0f:64:05:85:26:f0:2a:94:04:3c:c9:
         e7:e1:ed:7b:78:c9:04:a2:22:68:45:47:26:08:bd:3c:b8:b9:
         48:03:28:a4:90:65:59:70:54:bc:01:fd:c9:83:28:35:e0:8a:
         5e:a1:ff:c8:9b:1c:5d:8a:7e:3c:d3:f0:96:0c:a6:e1:56:10:
         7e:70:fc:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:50:14 2026 by rpki-client