Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/Au5cQGUMHz0QUWCqGVhBHUvuIC4.asa
File:                     Au5cQGUMHz0QUWCqGVhBHUvuIC4.asa (raw, json)
Hash identifier:          MOGrpoltXHKuWTkOjBVVbAVNThMbgRBXCLgrF0PB+rc=
Subject key identifier:   02:EE:5C:40:65:0C:1F:3D:10:51:60:AA:19:58:41:1D:4B:EE:20:2E
Certificate issuer:       /CN=152d518481ced2f84d01104f871d64d44301db3b
Certificate serial:       01A16498F07F92B444A67C1888864964F49A
Authority key identifier: 15:2D:51:84:81:CE:D2:F8:4D:01:10:4F:87:1D:64:D4:43:01:DB:3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FS1RhIHO0vhNARBPhx1k1EMB2zs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/Au5cQGUMHz0QUWCqGVhBHUvuIC4.asa
Signing time:             Thu 22 Oct 2026 17:11:46 +0000
ASPA not before:          Thu 22 Oct 2026 17:11:46 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            213409
Providers:                AS: 6939
                          AS: 8772
                          AS: 29632
                          AS: 200132
                          AS: 214757
                          AS: 214809
                          AS: 215296
                          AS: 215828
                          AS: 400992
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/FS1RhIHO0vhNARBPhx1k1EMB2zs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/FS1RhIHO0vhNARBPhx1k1EMB2zs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FS1RhIHO0vhNARBPhx1k1EMB2zs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Oct 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:64:98:f0:7f:92:b4:44:a6:7c:18:88:86:49:64:f4:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=152d518481ced2f84d01104f871d64d44301db3b
        Validity
            Not Before: Oct 22 17:11:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=02ee5c40650c1f3d105160aa1958411d4bee202e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a3:51:f4:a5:dc:1d:1b:f1:67:ed:a1:98:e0:
                    ac:39:56:73:cb:35:fd:11:60:d3:57:05:ef:00:f7:
                    74:33:66:4c:a6:46:b5:4e:4e:50:fe:76:bd:e4:53:
                    59:1c:7e:f6:3d:59:2d:2b:9a:3a:6a:de:90:6f:e9:
                    35:bb:f2:22:c8:87:c0:a3:59:16:47:be:af:33:d4:
                    81:ee:99:46:23:6a:f5:f8:e7:f7:3f:ad:06:79:b8:
                    6c:40:f9:7f:8c:13:33:2d:97:2c:ea:df:31:57:21:
                    92:99:2a:22:f1:c6:5e:63:b4:96:9a:0d:f9:29:55:
                    14:f1:72:c2:1f:c0:cc:db:10:dc:21:68:fb:8f:49:
                    68:08:0f:d9:5b:f6:ec:8e:d1:a3:0b:db:8f:5e:92:
                    5d:87:df:d0:4a:32:cd:f2:3a:d5:b8:db:69:5f:98:
                    9b:83:29:81:13:76:0a:8a:39:10:e4:f8:19:7f:2e:
                    f7:17:6e:9c:9d:ab:4b:b5:3e:9b:34:57:33:90:cc:
                    96:b1:8c:bf:80:cd:a6:cf:eb:08:eb:56:63:5b:5b:
                    7f:2f:42:d9:61:34:61:7f:5c:95:36:24:c6:a1:56:
                    57:a6:a2:31:ef:c8:b2:b0:21:cd:1a:73:6e:30:ae:
                    b6:8a:bb:a6:02:e2:ad:cd:ac:ac:94:3a:c1:b1:b1:
                    a1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:EE:5C:40:65:0C:1F:3D:10:51:60:AA:19:58:41:1D:4B:EE:20:2E
            X509v3 Authority Key Identifier:
                keyid:15:2D:51:84:81:CE:D2:F8:4D:01:10:4F:87:1D:64:D4:43:01:DB:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FS1RhIHO0vhNARBPhx1k1EMB2zs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/Au5cQGUMHz0QUWCqGVhBHUvuIC4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/FS1RhIHO0vhNARBPhx1k1EMB2zs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213409

    Signature Algorithm: sha256WithRSAEncryption
         32:3d:02:24:5c:6f:55:38:75:e0:f5:41:c9:5d:96:05:9a:88:
         24:9b:45:ec:10:ee:95:8b:6f:5a:4e:64:fc:ec:fb:ad:35:b8:
         eb:d9:d7:03:73:76:a9:e7:3c:8e:09:1f:0c:90:00:c8:da:c2:
         fc:dc:a9:3e:89:2f:4b:04:1f:80:52:24:28:46:0a:bf:5d:4f:
         e1:c1:86:c9:f2:3d:7b:5e:44:85:47:27:b7:75:fd:1a:83:b1:
         83:48:d4:df:a9:66:a9:9e:63:f2:50:ff:ad:2b:d5:19:cd:05:
         33:47:54:1c:a5:d4:23:79:2b:41:67:e5:3b:0d:78:4b:34:24:
         10:78:4e:f1:95:0b:72:44:2f:9a:9f:b6:20:61:83:a1:25:86:
         c5:17:63:d8:93:71:71:bc:b5:bc:87:bd:2f:35:21:34:61:37:
         07:2e:e9:7f:30:55:62:f4:90:ab:a6:9e:d2:f0:75:d8:73:13:
         68:a2:89:5a:7c:15:08:88:9f:be:c1:de:dd:31:86:50:65:f8:
         3f:34:77:3b:a5:21:c9:22:34:29:03:a9:83:6f:75:e2:ea:77:
         a7:45:40:e0:1c:b5:06:3c:c4:c8:39:b3:ba:97:5c:cd:b9:a8:
         fa:b2:91:a7:cb:67:07:79:1c:9a:f9:f1:fe:1e:43:f5:be:fb:
         23:83:54:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 07:10:36 2026 by rpki-client