Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/4hpP6F9Wk_D0BrQ0W0jMsekS0sE.asa
File:                     4hpP6F9Wk_D0BrQ0W0jMsekS0sE.asa (raw, json)
Hash identifier:          LoVQALkE5ii1io18aQx/XHtpWUH22jurmHwu9Ab8L28=
Subject key identifier:   E2:1A:4F:E8:5F:56:93:F0:F4:06:B4:34:5B:48:CC:B1:E9:12:D2:C1
Certificate issuer:       /CN=ac2119178bfd923a4b5ec406d9fe1452b2776efa
Certificate serial:       01A0243BB45F82FEF508E964C88CA632AB8C
Authority key identifier: AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/4hpP6F9Wk_D0BrQ0W0jMsekS0sE.asa
Signing time:             Fri 21 Aug 2026 12:11:27 +0000
ASPA not before:          Fri 21 Aug 2026 12:11:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            39790
Providers:                AS: 6939
                          AS: 25248
                          AS: 199803
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Aug 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:24:3b:b4:5f:82:fe:f5:08:e9:64:c8:8c:a6:32:ab:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac2119178bfd923a4b5ec406d9fe1452b2776efa
        Validity
            Not Before: Aug 21 12:11:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e21a4fe85f5693f0f406b4345b48ccb1e912d2c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:31:10:1b:18:f4:d5:19:53:2e:b1:54:cf:80:
                    e1:a3:6b:9c:17:a8:f6:83:73:b0:02:96:be:15:e6:
                    ab:d4:54:07:25:e4:1b:82:b0:f5:eb:3b:9d:d0:fc:
                    fc:6f:d2:ec:ec:a6:e6:28:3e:2a:d4:b8:24:64:79:
                    79:8b:85:83:bd:46:e0:b0:07:2c:59:d9:ec:41:a0:
                    78:27:30:1d:55:0c:fa:f1:30:c5:ee:bd:17:49:eb:
                    7c:5d:c4:13:a1:0f:3f:86:d8:e8:2d:a1:0e:40:3d:
                    09:2d:a7:c2:38:a0:3e:92:89:0b:3c:a4:6f:3d:41:
                    fa:43:30:70:f1:48:a6:1d:1a:95:cb:b6:d8:12:37:
                    3e:ca:23:2a:55:ac:29:c0:0c:49:8b:96:aa:d4:3f:
                    e6:7b:00:44:58:f0:11:75:ea:ba:8e:35:25:86:1d:
                    08:69:23:f6:79:6e:a1:27:3e:ac:3e:c4:f4:de:58:
                    f3:ae:7e:e3:37:9e:2e:0c:22:ee:21:ea:95:0a:a1:
                    e9:2f:0c:f0:33:5a:c5:0d:9d:9b:a3:00:91:5a:39:
                    86:3a:4d:05:79:cd:dc:c1:88:33:ad:88:20:23:e1:
                    bb:f0:6e:79:98:4e:49:6f:4d:32:d7:9a:7d:b2:4b:
                    e6:86:85:aa:0e:e6:a1:9c:20:c0:4b:0a:fb:38:ec:
                    b9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:1A:4F:E8:5F:56:93:F0:F4:06:B4:34:5B:48:CC:B1:E9:12:D2:C1
            X509v3 Authority Key Identifier:
                keyid:AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/4hpP6F9Wk_D0BrQ0W0jMsekS0sE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39790

    Signature Algorithm: sha256WithRSAEncryption
         89:82:d9:ec:32:1c:61:e0:a6:c6:85:91:c4:b0:c8:a4:cf:7f:
         cb:81:f2:f1:d0:4b:70:14:11:ba:48:56:c8:49:f2:cf:55:30:
         c8:3d:48:a9:89:d6:ce:2a:86:bf:eb:81:7b:a4:3b:04:dd:8b:
         0b:eb:8e:41:e1:dc:63:78:41:7b:2c:32:46:7c:5c:0d:6b:a6:
         a5:71:ab:c9:dd:62:9b:fe:5a:dc:2b:94:49:82:d7:47:ef:dd:
         57:2a:20:91:b3:1a:eb:c1:cf:d3:90:54:29:d2:d2:87:54:e0:
         dc:a3:ff:08:16:f5:72:80:16:10:d1:d6:75:84:1d:0e:54:5d:
         f0:a7:81:3f:c1:5d:de:79:94:0a:6e:bf:e2:50:c1:e6:ce:3e:
         a9:e7:a3:12:cd:52:d0:f3:97:46:bf:a0:45:e5:83:d8:d1:e3:
         56:bc:6d:dc:f3:0c:e3:4b:e9:8d:cb:fe:98:19:27:e7:9d:56:
         ee:93:04:96:1e:d0:0e:b8:d0:ba:b9:58:71:11:f5:c8:27:d5:
         fc:1d:8a:01:c3:12:90:ba:57:71:f3:07:f1:66:48:bb:c7:b3:
         7a:9b:e1:5c:c2:32:ac:b8:b0:bf:69:33:35:a7:96:25:3f:ce:
         16:85:65:33:74:b3:66:43:97:11:af:4b:de:e3:2f:5a:ca:5c:
         8b:37:32:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 07:50:33 2026 by rpki-client