Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/a5e531-1a08-4336-b0d8-4832659994cb/1/EIZvs3LlyOATA74fkfrX-SPXX8s.asa
File:                     EIZvs3LlyOATA74fkfrX-SPXX8s.asa (raw, json)
Hash identifier:          Bo3VyldvJrbwB3Q3/d9GSyN+MI2yMpO4vcDWG8UZ6iM=
Subject key identifier:   10:86:6F:B3:72:E5:C8:E0:13:03:BE:1F:91:FA:D7:F9:23:D7:5F:CB
Certificate issuer:       /CN=d4f86a9a3c429c1bc26ec06a3ae4e417ca74dfde
Certificate serial:       01A0D44089AA1F223CF19937324ACA798574
Authority key identifier: D4:F8:6A:9A:3C:42:9C:1B:C2:6E:C0:6A:3A:E4:E4:17:CA:74:DF:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1PhqmjxCnBvCbsBqOuTkF8p0394.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/a5e531-1a08-4336-b0d8-4832659994cb/1/EIZvs3LlyOATA74fkfrX-SPXX8s.asa
Signing time:             Thu 24 Sep 2026 16:29:54 +0000
ASPA not before:          Thu 24 Sep 2026 16:29:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            50124
Providers:                AS: 3257
                          AS: 8309
                          AS: 39801
                          AS: 199524
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/a5e531-1a08-4336-b0d8-4832659994cb/1/1PhqmjxCnBvCbsBqOuTkF8p0394.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/a5e531-1a08-4336-b0d8-4832659994cb/1/1PhqmjxCnBvCbsBqOuTkF8p0394.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1PhqmjxCnBvCbsBqOuTkF8p0394.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 10:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:40:89:aa:1f:22:3c:f1:99:37:32:4a:ca:79:85:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4f86a9a3c429c1bc26ec06a3ae4e417ca74dfde
        Validity
            Not Before: Sep 24 16:29:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=10866fb372e5c8e01303be1f91fad7f923d75fcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e3:b9:b9:40:c9:5d:a9:2a:33:07:a7:b2:da:
                    81:e9:f4:00:c5:ae:a8:d1:3b:1e:25:19:8c:0f:6f:
                    80:ee:f4:6d:21:c6:a9:fd:73:32:2e:89:50:af:5c:
                    37:42:9d:55:3a:b6:62:b7:bc:ad:6f:19:0c:06:95:
                    95:f3:57:4d:45:f7:bd:3f:39:ee:dd:e2:15:a8:f0:
                    e7:ad:5a:2c:cd:b8:21:e8:55:84:cd:bc:c9:50:e4:
                    eb:bc:b6:b2:c8:0a:fd:40:32:8b:f2:c9:00:42:2e:
                    a1:c8:38:79:a2:86:ce:ac:36:3e:eb:38:26:17:4e:
                    77:27:ec:1c:b0:19:e7:6a:5a:60:cc:34:da:f1:2e:
                    7c:06:01:17:0c:1f:1d:7e:4f:fd:e5:81:3b:5b:f6:
                    d5:db:2a:8f:47:b0:c3:04:ca:91:e2:16:12:1c:4a:
                    c1:5b:19:19:35:e8:d4:e9:6e:ec:f3:85:87:52:ca:
                    1a:bf:9c:b0:b7:25:aa:37:e6:3b:71:25:dd:b2:d4:
                    c3:23:7f:b6:60:02:88:a2:7a:d7:b9:b3:5b:69:a8:
                    1a:ec:d0:f1:ac:a2:78:cd:e3:2c:0a:04:c5:4b:b3:
                    95:bd:c3:d6:f0:66:3a:b6:23:b3:c6:0e:a3:5d:4a:
                    2d:6f:9b:d0:b5:69:c7:14:b9:86:d2:da:80:ce:eb:
                    26:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:86:6F:B3:72:E5:C8:E0:13:03:BE:1F:91:FA:D7:F9:23:D7:5F:CB
            X509v3 Authority Key Identifier:
                keyid:D4:F8:6A:9A:3C:42:9C:1B:C2:6E:C0:6A:3A:E4:E4:17:CA:74:DF:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PhqmjxCnBvCbsBqOuTkF8p0394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/a5e531-1a08-4336-b0d8-4832659994cb/1/EIZvs3LlyOATA74fkfrX-SPXX8s.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/a5e531-1a08-4336-b0d8-4832659994cb/1/1PhqmjxCnBvCbsBqOuTkF8p0394.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50124

    Signature Algorithm: sha256WithRSAEncryption
         2a:cc:45:c5:89:45:8f:ff:61:b1:de:cc:1c:11:af:96:f4:45:
         22:95:d6:59:ba:e2:9b:0d:3a:21:13:7a:38:6d:f0:bf:e6:13:
         01:33:f7:bd:18:e3:fd:0d:ad:c9:9c:74:3a:41:24:38:80:13:
         ae:d1:94:f7:2f:89:f2:48:04:b3:bc:b1:da:de:14:e5:e0:11:
         4c:3f:0e:4b:c3:d8:a7:2f:25:1a:61:21:1c:c8:0d:6e:6a:5f:
         4e:9d:57:03:95:68:4f:f6:dc:ed:ce:24:d8:a7:bb:d9:a9:dd:
         b9:10:2a:a7:fe:c5:f6:61:57:fc:1d:af:fe:8c:e8:ab:0d:f9:
         fc:2b:65:4d:4e:31:66:1c:e6:9b:02:24:cf:f6:ea:08:ee:be:
         d1:7f:32:69:9e:fa:a1:d7:8a:bd:37:7f:4e:be:ea:7e:88:d8:
         84:0e:1e:ab:b6:3f:f4:3a:b6:54:cc:e6:c4:5e:5f:93:e3:24:
         7e:01:3c:34:f5:8a:ba:37:7f:e2:42:48:fd:60:75:c0:76:e4:
         aa:0b:88:22:d1:3a:20:0c:e5:81:ce:6f:54:f7:0e:a4:77:f3:
         5f:38:83:04:05:8c:e0:35:a5:e8:80:db:65:28:a6:a4:e0:95:
         7f:61:1f:95:90:98:2f:3a:c7:a5:96:11:fc:17:b9:ad:78:01:
         18:f1:ed:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:36:03 2026 by rpki-client