Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/Xqk8Uz-n6K8gn3JGWZDD2ygTwPs.asa
File:                     Xqk8Uz-n6K8gn3JGWZDD2ygTwPs.asa (raw, json)
Hash identifier:          ciV3WQr4P4tvz14Lw1wTS5h/d3hEB2JhoVNcPSmkw+I=
Subject key identifier:   5E:A9:3C:53:3F:A7:E8:AF:20:9F:72:46:59:90:C3:DB:28:13:C0:FB
Certificate issuer:       /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Certificate serial:       01A1103364C230DAD5F23BE7047DAA885BA7
Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/Xqk8Uz-n6K8gn3JGWZDD2ygTwPs.asa
Signing time:             Tue 06 Oct 2026 07:52:45 +0000
ASPA not before:          Tue 06 Oct 2026 07:52:45 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            13301
Providers:                AS: 24961
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Nov 2026 11:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:10:33:64:c2:30:da:d5:f2:3b:e7:04:7d:aa:88:5b:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
        Validity
            Not Before: Oct  6 07:52:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5ea93c533fa7e8af209f72465990c3db2813c0fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4c:38:e7:6a:b3:14:95:f2:40:16:e8:f2:78:
                    1d:20:7d:63:b3:5d:f1:cd:93:5a:e3:a9:11:fa:ba:
                    6e:6c:9c:84:e4:cd:6a:27:f1:d9:c0:5b:9d:91:87:
                    f4:bf:b7:a6:67:b6:6a:60:34:10:0e:91:fa:03:2b:
                    cd:d1:37:77:25:b1:38:88:24:52:e7:01:ee:a9:3a:
                    fb:39:02:ef:c4:9f:f2:9c:42:4f:b9:1f:3b:a5:34:
                    91:f4:ad:37:43:4d:93:ef:6b:84:f3:45:f0:9f:44:
                    1c:f3:76:c8:0b:dc:76:29:12:00:e5:31:42:40:f9:
                    a3:c7:09:ab:95:ce:34:81:4a:8e:d3:df:51:67:34:
                    b2:33:5d:da:bc:b3:1c:d1:f6:20:38:df:57:b4:e9:
                    c2:be:b8:c7:65:b4:c2:6d:e7:35:44:e7:fa:8e:02:
                    af:6c:5b:dd:4c:bb:99:a9:f3:be:65:fb:50:c3:f4:
                    56:aa:df:63:78:c9:24:c2:69:cf:bd:e8:f8:28:a7:
                    8c:dd:cd:90:d4:95:ee:4a:4d:e5:a3:dd:aa:e5:60:
                    9d:94:e4:a0:eb:de:87:ea:2d:21:16:a3:03:83:b1:
                    11:83:fd:e1:00:05:4b:44:ca:42:b8:7b:7c:22:18:
                    a7:01:c0:ad:ea:ff:29:42:94:7f:30:a6:e8:7c:54:
                    6c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A9:3C:53:3F:A7:E8:AF:20:9F:72:46:59:90:C3:DB:28:13:C0:FB
            X509v3 Authority Key Identifier:
                keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/Xqk8Uz-n6K8gn3JGWZDD2ygTwPs.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13301

    Signature Algorithm: sha256WithRSAEncryption
         c0:0a:0b:d6:63:ef:5c:80:5a:36:4c:9c:54:bf:e5:3f:68:63:
         e9:4f:db:2b:77:39:4e:4f:0a:2d:ee:cd:bd:ed:eb:41:7d:72:
         fb:d6:80:74:3b:b0:b8:fc:96:41:65:91:a8:91:e3:e5:b7:18:
         c6:0d:66:62:7e:16:dc:e7:0d:29:c6:3d:e4:ea:2c:31:7c:3a:
         32:c2:81:7a:4d:2d:c0:f8:3d:85:83:9a:9f:ee:91:49:fa:f8:
         0e:fe:c8:20:cc:cf:f5:80:f6:fb:a0:18:0d:cf:68:c2:2b:0e:
         50:fa:b4:bb:80:a9:0a:53:11:6f:fe:ff:ba:72:a5:21:de:f5:
         05:21:6b:0d:69:f8:27:c5:6c:c3:98:df:25:bf:01:9b:62:fb:
         a8:1c:54:2b:af:49:e3:f6:5d:df:cf:3b:42:ec:67:04:0f:ef:
         8e:55:67:14:bf:3a:e1:01:a7:d7:8d:88:7d:7a:ec:ee:b9:98:
         d1:89:3e:47:b9:ba:da:6d:9b:49:3e:02:57:cd:da:6f:f1:ac:
         a2:f1:7f:98:50:fa:ab:39:da:f6:f3:d8:81:c2:9f:76:e2:3b:
         be:54:12:2f:ad:a8:5e:78:4e:ed:ec:6c:ea:90:4b:13:41:5c:
         6d:03:83:b5:26:36:3d:b0:30:3b:9c:4d:d8:76:cf:4f:a6:9c:
         cd:91:16:d8
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgISAaEQM2TCMNrV8jvnBH2qiFunMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNmI0MjAyMTg4NmQ4ZWVkYmFlOTBkOWU2YWIxZGU1MzNj
NTBkMjAwHhcNMjYxMDA2MDc1MjQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZWE5M2M1MzNmYTdlOGFmMjA5ZjcyNDY1OTkwYzNkYjI4MTNjMGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0w452qzFJXyQBbo8ngdIH1js13x
zZNa46kR+rpubJyE5M1qJ/HZwFudkYf0v7emZ7ZqYDQQDpH6AyvN0Td3JbE4iCRS
5wHuqTr7OQLvxJ/ynEJPuR87pTSR9K03Q02T72uE80Xwn0Qc83bIC9x2KRIA5TFC
QPmjxwmrlc40gUqO099RZzSyM13avLMc0fYgON9XtOnCvrjHZbTCbec1ROf6jgKv
bFvdTLuZqfO+ZftQw/RWqt9jeMkkwmnPvej4KKeM3c2Q1JXuSk3lo92q5WCdlOSg
696H6i0hFqMDg7ERg/3hAAVLRMpCuHt8IhinAcCt6v8pQpR/MKbofFRsSwIDAQAB
o4ICAzCCAf8wHQYDVR0OBBYEFF6pPFM/p+ivIJ9yRlmQw9soE8D7MB8GA1UdIwQY
MBaAFOxrQgIYhtju266Q2earHeUzxQ0gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQt
YTY4NzNiMzc0ZTI2LzEvWHFrOFV6LW42SzhnbjNKR1daREQyeWdUd1BzLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQtYTY4NzNiMzc0ZTI2
LzEvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAjP1MA0GCSqGSIb3
DQEBCwUAA4IBAQDACgvWY+9cgFo2TJxUv+U/aGPpT9srdzlOTwot7s297etBfXL7
1oB0O7C4/JZBZZGokePltxjGDWZifhbc5w0pxj3k6iwxfDoywoF6TS3A+D2Fg5qf
7pFJ+vgO/sggzM/1gPb7oBgNz2jCKw5Q+rS7gKkKUxFv/v+6cqUh3vUFIWsNafgn
xWzDmN8lvwGbYvuoHFQrr0nj9l3fzztC7GcED++OVWcUvzrhAafXjYh9euzuuZjR
iT5HubrabZtJPgJXzdpv8ayi8X+YUPqrOdr289iBwp924ju+VBIvraheeE7t7Gzq
kEsTQVxtA4O1JjY9sDA7nE3Yds9PppzNkRbY
-----END CERTIFICATE-----
Generated at Tue Nov 3 22:27:05 2026 by rpki-client