Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/q59nE80Upmr8VSTN3A3NbMeVWLA.asa
File:                     q59nE80Upmr8VSTN3A3NbMeVWLA.asa (raw, json)
Hash identifier:          Yn2ATkZKh87+XmNxohzr8sRlPqZd+ozHrAoAFn2FIq0=
Subject key identifier:   AB:9F:67:13:CD:14:A6:6A:FC:55:24:CD:DC:0D:CD:6C:C7:95:58:B0
Certificate issuer:       /CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Certificate serial:       01A10D7DE3B8FB968787A840E8A2D82D6AE2
Authority key identifier: DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/q59nE80Upmr8VSTN3A3NbMeVWLA.asa
Signing time:             Mon 05 Oct 2026 19:15:16 +0000
ASPA not before:          Mon 05 Oct 2026 19:15:16 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            33854
Providers:                AS: 44684
                          AS: 45014
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0d:7d:e3:b8:fb:96:87:87:a8:40:e8:a2:d8:2d:6a:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
        Validity
            Not Before: Oct  5 19:15:16 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ab9f6713cd14a66afc5524cddc0dcd6cc79558b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4c:37:c2:03:3a:19:41:85:0f:c8:68:02:17:
                    06:a5:e8:c3:e3:8e:7c:c8:17:49:49:5b:c8:fa:14:
                    14:c5:89:eb:37:1c:63:54:8e:37:6c:b2:34:41:a8:
                    1b:57:80:70:e3:ef:61:b5:35:ad:2e:10:2b:b6:cd:
                    ac:32:ae:7c:05:a2:10:4a:07:df:e6:c8:f6:36:4a:
                    e3:08:4f:fa:b6:dd:64:a8:33:bf:b1:dd:ee:fa:e0:
                    9e:8f:4e:2f:ad:9b:58:e9:ab:f6:3c:1d:e0:44:96:
                    1d:dc:0a:aa:77:37:66:63:5f:8b:b5:db:ab:f8:76:
                    bc:36:32:57:5a:74:9f:6c:4d:5c:1e:a4:c9:87:58:
                    1c:79:fc:44:ca:fc:3b:39:62:2e:c3:bd:14:c7:ae:
                    f7:d9:54:83:8d:41:8b:0e:59:84:3f:0a:84:83:37:
                    72:d1:27:cd:bc:1b:43:1e:f7:d6:77:c5:e5:2f:ab:
                    d5:a4:a0:da:95:0c:5b:b9:f1:73:a9:8f:07:c9:af:
                    d1:64:dd:e8:cd:06:35:77:1c:72:17:3c:25:7b:a6:
                    c7:fa:27:f8:08:e1:bd:79:0c:7b:65:66:70:ff:8e:
                    d0:21:c1:fe:9f:d1:69:2c:f0:f5:8a:52:9d:7c:c8:
                    cc:3b:a8:4e:e4:d0:4c:52:c7:ef:f6:be:75:99:c7:
                    12:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:9F:67:13:CD:14:A6:6A:FC:55:24:CD:DC:0D:CD:6C:C7:95:58:B0
            X509v3 Authority Key Identifier:
                keyid:DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/q59nE80Upmr8VSTN3A3NbMeVWLA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  33854

    Signature Algorithm: sha256WithRSAEncryption
         7a:1f:0a:83:f8:59:71:4d:11:2b:d9:5d:45:0b:06:21:ef:ab:
         21:82:69:a4:ae:98:70:1a:ae:61:40:65:ee:d5:5f:d5:c3:57:
         cb:61:e4:40:70:d3:71:27:50:fb:ba:f7:35:29:8d:a4:27:24:
         6d:c5:8f:2f:94:79:7a:50:dd:af:9e:df:03:8d:cd:df:d5:5e:
         0c:35:4c:42:e0:90:b1:70:3e:f1:f4:16:e7:70:8f:16:27:c4:
         55:ce:5a:bd:f0:a0:36:df:62:eb:f0:37:52:a6:53:16:15:23:
         4f:3f:fa:26:ea:d8:58:0d:f6:93:ab:f1:34:80:d9:bd:e3:03:
         27:5b:a2:02:96:e7:98:b3:f9:cb:ae:a3:99:a2:12:b1:71:2d:
         04:a6:b6:e7:23:61:82:1f:e5:b4:00:ee:1b:dd:8f:e1:c6:69:
         c9:81:a1:b2:d3:b9:21:6c:6e:f2:b5:bf:39:73:34:3f:87:b0:
         ca:fb:02:f1:29:63:d9:95:f4:96:f7:4b:cb:c6:77:3d:c3:c5:
         2c:6f:bd:a9:2e:a8:a3:5d:1a:59:73:f0:37:8a:07:85:83:95:
         81:49:db:be:95:a0:49:bc:85:20:18:d9:25:97:b0:a3:fe:7c:
         9d:99:46:7f:d0:e4:71:ba:d3:52:12:4c:5a:15:7f:57:3b:8a:
         f7:a5:9b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 16:27:18 2026 by rpki-client