Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/J-_lvkY-gbWWkONoRhqgK0EK2D8.asa
File:                     J-_lvkY-gbWWkONoRhqgK0EK2D8.asa (raw, json)
Hash identifier:          4LqCnff8vAi0kItPEvZBIVvYZbsEZWY7hH0bV/Ok5mo=
Subject key identifier:   27:EF:E5:BE:46:3E:81:B5:96:90:E3:68:46:1A:A0:2B:41:0A:D8:3F
Certificate issuer:       /CN=4f9d5fbaaf76a80a65e0e92c02061e895b2b8117
Certificate serial:       01A135BBA0F5DEDA7ABAF388CFDD5D7480E4
Authority key identifier: 4F:9D:5F:BA:AF:76:A8:0A:65:E0:E9:2C:02:06:1E:89:5B:2B:81:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T51fuq92qApl4OksAgYeiVsrgRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/J-_lvkY-gbWWkONoRhqgK0EK2D8.asa
Signing time:             Tue 13 Oct 2026 14:47:30 +0000
ASPA not before:          Tue 13 Oct 2026 14:47:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            205832
Providers:                AS: 50973
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T51fuq92qApl4OksAgYeiVsrgRc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:35:bb:a0:f5:de:da:7a:ba:f3:88:cf:dd:5d:74:80:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f9d5fbaaf76a80a65e0e92c02061e895b2b8117
        Validity
            Not Before: Oct 13 14:47:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=27efe5be463e81b59690e368461aa02b410ad83f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:46:fb:e9:ab:89:71:5c:16:52:b8:a1:ce:ec:
                    85:20:72:bf:67:7a:40:85:cf:42:cf:fe:76:9b:37:
                    93:b3:86:3e:12:82:31:34:6b:2c:e9:fa:b6:65:31:
                    a3:3b:9b:33:b3:4b:31:04:c6:00:22:d5:fd:86:6b:
                    b1:9a:9a:b1:67:67:ba:5e:9d:3d:4f:b1:31:98:c2:
                    f0:46:f1:48:1b:f0:a3:66:45:93:ed:a9:e0:80:82:
                    b9:ab:0a:0a:d8:6a:26:f8:73:bd:4c:c0:d5:bf:cf:
                    3e:ab:71:2e:4c:30:97:b5:38:c8:e3:8d:ec:32:10:
                    58:39:95:79:99:7e:ee:fe:ba:11:9d:75:84:d1:cc:
                    ef:49:b9:e0:0c:6c:e8:d1:e4:c5:56:a3:2a:17:29:
                    64:3f:ec:cf:ac:eb:a2:d2:e7:f7:f1:80:2b:3f:bf:
                    1f:d4:e6:6c:7c:8d:aa:07:73:9c:8f:75:a3:aa:01:
                    80:09:ab:82:39:3c:01:45:ac:69:4f:4e:2e:54:90:
                    4d:ff:23:0f:62:9d:44:88:1c:6a:1d:28:5c:3e:1a:
                    6d:20:d7:77:d1:a3:30:93:cd:40:08:c1:ec:51:31:
                    fb:d3:d0:07:9c:a7:75:8a:bc:fd:64:b3:11:77:39:
                    54:30:d0:0f:c9:8c:0b:62:aa:e2:e3:1f:8a:8d:8b:
                    59:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:EF:E5:BE:46:3E:81:B5:96:90:E3:68:46:1A:A0:2B:41:0A:D8:3F
            X509v3 Authority Key Identifier:
                keyid:4F:9D:5F:BA:AF:76:A8:0A:65:E0:E9:2C:02:06:1E:89:5B:2B:81:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T51fuq92qApl4OksAgYeiVsrgRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/J-_lvkY-gbWWkONoRhqgK0EK2D8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205832

    Signature Algorithm: sha256WithRSAEncryption
         36:ae:a1:26:e6:5e:54:d0:ec:94:2d:f1:5a:9e:21:27:2e:2c:
         cb:6d:5a:e5:a0:af:04:82:ec:f6:f4:49:46:83:f8:d3:06:30:
         24:a8:2c:d4:f6:c2:9e:e1:2a:9e:64:71:49:ce:dd:1f:1e:b9:
         f8:87:77:d5:8d:1b:2d:b4:6f:a9:26:cb:37:a2:72:32:ae:03:
         f5:84:67:60:21:58:ae:85:80:20:ef:2f:9c:bb:d4:44:0d:c6:
         1d:2f:d0:d9:6d:8b:58:fb:3f:3c:8b:eb:f3:c1:f5:9c:3f:e1:
         82:c3:28:57:d6:dd:e0:71:06:1f:7b:ad:d1:6b:ba:45:03:d1:
         49:d6:71:59:b8:f5:80:68:55:69:14:f1:3d:5e:d1:2a:56:77:
         bf:a4:b0:e2:c2:88:44:22:7d:9b:16:f3:5d:33:a4:b8:e6:65:
         3f:01:87:b2:5c:40:8b:b0:91:9e:9d:40:b4:3a:46:47:de:cc:
         b6:03:5c:62:fb:5a:f3:e5:8e:d9:d6:cc:1c:8f:e0:ad:26:f0:
         a5:73:be:a0:36:ce:71:12:c6:d7:2c:7a:b7:73:6d:d1:9d:36:
         d5:3d:ca:ab:9a:62:d5:41:47:59:78:df:82:2a:4e:c1:12:da:
         44:b5:43:f7:96:1c:5b:6d:38:e5:de:20:8a:af:7c:c1:fd:cb:
         23:b1:63:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:54:41 2026 by rpki-client