Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/5adb71-10ac-4223-b36b-e5b9d6e6e47d/1/8Msd1ZHE0DOIIulysEXH4yuO8po.asa
File:                     8Msd1ZHE0DOIIulysEXH4yuO8po.asa (raw, json)
Hash identifier:          FM08oR7PbEdMNmMfav/M1fjQXjWC4rKDBLIAFH39Wu4=
Subject key identifier:   F0:CB:1D:D5:91:C4:D0:33:88:22:E9:72:B0:45:C7:E3:2B:8E:F2:9A
Certificate issuer:       /CN=4e29df149523b03c46eed8a0821d42f38d784841
Certificate serial:       01A14F3067AB74088065173A6AC4E0C2FCFC
Authority key identifier: 4E:29:DF:14:95:23:B0:3C:46:EE:D8:A0:82:1D:42:F3:8D:78:48:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TinfFJUjsDxG7tiggh1C8414SEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/5adb71-10ac-4223-b36b-e5b9d6e6e47d/1/8Msd1ZHE0DOIIulysEXH4yuO8po.asa
Signing time:             Sun 18 Oct 2026 13:25:34 +0000
ASPA not before:          Sun 18 Oct 2026 13:25:34 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            210880
Providers:                AS: 41051
                          AS: 209533
                          AS: 214205
                          AS: 214762
                          AS: 215296
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/5adb71-10ac-4223-b36b-e5b9d6e6e47d/1/TinfFJUjsDxG7tiggh1C8414SEE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/5adb71-10ac-4223-b36b-e5b9d6e6e47d/1/TinfFJUjsDxG7tiggh1C8414SEE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TinfFJUjsDxG7tiggh1C8414SEE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 23:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4f:30:67:ab:74:08:80:65:17:3a:6a:c4:e0:c2:fc:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e29df149523b03c46eed8a0821d42f38d784841
        Validity
            Not Before: Oct 18 13:25:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f0cb1dd591c4d0338822e972b045c7e32b8ef29a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c5:c6:03:9d:01:eb:75:11:14:dc:c2:e3:7a:
                    de:50:a6:65:56:b7:73:72:a4:92:45:d4:95:7b:3b:
                    2b:aa:2f:bc:78:75:8e:49:af:43:2a:d2:c8:4b:00:
                    01:bf:ec:90:e4:46:fa:10:0d:0b:b6:a2:e5:b0:7b:
                    a8:9e:65:a1:80:0c:f5:c7:3e:a2:e1:6b:40:ae:96:
                    79:e2:59:4a:01:cc:72:1f:35:9f:02:23:a8:05:b4:
                    28:53:5c:65:9d:75:b6:93:8a:cc:23:07:71:99:d8:
                    dc:98:33:bd:87:2a:5b:0a:ef:9d:cd:9d:b7:02:c2:
                    6d:47:8b:77:a8:84:37:2b:4a:df:83:06:da:38:c7:
                    55:0f:e7:4c:ad:ed:84:ab:57:d7:1c:d3:d2:9d:75:
                    27:77:dc:d1:5d:5d:87:76:f8:f2:32:07:2d:d9:0f:
                    38:2f:9d:ad:5c:b2:32:76:80:fa:00:f7:31:dc:54:
                    b5:75:59:b5:cc:00:60:34:fe:8f:7a:ad:75:4d:46:
                    b7:fc:13:39:6c:b2:e6:29:ae:91:5f:a4:20:90:37:
                    1b:e3:d5:fb:24:87:f5:78:55:fc:9f:4b:1f:27:6b:
                    68:d5:dc:8f:01:f2:39:83:c6:43:0e:6d:83:c2:5f:
                    eb:88:46:38:03:db:b3:ad:0a:e8:2e:9e:cb:73:cf:
                    ee:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:CB:1D:D5:91:C4:D0:33:88:22:E9:72:B0:45:C7:E3:2B:8E:F2:9A
            X509v3 Authority Key Identifier:
                keyid:4E:29:DF:14:95:23:B0:3C:46:EE:D8:A0:82:1D:42:F3:8D:78:48:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TinfFJUjsDxG7tiggh1C8414SEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/5adb71-10ac-4223-b36b-e5b9d6e6e47d/1/8Msd1ZHE0DOIIulysEXH4yuO8po.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/5adb71-10ac-4223-b36b-e5b9d6e6e47d/1/TinfFJUjsDxG7tiggh1C8414SEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210880

    Signature Algorithm: sha256WithRSAEncryption
         0c:7e:2b:3f:7a:c3:31:80:f7:71:98:6b:b7:ab:d3:a9:58:99:
         b6:a4:9c:f4:91:2d:30:d1:b7:68:ca:60:74:51:2a:4f:a4:40:
         fd:14:2d:92:fd:87:c8:eb:e0:70:f6:9c:bc:40:2c:65:fc:db:
         ae:4e:90:3b:d8:e4:e6:d7:80:d2:4d:74:06:09:30:08:9f:65:
         eb:44:09:dd:68:50:b2:46:64:f0:57:42:53:b4:6e:dd:c2:c9:
         ef:91:70:4b:36:0e:94:33:ee:30:1e:34:28:47:29:37:4f:d1:
         34:b4:e2:cf:fe:5d:07:08:41:f8:74:5c:fe:e0:29:f0:54:4c:
         3f:1f:33:f5:ae:31:bc:4c:51:55:90:9d:03:65:48:28:09:bf:
         85:f3:8c:52:84:f5:98:a4:b6:57:24:db:ab:40:7e:6b:9f:be:
         11:40:13:eb:5f:c6:4d:13:50:70:dc:ba:cd:d6:15:45:4f:65:
         dc:a0:60:e8:ba:2a:d2:67:2c:ef:72:1e:4e:94:d0:7d:57:b4:
         d1:65:e1:17:63:38:5a:9c:2c:fb:b3:b0:70:98:70:dd:d7:6b:
         6f:cf:30:57:5f:32:e8:80:40:ff:82:dd:f8:25:75:de:37:69:
         7b:6f:0f:1c:65:32:06:99:12:20:60:7a:fd:ff:94:df:4f:da:
         d0:ad:b4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:18:07 2026 by rpki-client