Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/ghrKVF9FWib3Hu7p0PLQBqt4JyU.asa
File:                     ghrKVF9FWib3Hu7p0PLQBqt4JyU.asa (raw, json)
Hash identifier:          /trveC4IM5mT0pqf0QHgZvWakdn0yO3z422rCAbhLqA=
Subject key identifier:   82:1A:CA:54:5F:45:5A:26:F7:1E:EE:E9:D0:F2:D0:06:AB:78:27:25
Certificate issuer:       /CN=4f6c171b4c75d650a8af176886d0235a34e59df0
Certificate serial:       01A0ED9BB3E793131C1F22846D2E2D85BEC3
Authority key identifier: 4F:6C:17:1B:4C:75:D6:50:A8:AF:17:68:86:D0:23:5A:34:E5:9D:F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T2wXG0x11lCorxdohtAjWjTlnfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/ghrKVF9FWib3Hu7p0PLQBqt4JyU.asa
Signing time:             Tue 29 Sep 2026 14:39:59 +0000
ASPA not before:          Tue 29 Sep 2026 14:39:59 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            47311
Providers:                AS: 38158
                          AS: 58389
                          AS: 133210
                          AS: 137409
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T2wXG0x11lCorxdohtAjWjTlnfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 20:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ed:9b:b3:e7:93:13:1c:1f:22:84:6d:2e:2d:85:be:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f6c171b4c75d650a8af176886d0235a34e59df0
        Validity
            Not Before: Sep 29 14:39:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=821aca545f455a26f71eeee9d0f2d006ab782725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ac:a1:e9:f3:fc:db:bf:a0:36:87:88:82:62:
                    53:09:ca:3d:0c:ab:83:bc:cd:6e:26:71:3e:98:06:
                    a0:ce:ad:8d:c2:4c:4f:db:73:b7:d9:59:b8:92:dd:
                    f8:59:7c:db:c2:34:1c:ac:c8:a9:99:f8:e4:f2:99:
                    f3:06:61:62:5c:b2:53:fd:de:4c:b7:9c:48:72:53:
                    bc:46:84:ce:40:d8:dd:e5:38:6d:b5:55:8a:2e:4d:
                    f8:1b:53:36:14:1d:89:22:6b:07:09:96:70:97:1b:
                    3a:c0:0f:93:5a:c1:22:e5:a8:91:94:e0:cd:a7:d5:
                    8a:8d:c0:b4:f4:55:4d:cd:ad:69:75:20:30:e6:5b:
                    b8:0a:cd:2b:e5:8f:b7:27:e3:47:b9:52:49:fd:88:
                    26:c9:e8:09:20:15:c4:f3:06:38:0a:02:5c:e9:b8:
                    7e:b5:ac:64:b4:41:b3:21:6b:a0:dd:bf:3b:e8:29:
                    5f:c6:92:a8:d9:71:d0:33:74:10:39:fb:18:4b:70:
                    92:1d:87:b2:b9:97:bc:fa:a0:91:0a:19:22:bd:9e:
                    a5:ff:a8:64:7c:50:c7:16:ee:d6:2a:67:d1:80:2a:
                    5e:c4:94:c7:17:ab:5c:41:3f:ff:d2:28:e2:ca:bd:
                    d0:b3:62:3b:80:f0:7e:26:5c:b4:cf:d4:c5:72:7b:
                    c0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:1A:CA:54:5F:45:5A:26:F7:1E:EE:E9:D0:F2:D0:06:AB:78:27:25
            X509v3 Authority Key Identifier:
                keyid:4F:6C:17:1B:4C:75:D6:50:A8:AF:17:68:86:D0:23:5A:34:E5:9D:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2wXG0x11lCorxdohtAjWjTlnfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/ghrKVF9FWib3Hu7p0PLQBqt4JyU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47311

    Signature Algorithm: sha256WithRSAEncryption
         09:4f:d8:d5:03:d0:e9:4d:56:84:c2:d7:73:02:4e:3d:64:48:
         7d:c6:de:a6:4a:63:ee:54:63:76:8e:45:37:db:e8:e5:27:2e:
         50:d8:e8:f5:47:d9:55:c7:5f:9a:ce:52:37:72:bd:a0:a1:56:
         ae:b3:3a:fc:ca:3c:9e:e9:6f:71:73:62:d3:11:9b:2d:ce:4c:
         a5:db:b2:98:2c:f0:95:25:1e:dc:4a:66:bf:b2:e8:b9:63:a1:
         13:7d:8f:d1:4a:7b:e0:fa:86:bf:f8:db:ea:cb:45:98:28:f7:
         12:d9:9a:e0:0a:62:f0:8b:90:cb:c2:26:b8:9e:6b:d9:8d:c6:
         97:25:fb:4a:80:72:ec:22:94:58:62:4d:e4:30:ca:41:18:8f:
         3f:1d:9a:3b:f1:b9:87:3e:64:a9:39:df:4d:3a:73:53:12:2c:
         a7:f4:51:a6:f9:8f:65:7e:bb:70:c2:79:bc:dd:14:bb:2e:ca:
         d4:3a:c8:74:8d:09:a2:ac:2f:3c:1b:2a:82:5f:da:82:aa:f4:
         ee:98:a0:de:c4:25:54:63:b8:35:0c:7d:f7:b7:69:20:af:83:
         32:f4:d3:ca:41:c4:a4:00:81:ec:6b:de:01:36:8b:c3:8f:59:
         e7:3e:1c:b7:91:e9:8e:c4:9a:2d:d7:24:f6:d2:bd:51:36:0b:
         84:97:48:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 05:41:03 2026 by rpki-client