Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/zWx5COi8_poO9sJOSobIIhv1kGY.asa
File:                     zWx5COi8_poO9sJOSobIIhv1kGY.asa (raw, json)
Hash identifier:          lKkJdfqRw38s9DuFunpkXLb4Sh/VtXVYfe1d4K3593Y=
Subject key identifier:   CD:6C:79:08:E8:BC:FE:9A:0E:F6:C2:4E:4A:86:C8:22:1B:F5:90:66
Certificate issuer:       /CN=9bbae6e3ed766de47aba6693bb5af8a648974310
Certificate serial:       01A11FB8B5D7C6C870B1612A3610201F6C1C
Authority key identifier: 9B:BA:E6:E3:ED:76:6D:E4:7A:BA:66:93:BB:5A:F8:A6:48:97:43:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m7rm4-12beR6umaTu1r4pkiXQxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/zWx5COi8_poO9sJOSobIIhv1kGY.asa
Signing time:             Fri 09 Oct 2026 08:12:41 +0000
ASPA not before:          Fri 09 Oct 2026 08:12:41 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            51661
Providers:                AS: 35236
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m7rm4-12beR6umaTu1r4pkiXQxA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 07:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1f:b8:b5:d7:c6:c8:70:b1:61:2a:36:10:20:1f:6c:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bbae6e3ed766de47aba6693bb5af8a648974310
        Validity
            Not Before: Oct  9 08:12:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=cd6c7908e8bcfe9a0ef6c24e4a86c8221bf59066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a3:e0:74:86:f7:e5:63:2a:7f:a0:3e:ab:da:
                    bb:1c:fb:92:09:7a:43:69:b7:08:62:4f:15:96:ed:
                    aa:a8:60:bf:3e:a2:de:cf:42:6e:58:19:e2:5d:4b:
                    c6:83:17:6b:8c:5c:e9:9d:8a:ac:3c:b7:6b:24:9b:
                    58:43:3e:3c:34:05:27:ee:ae:cc:fd:ce:cb:37:b8:
                    cf:c0:38:7d:b8:7c:93:bc:40:4a:b4:e9:8e:80:0d:
                    72:34:5c:bd:9c:46:41:2f:7e:f3:21:06:ed:9b:58:
                    a7:81:60:e4:db:8a:af:41:fe:39:18:6b:26:fc:4d:
                    02:2e:28:ce:a8:8f:40:98:a6:38:21:46:67:6f:bf:
                    3a:53:32:0e:0e:06:b8:78:f9:d3:3c:34:37:55:55:
                    bc:2f:e4:66:12:3f:cc:4c:20:52:5f:f4:1f:65:5d:
                    c2:3a:71:88:fe:53:0c:6f:0e:b0:98:8a:ab:8e:ca:
                    50:5a:83:59:e1:3e:94:3b:9f:99:70:e4:53:b0:49:
                    d3:10:ea:9a:f7:7e:66:19:f8:a3:65:fa:02:54:b8:
                    71:aa:67:3b:52:c4:a8:2c:dd:9b:92:d9:63:19:9e:
                    5c:5a:61:cd:24:67:ab:e4:62:1c:4f:f5:63:6c:dd:
                    61:18:72:7e:8f:3e:e5:4d:fe:e3:90:41:96:93:a3:
                    2b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:6C:79:08:E8:BC:FE:9A:0E:F6:C2:4E:4A:86:C8:22:1B:F5:90:66
            X509v3 Authority Key Identifier:
                keyid:9B:BA:E6:E3:ED:76:6D:E4:7A:BA:66:93:BB:5A:F8:A6:48:97:43:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7rm4-12beR6umaTu1r4pkiXQxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/zWx5COi8_poO9sJOSobIIhv1kGY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51661

    Signature Algorithm: sha256WithRSAEncryption
         5f:fc:c7:72:34:30:8f:e3:bc:88:5d:92:f2:43:ce:4d:1b:30:
         d1:a6:ca:6f:e0:c9:ac:53:cb:3d:5b:71:c1:c0:04:36:10:29:
         3b:eb:04:bd:4e:bb:39:6c:03:59:11:03:81:a0:f2:bc:6e:cd:
         14:33:79:ea:26:f6:0d:65:6d:0f:ba:8f:d3:ab:e1:ae:23:81:
         09:cd:6f:ae:4f:b9:b4:ab:57:1d:24:f9:26:d1:a7:12:93:29:
         9f:87:88:02:92:0c:76:6c:87:9e:3a:cb:e3:1c:4b:28:35:1d:
         11:f0:c5:f3:01:ff:d2:a6:0d:01:20:de:97:4f:8f:ca:07:98:
         1a:4e:3d:54:ec:8f:b2:c6:4f:39:33:7b:a2:5d:98:f5:ca:60:
         8b:78:23:14:98:89:18:4c:8e:39:a3:57:a4:88:5c:2c:67:93:
         b3:6e:6a:21:13:2e:9c:0d:9e:1f:b0:14:d9:ca:47:d4:02:80:
         cb:01:1c:af:9b:5c:b7:d2:bb:e0:e0:89:06:3a:e7:00:9a:b2:
         cd:8e:d2:58:6d:aa:ae:c2:c4:17:7c:b5:7f:80:c2:9b:af:af:
         13:0a:95:63:94:cb:aa:20:3f:47:ca:94:7d:20:23:e7:ef:49:
         8e:b3:be:81:f0:16:a4:48:3b:65:4d:04:27:77:04:1c:ab:a9:
         dd:3b:7a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:29:59 2026 by rpki-client