Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/7b17fb-8539-4608-9531-13504dc65ca7/1/4WNmw-gTRHmg-D_jXg9A0Hc_Mis.asa
File:                     4WNmw-gTRHmg-D_jXg9A0Hc_Mis.asa (raw, json)
Hash identifier:          Y0hTIBbfAFxXavbNGZn5hGiaXLjOpJkd26dk6w8/bcE=
Subject key identifier:   E1:63:66:C3:E8:13:44:79:A0:F8:3F:E3:5E:0F:40:D0:77:3F:32:2B
Certificate issuer:       /CN=546509e3248d65dfe0331fd7b99d2845f4ac7dff
Certificate serial:       019FF671B162B8171C2EC181AA5C557C5883
Authority key identifier: 54:65:09:E3:24:8D:65:DF:E0:33:1F:D7:B9:9D:28:45:F4:AC:7D:FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VGUJ4ySNZd_gMx_XuZ0oRfSsff8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/7b17fb-8539-4608-9531-13504dc65ca7/1/4WNmw-gTRHmg-D_jXg9A0Hc_Mis.asa
Signing time:             Wed 12 Aug 2026 14:47:53 +0000
ASPA not before:          Wed 12 Aug 2026 14:47:53 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            218976
Providers:                AS: 13335
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/7b17fb-8539-4608-9531-13504dc65ca7/1/VGUJ4ySNZd_gMx_XuZ0oRfSsff8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/7b17fb-8539-4608-9531-13504dc65ca7/1/VGUJ4ySNZd_gMx_XuZ0oRfSsff8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VGUJ4ySNZd_gMx_XuZ0oRfSsff8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 23:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f6:71:b1:62:b8:17:1c:2e:c1:81:aa:5c:55:7c:58:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546509e3248d65dfe0331fd7b99d2845f4ac7dff
        Validity
            Not Before: Aug 12 14:47:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e16366c3e8134479a0f83fe35e0f40d0773f322b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:48:c8:3a:68:29:18:b4:26:e2:15:66:c5:a4:
                    16:56:2d:fb:15:85:c4:9e:fc:db:c8:55:55:f6:ec:
                    6e:51:07:a2:ae:f0:d7:af:40:31:fb:e4:4f:3f:ce:
                    4d:17:31:8f:45:be:5c:77:f7:0c:5a:ea:fe:c2:67:
                    59:63:6e:92:4e:53:b8:e0:5e:97:88:1f:c9:7a:91:
                    c3:20:25:3d:91:9f:da:69:57:05:32:07:07:db:6c:
                    38:a5:38:b8:2c:15:a2:15:78:7f:61:eb:00:5a:27:
                    74:66:32:05:d9:21:09:dd:4d:6a:fa:a2:1a:5f:99:
                    fd:b3:2e:ff:de:90:d3:dc:c9:d9:82:ad:25:f0:73:
                    b2:1d:18:d3:77:3d:ec:cc:ac:99:ff:36:f7:df:74:
                    13:9f:c9:cd:9e:53:c8:22:0c:64:4b:a6:18:9c:aa:
                    73:10:2b:84:50:78:cf:89:47:fc:be:44:c7:3a:8c:
                    1d:8e:e3:28:11:c9:b5:d7:07:71:dd:ae:8a:f8:0c:
                    3f:31:b4:08:19:ff:4f:82:a4:13:cd:30:06:96:f9:
                    04:1d:3f:70:fa:aa:99:49:f3:74:83:b7:a7:e0:3b:
                    45:d0:12:f6:1d:50:eb:20:c7:87:d0:08:a4:f9:3c:
                    5e:ac:6c:7b:e8:a4:1c:82:a9:f5:59:e5:cf:2c:d3:
                    48:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:63:66:C3:E8:13:44:79:A0:F8:3F:E3:5E:0F:40:D0:77:3F:32:2B
            X509v3 Authority Key Identifier:
                keyid:54:65:09:E3:24:8D:65:DF:E0:33:1F:D7:B9:9D:28:45:F4:AC:7D:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGUJ4ySNZd_gMx_XuZ0oRfSsff8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7b17fb-8539-4608-9531-13504dc65ca7/1/4WNmw-gTRHmg-D_jXg9A0Hc_Mis.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7b17fb-8539-4608-9531-13504dc65ca7/1/VGUJ4ySNZd_gMx_XuZ0oRfSsff8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  218976

    Signature Algorithm: sha256WithRSAEncryption
         5a:29:94:56:8d:3d:ea:d3:85:31:45:7f:31:e8:a6:c1:76:96:
         f4:81:06:ed:5d:fd:90:44:2d:1c:5f:5d:58:f6:a8:2f:49:96:
         48:73:a5:42:bd:98:08:38:51:e6:cc:48:83:6a:c4:28:b9:f1:
         bb:81:73:1e:5c:77:8c:c0:56:48:13:96:38:8c:95:18:e4:9c:
         fd:99:70:a5:46:4c:05:3d:b7:a5:09:0c:eb:bb:66:12:a3:b2:
         89:0e:82:58:2e:3d:38:6a:db:93:b9:b0:5e:16:fe:ee:cf:cc:
         09:5a:bd:23:9d:99:b6:ff:2c:4b:f8:99:1e:87:5d:bd:c1:7e:
         d1:66:a4:7f:b4:f1:67:96:24:52:68:51:6b:48:98:8c:77:67:
         e9:cd:dc:78:c0:b0:0c:f3:ed:51:a6:8b:1f:da:62:6f:40:43:
         ec:b4:36:77:a8:be:cb:c8:82:28:bf:25:b4:a7:b4:58:3e:fc:
         70:1e:52:3a:26:73:37:7e:88:35:f7:b1:d8:e8:6e:ff:30:87:
         27:b2:20:8b:60:b2:5d:70:98:97:31:1a:fe:78:2c:26:17:93:
         69:85:9e:60:88:7e:34:9a:f0:75:af:38:fb:03:ea:86:3c:47:
         4b:60:5b:ee:5c:14:a0:40:2c:17:e2:b2:89:42:d2:79:52:4c:
         05:bc:f5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:50:20 2026 by rpki-client