Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/a0a430-6292-4878-ae53-ea083eee9736/1/4Ti325ZbGOcZuFUoChTM7Uq0Z6Q.asa
File:                     4Ti325ZbGOcZuFUoChTM7Uq0Z6Q.asa (raw, json)
Hash identifier:          WAQWGj7do6H/nKPAi0jrKmB6LwEzo/cJdxBMWh3LmDo=
Subject key identifier:   E1:38:B7:DB:96:5B:18:E7:19:B8:55:28:0A:14:CC:ED:4A:B4:67:A4
Certificate issuer:       /CN=37e88a0a090dcfd56326335e0ddf8c556257adda
Certificate serial:       01A0DF419D072B64E626923B10C0C12EC137
Authority key identifier: 37:E8:8A:0A:09:0D:CF:D5:63:26:33:5E:0D:DF:8C:55:62:57:AD:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N-iKCgkNz9VjJjNeDd-MVWJXrdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/a0a430-6292-4878-ae53-ea083eee9736/1/4Ti325ZbGOcZuFUoChTM7Uq0Z6Q.asa
Signing time:             Sat 26 Sep 2026 19:46:54 +0000
ASPA not before:          Sat 26 Sep 2026 19:46:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            213434
Providers:                AS: 41051
                          AS: 47272
                          AS: 207841
                          AS: 209533
                          AS: 209735
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/a0a430-6292-4878-ae53-ea083eee9736/1/N-iKCgkNz9VjJjNeDd-MVWJXrdo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/a0a430-6292-4878-ae53-ea083eee9736/1/N-iKCgkNz9VjJjNeDd-MVWJXrdo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N-iKCgkNz9VjJjNeDd-MVWJXrdo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:41:9d:07:2b:64:e6:26:92:3b:10:c0:c1:2e:c1:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37e88a0a090dcfd56326335e0ddf8c556257adda
        Validity
            Not Before: Sep 26 19:46:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e138b7db965b18e719b855280a14cced4ab467a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c5:c0:c0:34:03:4d:7f:37:b3:19:e9:db:c0:
                    ae:cd:66:20:7a:60:8e:c5:dc:6b:11:57:5c:88:a4:
                    d8:b0:97:19:16:12:68:a6:38:de:d6:c6:57:b1:15:
                    82:f3:87:6b:7b:62:04:3a:a5:e1:21:df:5d:2a:6f:
                    76:8a:07:d1:cb:6f:d9:8a:ee:85:bf:1a:9a:e0:fe:
                    fc:8b:72:56:64:91:d5:06:e1:df:2f:b0:fe:1b:00:
                    ef:a3:9f:99:3a:f4:05:e9:58:ce:a4:0d:60:95:64:
                    cd:69:06:69:13:2b:13:02:f7:9e:33:1c:b4:5e:dd:
                    9b:24:5f:84:ad:69:aa:6c:11:aa:b2:0a:28:26:22:
                    c7:fe:0a:ad:e0:a3:22:72:6b:17:5d:9b:e6:f8:40:
                    aa:4a:2e:dd:f5:60:f6:ea:cf:9d:e2:71:cb:d9:dc:
                    3a:84:8d:86:01:23:96:43:3a:5b:9f:36:5a:d1:1f:
                    cb:58:56:9f:86:b6:42:62:ea:85:fb:da:99:2e:4e:
                    de:d4:d7:3c:19:a9:94:0c:e4:90:d3:ad:b3:a1:e6:
                    7b:8a:9f:a4:f5:84:54:3e:a2:f8:58:6a:4b:08:8f:
                    86:fe:94:23:ac:43:91:31:8c:82:ea:31:8e:df:56:
                    40:be:11:f1:f7:48:52:bb:2d:73:a2:39:bc:b0:ae:
                    38:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:38:B7:DB:96:5B:18:E7:19:B8:55:28:0A:14:CC:ED:4A:B4:67:A4
            X509v3 Authority Key Identifier:
                keyid:37:E8:8A:0A:09:0D:CF:D5:63:26:33:5E:0D:DF:8C:55:62:57:AD:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-iKCgkNz9VjJjNeDd-MVWJXrdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a0a430-6292-4878-ae53-ea083eee9736/1/4Ti325ZbGOcZuFUoChTM7Uq0Z6Q.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a0a430-6292-4878-ae53-ea083eee9736/1/N-iKCgkNz9VjJjNeDd-MVWJXrdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213434

    Signature Algorithm: sha256WithRSAEncryption
         b3:0a:9f:82:83:e6:e9:b3:76:31:41:af:dc:d6:cc:58:14:0b:
         8a:a9:fb:8e:eb:81:99:5f:d2:b6:31:84:1c:95:e2:fb:be:aa:
         8c:6e:e7:bd:73:81:d9:55:20:89:47:08:7b:d7:76:37:35:b8:
         61:f5:96:5a:75:bd:db:63:6b:c7:b5:62:65:28:8e:c6:76:63:
         2b:b7:1b:f1:19:de:4a:0f:37:81:a7:46:12:96:bf:a0:49:1a:
         aa:29:19:3a:78:c5:99:4c:b4:74:65:2e:5e:74:98:6a:e7:a5:
         08:9b:78:1a:b8:ef:00:2a:61:a8:3d:aa:28:b9:39:93:b2:1b:
         12:eb:67:00:28:64:4c:34:42:49:bb:1a:f5:2d:1d:b8:cf:77:
         bf:91:98:3a:c6:b0:80:02:3d:3e:1a:a3:af:18:2f:b8:3b:ca:
         58:9e:bb:b6:a5:17:80:d6:ca:cd:bf:0d:28:7e:bc:3b:4e:ad:
         f6:6a:a2:ea:54:6f:b5:8b:da:3f:cc:72:e4:d3:2e:fa:32:6a:
         04:d8:cc:5a:f9:2e:33:0d:eb:f5:e3:f4:ed:50:8f:d9:a1:c0:
         74:68:bb:8f:9a:ee:3f:e8:cf:2f:9f:31:24:8e:48:17:16:dd:
         20:01:54:55:d2:e1:2d:9b:d6:e3:ef:e3:00:be:32:63:38:88:
         16:fd:77:93
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAaDfQZ0HK2TmJpI7EMDBLsE3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3ZTg4YTBhMDkwZGNmZDU2MzI2MzM1ZTBkZGY4YzU1NjI1
N2FkZGEwHhcNMjYwOTI2MTk0NjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTM4YjdkYjk2NWIxOGU3MTliODU1MjgwYTE0Y2NlZDRhYjQ2N2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocXAwDQDTX83sxnp28CuzWYgemCO
xdxrEVdciKTYsJcZFhJopjje1sZXsRWC84dre2IEOqXhId9dKm92igfRy2/Ziu6F
vxqa4P78i3JWZJHVBuHfL7D+GwDvo5+ZOvQF6VjOpA1glWTNaQZpEysTAveeMxy0
Xt2bJF+ErWmqbBGqsgooJiLH/gqt4KMicmsXXZvm+ECqSi7d9WD26s+d4nHL2dw6
hI2GASOWQzpbnzZa0R/LWFafhrZCYuqF+9qZLk7e1Nc8GamUDOSQ062zoeZ7ip+k
9YRUPqL4WGpLCI+G/pQjrEORMYyC6jGO31ZAvhHx90hSuy1zojm8sK44TQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFOE4t9uWWxjnGbhVKAoUzO1KtGekMB8GA1UdIwQY
MBaAFDfoigoJDc/VYyYzXg3fjFViV63aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTi1pS0Nna056OVZqSmpOZURkLU1WV0pYcmRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9hMGE0MzAtNjI5Mi00ODc4LWFlNTMt
ZWEwODNlZWU5NzM2LzEvNFRpMzI1WmJHT2NadUZVb0NoVE03VXEwWjZRLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9hMGE0MzAtNjI5Mi00ODc4LWFlNTMtZWEwODNlZWU5NzM2
LzEvTi1pS0Nna056OVZqSmpOZURkLU1WV0pYcmRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNBujANBgkqhkiG
9w0BAQsFAAOCAQEAswqfgoPm6bN2MUGv3NbMWBQLiqn7juuBmV/StjGEHJXi+76q
jG7nvXOB2VUgiUcIe9d2NzW4YfWWWnW922Nrx7ViZSiOxnZjK7cb8RneSg83gadG
Epa/oEkaqikZOnjFmUy0dGUuXnSYauelCJt4GrjvACphqD2qKLk5k7IbEutnAChk
TDRCSbsa9S0duM93v5GYOsawgAI9PhqjrxgvuDvKWJ67tqUXgNbKzb8NKH68O06t
9mqi6lRvtYvaP8xy5NMu+jJqBNjMWvkuMw3r9eP07VCP2aHAdGi7j5ruP+jPL58x
JI5IFxbdIAFUVdLhLZvW4+/jAL4yYziIFv13kw==
-----END CERTIFICATE-----
Generated at Tue Sep 29 08:31:25 2026 by rpki-client