Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/182547-d386-433d-ac2a-3cf0256583c6/1/Eyy0e9AUOu6E0GLm6Avmy16177k.asa
File:                     Eyy0e9AUOu6E0GLm6Avmy16177k.asa (raw, json)
Hash identifier:          Ne4FEdW/fVlbAQzBfyetsJMmus7yWY1QlY1cVzrqE/s=
Subject key identifier:   13:2C:B4:7B:D0:14:3A:EE:84:D0:62:E6:E8:0B:E6:CB:5E:B5:EF:B9
Certificate issuer:       /CN=2cd9983169f960a0ec411df174059bdcfbec8132
Certificate serial:       01A056783C212672F9D4EFA8788624A02CC0
Authority key identifier: 2C:D9:98:31:69:F9:60:A0:EC:41:1D:F1:74:05:9B:DC:FB:EC:81:32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LNmYMWn5YKDsQR3xdAWb3PvsgTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/182547-d386-433d-ac2a-3cf0256583c6/1/Eyy0e9AUOu6E0GLm6Avmy16177k.asa
Signing time:             Mon 31 Aug 2026 06:18:35 +0000
ASPA not before:          Mon 31 Aug 2026 06:18:35 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            43160
Providers:                AS: 174
                          AS: 29119
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/182547-d386-433d-ac2a-3cf0256583c6/1/LNmYMWn5YKDsQR3xdAWb3PvsgTI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/182547-d386-433d-ac2a-3cf0256583c6/1/LNmYMWn5YKDsQR3xdAWb3PvsgTI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LNmYMWn5YKDsQR3xdAWb3PvsgTI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Sep 2026 06:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:56:78:3c:21:26:72:f9:d4:ef:a8:78:86:24:a0:2c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cd9983169f960a0ec411df174059bdcfbec8132
        Validity
            Not Before: Aug 31 06:18:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=132cb47bd0143aee84d062e6e80be6cb5eb5efb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c8:2c:21:b3:66:7a:20:36:e9:b0:2e:de:1f:
                    8f:35:ae:89:1a:00:f4:29:47:0f:d8:00:53:ec:71:
                    ba:c3:53:b6:89:64:72:a3:d2:ac:31:83:9b:80:ec:
                    77:a4:26:34:3c:d2:73:00:20:63:ce:71:ad:26:fc:
                    df:8d:03:8d:dc:51:d7:ee:52:8b:4a:43:f3:66:92:
                    71:f1:b1:98:04:77:ed:99:99:ef:12:7e:a3:ea:a1:
                    37:f6:6d:4a:fa:74:16:17:b9:f9:cd:04:a8:91:9b:
                    de:22:bc:e7:5e:3d:19:03:dc:0c:11:e1:33:db:bd:
                    79:e3:36:3f:91:ae:f8:2b:66:14:c2:22:52:5e:40:
                    48:7a:f7:5d:10:82:94:53:b5:ee:27:44:17:0e:0e:
                    7e:d0:75:54:ec:62:e1:be:2e:e5:8f:26:71:8a:02:
                    ef:81:59:ef:54:85:12:f1:ee:32:99:88:a9:6c:3c:
                    a5:71:b5:32:6a:ba:3c:3c:98:e7:13:e0:d3:c4:ce:
                    eb:97:e1:4b:65:11:bf:2f:a0:3c:a6:0d:2a:0c:e7:
                    74:31:49:40:d8:6f:53:5f:42:6c:c6:da:6c:8d:93:
                    43:0c:4e:e5:25:93:a0:e6:38:db:4d:4b:f6:93:63:
                    e2:b1:0a:9e:96:3f:f1:76:c3:8b:b2:17:ab:fb:f6:
                    30:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:2C:B4:7B:D0:14:3A:EE:84:D0:62:E6:E8:0B:E6:CB:5E:B5:EF:B9
            X509v3 Authority Key Identifier:
                keyid:2C:D9:98:31:69:F9:60:A0:EC:41:1D:F1:74:05:9B:DC:FB:EC:81:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNmYMWn5YKDsQR3xdAWb3PvsgTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/182547-d386-433d-ac2a-3cf0256583c6/1/Eyy0e9AUOu6E0GLm6Avmy16177k.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/182547-d386-433d-ac2a-3cf0256583c6/1/LNmYMWn5YKDsQR3xdAWb3PvsgTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  43160

    Signature Algorithm: sha256WithRSAEncryption
         56:1e:69:b1:8c:6a:8f:17:da:84:9c:df:97:f9:10:03:1e:8e:
         52:22:f2:f8:dd:d3:5a:89:fd:52:f3:76:cc:7f:24:3c:25:54:
         2d:12:28:0a:c7:93:07:a7:04:a2:7b:8a:af:36:de:5d:27:2a:
         00:ee:bb:8c:4d:cf:4e:23:b0:1a:6a:54:0a:20:cf:dc:a5:79:
         bc:85:70:f4:ae:c1:15:2f:8f:8c:99:2e:45:0a:f0:f9:b3:6f:
         a0:2c:16:75:ab:46:ae:98:01:c0:42:78:7e:37:d3:19:36:17:
         95:10:27:0c:9a:a3:8e:81:d9:de:99:53:33:92:2f:4d:7b:a8:
         a9:0d:aa:57:a4:d7:5e:e2:2d:4d:de:53:7d:f2:92:76:83:07:
         5a:25:64:f8:e0:e2:1f:c0:76:30:c0:a6:83:10:ee:d9:40:aa:
         fc:f5:56:5f:82:db:9e:2c:bc:59:9d:dd:15:ec:bd:7f:e0:25:
         0b:08:08:95:d8:a4:96:2b:ea:47:70:ae:6f:76:96:3c:0c:c6:
         ea:c7:1f:65:f8:fd:cc:85:c5:6d:3e:a7:62:fd:05:0c:92:b2:
         de:d4:a3:99:8f:1f:75:09:1b:eb:3b:b0:14:43:c7:26:7f:d1:
         a7:17:8d:be:02:8d:ff:95:32:11:39:a4:8e:cb:c8:e0:8c:80:
         b5:ee:a6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 15:52:30 2026 by rpki-client