Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/6ZaDzWHDJYly-tvowxGIafrceIw.asa
File:                     6ZaDzWHDJYly-tvowxGIafrceIw.asa (raw, json)
Hash identifier:          Am7TblfvT7puFE6LzT+FtyBAQj9IYqPzB4oZ+KLZ5sc=
Subject key identifier:   E9:96:83:CD:61:C3:25:89:72:FA:DB:E8:C3:11:88:69:FA:DC:78:8C
Certificate issuer:       /CN=91cbd4dee9400991784a22fb4f42b2a72e5e30f2
Certificate serial:       01A139250AE3E7AF192F35E5A5ED7495B845
Authority key identifier: 91:CB:D4:DE:E9:40:09:91:78:4A:22:FB:4F:42:B2:A7:2E:5E:30:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kcvU3ulACZF4SiL7T0Kypy5eMPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/6ZaDzWHDJYly-tvowxGIafrceIw.asa
Signing time:             Wed 14 Oct 2026 06:41:31 +0000
ASPA not before:          Wed 14 Oct 2026 06:41:31 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            48469
Providers:                AS: 1299
                          AS: 3356
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/kcvU3ulACZF4SiL7T0Kypy5eMPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/kcvU3ulACZF4SiL7T0Kypy5eMPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kcvU3ulACZF4SiL7T0Kypy5eMPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 06:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:39:25:0a:e3:e7:af:19:2f:35:e5:a5:ed:74:95:b8:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91cbd4dee9400991784a22fb4f42b2a72e5e30f2
        Validity
            Not Before: Oct 14 06:41:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e99683cd61c3258972fadbe8c3118869fadc788c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5c:b5:fb:3b:d3:8e:34:ae:81:40:e4:89:c9:
                    fb:7f:ba:9c:25:8b:1c:ce:af:1d:67:46:68:ae:fb:
                    1b:fd:aa:77:f7:a7:b1:7f:4f:c6:34:84:27:8f:fd:
                    17:c9:80:b6:ac:39:2f:7a:6f:83:d8:60:21:d3:02:
                    c4:1c:07:8b:1c:4b:4c:42:7f:de:19:86:2d:b4:46:
                    1a:96:a4:f6:33:7a:db:21:80:c5:46:9c:c2:47:5f:
                    59:b1:c2:3f:90:b0:dd:7d:95:45:be:75:fb:73:f6:
                    9e:1d:f0:14:8f:b9:39:cc:c2:f3:ca:dd:24:4f:9c:
                    53:b2:0e:e0:02:9c:ab:d8:43:39:1f:14:7b:3c:06:
                    30:b1:c4:4b:cc:28:73:e3:83:83:9e:e2:2d:0b:e0:
                    8a:57:41:e5:6a:64:61:e7:ea:77:ef:2d:98:e9:f9:
                    c7:10:26:28:f0:aa:86:e9:dc:45:a8:e5:0d:11:eb:
                    f2:20:f3:18:46:58:d4:92:9d:b2:80:b7:0c:04:5d:
                    47:56:ad:ac:ca:ee:6f:56:35:9b:4d:ad:3a:46:07:
                    57:89:22:e2:c4:fc:db:66:88:7d:9b:e7:b2:4d:ec:
                    56:b4:10:13:30:aa:4b:4d:fa:16:96:37:c5:e5:5a:
                    2c:5d:64:1f:ac:0a:3a:cb:4d:31:ca:28:62:d2:97:
                    86:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:96:83:CD:61:C3:25:89:72:FA:DB:E8:C3:11:88:69:FA:DC:78:8C
            X509v3 Authority Key Identifier:
                keyid:91:CB:D4:DE:E9:40:09:91:78:4A:22:FB:4F:42:B2:A7:2E:5E:30:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcvU3ulACZF4SiL7T0Kypy5eMPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/6ZaDzWHDJYly-tvowxGIafrceIw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/kcvU3ulACZF4SiL7T0Kypy5eMPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48469

    Signature Algorithm: sha256WithRSAEncryption
         ba:f2:ae:a3:a3:d1:3e:99:9c:c9:3b:82:f1:b3:ee:41:c3:d7:
         60:db:15:53:80:20:be:08:25:b1:2a:54:e9:0a:c0:b7:e9:1e:
         69:f8:27:c8:f1:5b:e7:bb:d7:8a:6a:05:4c:2b:ff:b0:a0:fe:
         57:24:2c:1b:fc:e9:a5:0a:25:b9:ae:24:bc:5e:4e:7c:2a:b0:
         2f:ee:e1:14:f8:35:32:fc:a0:2b:d7:e6:c4:42:d9:1d:6e:6f:
         24:23:c9:9e:02:c0:5f:29:f8:8a:47:82:b7:69:ac:37:2c:19:
         1e:ac:b7:19:56:2b:6b:e2:cd:bd:fe:12:f7:bb:8f:9e:e9:fe:
         b4:a3:12:82:31:70:3b:aa:3f:74:c6:75:59:e5:57:c5:43:3e:
         e5:68:00:d9:3e:b0:2a:d5:3e:d6:5b:62:7d:14:4a:0e:e5:f7:
         7b:7d:7f:e6:dd:b7:f9:e6:9c:fe:6d:bc:e9:76:12:6e:db:8b:
         c7:a5:64:34:68:ed:5e:6c:5a:1e:b9:f0:40:1b:4d:a9:60:50:
         c1:55:90:0c:8b:4d:86:53:e3:0d:cd:8d:86:4a:34:17:06:00:
         0e:95:01:9f:c8:3e:ee:50:0d:ec:48:c5:d4:9d:93:b0:02:35:
         1b:08:62:4a:02:39:d3:a8:54:18:03:d7:43:c8:bc:7f:bf:94:
         9d:b3:b5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 12:12:50 2026 by rpki-client