Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/33bb7b-6961-4666-8c7c-b49328a83c7a/1/xD1FvOaiEFh5ysj88lS8MTIdW2g.asa
File:                     xD1FvOaiEFh5ysj88lS8MTIdW2g.asa (raw, json)
Hash identifier:          KAoDwy8drJxtWLbn5m2+kt0XoQMoDWbD5rAScE/zd4c=
Subject key identifier:   C4:3D:45:BC:E6:A2:10:58:79:CA:C8:FC:F2:54:BC:31:32:1D:5B:68
Certificate issuer:       /CN=ac4bab607c6d1b7cabdaba6b0fa97387b8c66842
Certificate serial:       01A0CE643B8148E5DE63B1D59A1465A1DC55
Authority key identifier: AC:4B:AB:60:7C:6D:1B:7C:AB:DA:BA:6B:0F:A9:73:87:B8:C6:68:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rEurYHxtG3yr2rprD6lzh7jGaEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/33bb7b-6961-4666-8c7c-b49328a83c7a/1/xD1FvOaiEFh5ysj88lS8MTIdW2g.asa
Signing time:             Wed 23 Sep 2026 13:11:10 +0000
ASPA not before:          Wed 23 Sep 2026 13:11:10 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            213929
Providers:                AS: 1299
                          AS: 13030
                          AS: 197071
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/33bb7b-6961-4666-8c7c-b49328a83c7a/1/rEurYHxtG3yr2rprD6lzh7jGaEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/33bb7b-6961-4666-8c7c-b49328a83c7a/1/rEurYHxtG3yr2rprD6lzh7jGaEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rEurYHxtG3yr2rprD6lzh7jGaEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:64:3b:81:48:e5:de:63:b1:d5:9a:14:65:a1:dc:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac4bab607c6d1b7cabdaba6b0fa97387b8c66842
        Validity
            Not Before: Sep 23 13:11:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c43d45bce6a2105879cac8fcf254bc31321d5b68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:77:37:a4:a0:a4:b7:0d:97:ea:4b:aa:32:d6:
                    3c:1b:d4:1f:f4:ec:5e:09:d8:a1:10:28:2a:eb:4e:
                    6e:0c:f6:8f:cb:25:1c:37:99:3b:2f:8a:22:f3:5a:
                    50:ed:da:6f:ba:71:59:6f:39:1c:04:2e:cf:02:e6:
                    22:f4:1b:bd:32:f6:c1:84:a3:c0:aa:36:1a:ea:d5:
                    56:ae:54:83:66:c7:77:9f:6a:d0:b5:c6:81:be:a7:
                    4f:77:75:5a:c7:5a:50:c7:ba:2c:a3:b1:d7:ee:af:
                    77:26:33:9a:f0:fe:40:52:21:d3:93:a1:73:e6:d8:
                    0d:ed:93:a2:99:27:8c:67:04:6e:f6:71:1b:ec:dd:
                    23:ae:00:50:72:ba:b6:43:1d:ba:91:74:7a:44:c5:
                    04:15:6c:1f:bc:4b:c0:f6:ad:9a:fe:37:20:a7:96:
                    0c:54:44:fb:27:9f:3a:16:ee:22:5b:03:a4:49:99:
                    b2:9c:d8:bc:a6:13:75:88:05:74:25:43:dd:61:c2:
                    df:cc:cf:e7:a9:cb:d4:d5:e7:e0:21:5d:22:42:a5:
                    91:50:e2:48:b4:7c:32:06:73:3c:40:c1:e0:5d:f9:
                    83:dc:9e:23:34:a2:33:a5:d1:c0:c9:90:d2:14:d3:
                    b8:ff:45:cc:af:d8:54:ed:7a:1d:bd:bd:c1:7a:65:
                    57:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:3D:45:BC:E6:A2:10:58:79:CA:C8:FC:F2:54:BC:31:32:1D:5B:68
            X509v3 Authority Key Identifier:
                keyid:AC:4B:AB:60:7C:6D:1B:7C:AB:DA:BA:6B:0F:A9:73:87:B8:C6:68:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rEurYHxtG3yr2rprD6lzh7jGaEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/33bb7b-6961-4666-8c7c-b49328a83c7a/1/xD1FvOaiEFh5ysj88lS8MTIdW2g.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/33bb7b-6961-4666-8c7c-b49328a83c7a/1/rEurYHxtG3yr2rprD6lzh7jGaEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213929

    Signature Algorithm: sha256WithRSAEncryption
         03:83:53:fc:b9:00:39:f3:e2:1b:6c:8e:7d:9a:4f:0a:11:11:
         07:d2:c0:43:cf:01:db:88:33:ee:99:80:8b:4d:e3:cb:bd:60:
         1a:ed:38:8b:26:52:1a:fe:eb:78:82:d3:b6:61:b4:88:bb:73:
         0d:45:3b:5b:74:4c:b6:40:4b:69:3a:ae:2e:ea:cf:31:37:29:
         22:dc:32:e7:a2:35:2f:a6:9a:46:d5:d3:c4:52:71:00:bb:10:
         55:a4:bd:4c:50:6c:3b:19:86:58:6a:aa:63:d5:ce:0c:86:47:
         d4:8d:ca:72:87:6b:b2:85:22:09:ff:8a:5c:26:e9:95:e4:39:
         8b:29:cd:ec:76:78:6c:b2:5c:62:0b:d1:34:a1:72:1f:c8:73:
         9a:10:29:89:aa:07:54:a6:08:8e:2a:79:79:2e:bd:6b:53:c7:
         53:7e:c6:bd:fc:b9:73:a7:e4:66:71:48:21:28:55:4a:98:00:
         c1:36:92:73:a2:eb:20:4c:a8:1d:3f:33:01:d4:85:38:08:09:
         32:55:d1:4c:64:29:c2:2a:48:9f:62:2f:22:23:d4:d9:b6:44:
         d9:d2:01:8e:f4:8c:34:1b:ec:fb:e6:3e:a4:17:5b:05:7f:9e:
         e0:c4:86:a2:4b:ee:13:02:ef:c3:13:db:74:10:d3:18:09:0f:
         36:2e:7e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:09:19 2026 by rpki-client