Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/2fb3cc-68eb-444b-a50a-a31f2275a747/1/EET35YPKig-aB_CKmem9UXR7L3U.asa
File:                     EET35YPKig-aB_CKmem9UXR7L3U.asa (raw, json)
Hash identifier:          KSs20rWP8bv4R9wraJ1iDlFwuW3OYe5Js7R3LMI+1nE=
Subject key identifier:   10:44:F7:E5:83:CA:8A:0F:9A:07:F0:8A:99:E9:BD:51:74:7B:2F:75
Certificate issuer:       /CN=5830f7f4513a32d2552def4912c60a6488e69849
Certificate serial:       01A172AD0D0F744D0F66CE5AECB49F2BFA34
Authority key identifier: 58:30:F7:F4:51:3A:32:D2:55:2D:EF:49:12:C6:0A:64:88:E6:98:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WDD39FE6MtJVLe9JEsYKZIjmmEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/2fb3cc-68eb-444b-a50a-a31f2275a747/1/EET35YPKig-aB_CKmem9UXR7L3U.asa
Signing time:             Sun 25 Oct 2026 10:48:26 +0000
ASPA not before:          Sun 25 Oct 2026 10:48:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            219337
Providers:                AS: 215439
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/2fb3cc-68eb-444b-a50a-a31f2275a747/1/WDD39FE6MtJVLe9JEsYKZIjmmEk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/2fb3cc-68eb-444b-a50a-a31f2275a747/1/WDD39FE6MtJVLe9JEsYKZIjmmEk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WDD39FE6MtJVLe9JEsYKZIjmmEk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 10:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:72:ad:0d:0f:74:4d:0f:66:ce:5a:ec:b4:9f:2b:fa:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5830f7f4513a32d2552def4912c60a6488e69849
        Validity
            Not Before: Oct 25 10:48:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1044f7e583ca8a0f9a07f08a99e9bd51747b2f75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c7:b5:ed:c0:85:f8:fb:e5:be:c7:d5:0f:c7:
                    7c:65:0e:f4:3b:bd:9d:20:e5:c4:69:59:f0:a2:24:
                    75:12:d2:9c:78:00:85:90:6a:2a:5d:3f:8c:c0:5f:
                    10:71:29:e8:16:bd:2a:23:b5:ac:76:bd:ea:b6:9b:
                    5e:cb:bc:ff:3a:2a:59:a6:2d:dd:68:e3:4f:94:b9:
                    2a:43:35:40:a7:f6:de:db:26:c8:3a:0e:be:b0:f4:
                    8b:37:60:d3:4d:68:c1:52:2a:06:6f:d3:6d:98:ed:
                    40:3e:3a:1e:00:56:d4:69:ad:f7:79:b8:a4:93:54:
                    88:96:9a:c1:31:88:d6:61:b5:ce:0b:f4:56:22:98:
                    e3:ec:61:ee:0f:39:07:47:a8:3a:ec:ef:d2:bf:2a:
                    18:30:84:dc:ae:05:92:ba:f8:fa:c8:d3:ea:42:83:
                    45:15:ba:2f:ab:1e:95:4f:b1:1c:1e:94:b1:44:9a:
                    04:0a:dd:e9:a4:be:3b:f0:ed:b7:ed:cc:70:38:f3:
                    5e:10:e3:99:d0:6b:86:28:29:41:d5:23:b1:f9:b1:
                    9e:cf:5d:9e:e3:0b:04:b2:f2:fd:30:0c:16:68:e7:
                    9f:19:0a:0f:b9:9e:cd:37:5d:9f:73:13:b3:ad:ae:
                    f4:3f:7d:ed:d6:a4:73:46:c8:af:ea:f0:47:83:5a:
                    86:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:44:F7:E5:83:CA:8A:0F:9A:07:F0:8A:99:E9:BD:51:74:7B:2F:75
            X509v3 Authority Key Identifier:
                keyid:58:30:F7:F4:51:3A:32:D2:55:2D:EF:49:12:C6:0A:64:88:E6:98:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WDD39FE6MtJVLe9JEsYKZIjmmEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fb3cc-68eb-444b-a50a-a31f2275a747/1/EET35YPKig-aB_CKmem9UXR7L3U.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fb3cc-68eb-444b-a50a-a31f2275a747/1/WDD39FE6MtJVLe9JEsYKZIjmmEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  219337

    Signature Algorithm: sha256WithRSAEncryption
         22:c0:b3:d5:ab:20:b1:c1:a1:a4:c0:18:22:f5:2a:49:5b:9d:
         5c:5f:5e:19:84:e9:4b:ea:e5:ba:ac:a5:78:72:b7:ad:a3:9e:
         27:4e:13:a7:41:45:53:b9:36:28:c9:47:eb:0f:b5:41:57:9c:
         a5:59:25:29:7d:93:10:64:06:30:c9:09:a5:2c:78:78:4e:a7:
         19:11:bc:6d:65:c1:c4:8d:44:48:87:f2:57:33:b8:7d:0e:b2:
         99:dc:a8:e7:0c:d0:c2:cb:f1:fb:72:43:c6:9f:b6:ed:fc:47:
         5b:be:14:58:c2:f3:5e:57:06:70:3e:88:c1:e4:7c:eb:cf:3d:
         b0:0b:24:6d:92:2f:a6:9a:6a:cd:3d:14:d3:1b:57:c6:0b:dd:
         7d:0f:00:33:f3:3a:26:ad:d7:56:eb:91:b7:0f:f9:16:75:5b:
         47:19:5b:e0:fa:14:37:df:6b:f8:28:c9:56:23:65:e1:b4:78:
         f9:14:b4:23:56:12:87:a4:ac:cc:56:3c:74:3a:29:34:6d:6f:
         2f:dd:1b:6b:82:db:53:4e:8c:51:d4:90:bd:21:f8:6a:59:97:
         6f:e0:4b:3d:55:cb:12:ea:87:1c:f1:84:21:b2:91:64:1e:16:
         5e:84:2f:f7:8c:81:08:f7:67:35:12:4d:4b:03:13:02:09:0e:
         66:36:a9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 20:09:50 2026 by rpki-client