Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/7c7786-75e6-4760-8390-2dd1b4ee0e63/1/e-BKxknrj5Rc5DgLNPOkIybj4bA.asa
File:                     e-BKxknrj5Rc5DgLNPOkIybj4bA.asa (raw, json)
Hash identifier:          g0gYQx1auMLoa/k8os+VIaK8Q4U4RrRHMiA12p/YpYQ=
Subject key identifier:   7B:E0:4A:C6:49:EB:8F:94:5C:E4:38:0B:34:F3:A4:23:26:E3:E1:B0
Certificate issuer:       /CN=9375f2abd9998218c3a45fe17f4427bfcc723f72
Certificate serial:       01A1166AE454DC16AE21B1DF9C3A285F8A64
Authority key identifier: 93:75:F2:AB:D9:99:82:18:C3:A4:5F:E1:7F:44:27:BF:CC:72:3F:72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k3Xyq9mZghjDpF_hf0Qnv8xyP3I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/7c7786-75e6-4760-8390-2dd1b4ee0e63/1/e-BKxknrj5Rc5DgLNPOkIybj4bA.asa
Signing time:             Wed 07 Oct 2026 12:51:06 +0000
ASPA not before:          Wed 07 Oct 2026 12:51:06 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            41666
Providers:                AS: 2914
                          AS: 6939
                          AS: 49585
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/7c7786-75e6-4760-8390-2dd1b4ee0e63/1/k3Xyq9mZghjDpF_hf0Qnv8xyP3I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/7c7786-75e6-4760-8390-2dd1b4ee0e63/1/k3Xyq9mZghjDpF_hf0Qnv8xyP3I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k3Xyq9mZghjDpF_hf0Qnv8xyP3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:16:6a:e4:54:dc:16:ae:21:b1:df:9c:3a:28:5f:8a:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9375f2abd9998218c3a45fe17f4427bfcc723f72
        Validity
            Not Before: Oct  7 12:51:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7be04ac649eb8f945ce4380b34f3a42326e3e1b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c3:c7:16:3a:7c:ae:b1:b2:56:08:d0:d3:80:
                    e7:0a:80:6e:36:51:55:78:3d:21:9b:a2:e3:b4:b9:
                    aa:ed:5b:97:f6:37:80:f8:16:bc:45:b7:42:c1:ac:
                    8f:d5:45:54:f3:fc:52:c4:ae:8c:f9:0e:2d:a5:ad:
                    4f:fe:0f:8c:44:c8:7d:97:19:22:ab:a9:49:73:a2:
                    cb:6e:53:e6:d0:e4:f3:49:d9:73:7d:68:ac:f7:c8:
                    74:8c:06:10:d3:99:5c:08:45:cf:94:db:09:64:79:
                    20:bc:72:81:db:4f:fa:68:f5:49:d3:07:0d:86:c6:
                    7b:d5:e1:69:22:33:e6:23:68:c7:43:ae:e0:7d:52:
                    93:85:86:d3:4b:3d:ec:9a:0d:cd:d1:37:fb:b6:a5:
                    2d:a5:3e:a3:c8:a8:7c:8d:fc:9a:f4:32:01:a2:69:
                    d2:1f:6c:11:6b:b6:41:d9:e4:0c:ac:22:38:88:f0:
                    bc:6d:1a:95:e9:13:98:56:9e:b9:98:d8:3e:08:20:
                    98:58:a7:72:6f:63:5c:9f:26:1f:08:8f:4e:58:41:
                    4f:46:6c:50:c1:30:ce:85:3f:b8:94:b6:1f:20:58:
                    23:dd:02:8f:66:f4:96:a8:3a:31:2a:32:74:df:a5:
                    fd:7f:ec:da:c3:d1:58:16:cf:06:44:eb:34:6d:b3:
                    98:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E0:4A:C6:49:EB:8F:94:5C:E4:38:0B:34:F3:A4:23:26:E3:E1:B0
            X509v3 Authority Key Identifier:
                keyid:93:75:F2:AB:D9:99:82:18:C3:A4:5F:E1:7F:44:27:BF:CC:72:3F:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3Xyq9mZghjDpF_hf0Qnv8xyP3I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7c7786-75e6-4760-8390-2dd1b4ee0e63/1/e-BKxknrj5Rc5DgLNPOkIybj4bA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7c7786-75e6-4760-8390-2dd1b4ee0e63/1/k3Xyq9mZghjDpF_hf0Qnv8xyP3I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  41666

    Signature Algorithm: sha256WithRSAEncryption
         7b:96:c0:07:63:ce:d8:94:5b:0f:c4:2c:14:c2:de:5f:1b:6a:
         f0:33:49:fe:aa:8f:0e:41:11:c6:48:19:f2:ea:68:0b:22:b0:
         18:97:bd:bb:98:06:67:c8:3f:42:52:f7:a1:55:d5:68:23:16:
         5e:0c:07:4f:0c:f5:da:60:9f:7c:98:76:34:33:24:fb:64:9b:
         87:d5:6f:0a:66:33:d2:2c:87:b7:d2:a2:8f:58:a6:c5:92:8b:
         ba:59:e8:a0:06:c3:34:a4:7f:fd:bd:40:4f:c3:dd:4a:09:a0:
         ad:f1:cb:ea:91:ed:2c:3a:cf:da:ad:bb:b1:a2:4a:35:53:de:
         6c:9c:a9:b6:56:8e:96:0f:54:f9:0c:3c:7b:1b:cc:c7:ec:25:
         06:e5:97:58:f5:62:2c:a3:67:70:dd:51:2a:0b:6f:80:1b:3b:
         a4:b2:f3:bd:63:a6:e9:ec:28:ed:2c:36:1f:8a:d6:5e:d6:12:
         be:49:26:9e:3f:06:12:05:06:aa:ae:09:65:38:60:9b:c6:82:
         5b:ac:a2:bb:db:de:8e:e6:99:7f:b2:26:9d:01:e1:97:a6:6a:
         4c:d6:9f:3b:98:dc:2f:1f:6d:ab:c8:fe:c1:98:4f:4f:c7:c7:
         a1:10:dc:8c:cc:75:e8:df:4c:13:b4:34:88:79:b6:bd:29:87:
         56:93:fd:54
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAaEWauRU3BauIbHfnDooX4pkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNzVmMmFiZDk5OTgyMThjM2E0NWZlMTdmNDQyN2JmY2M3
MjNmNzIwHhcNMjYxMDA3MTI1MTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmUwNGFjNjQ5ZWI4Zjk0NWNlNDM4MGIzNGYzYTQyMzI2ZTNlMWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssPHFjp8rrGyVgjQ04DnCoBuNlFV
eD0hm6LjtLmq7VuX9jeA+Ba8RbdCwayP1UVU8/xSxK6M+Q4tpa1P/g+MRMh9lxki
q6lJc6LLblPm0OTzSdlzfWis98h0jAYQ05lcCEXPlNsJZHkgvHKB20/6aPVJ0wcN
hsZ71eFpIjPmI2jHQ67gfVKThYbTSz3smg3N0Tf7tqUtpT6jyKh8jfya9DIBomnS
H2wRa7ZB2eQMrCI4iPC8bRqV6ROYVp65mNg+CCCYWKdyb2NcnyYfCI9OWEFPRmxQ
wTDOhT+4lLYfIFgj3QKPZvSWqDoxKjJ036X9f+zaw9FYFs8GROs0bbOYIQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFHvgSsZJ64+UXOQ4CzTzpCMm4+GwMB8GA1UdIwQY
MBaAFJN18qvZmYIYw6Rf4X9EJ7/Mcj9yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazNYeXE5bVpnaGpEcEZfaGYwUW52OHh5UDNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy83Yzc3ODYtNzVlNi00NzYwLTgzOTAt
MmRkMWI0ZWUwZTYzLzEvZS1CS3hrbnJqNVJjNURnTE5QT2tJeWJqNGJBLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy83Yzc3ODYtNzVlNi00NzYwLTgzOTAtMmRkMWI0ZWUwZTYz
LzEvazNYeXE5bVpnaGpEcEZfaGYwUW52OHh5UDNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCiwjANBgkqhkiG
9w0BAQsFAAOCAQEAe5bAB2PO2JRbD8QsFMLeXxtq8DNJ/qqPDkERxkgZ8upoCyKw
GJe9u5gGZ8g/QlL3oVXVaCMWXgwHTwz12mCffJh2NDMk+2Sbh9VvCmYz0iyHt9Ki
j1imxZKLulnooAbDNKR//b1AT8PdSgmgrfHL6pHtLDrP2q27saJKNVPebJyptlaO
lg9U+Qw8exvMx+wlBuWXWPViLKNncN1RKgtvgBs7pLLzvWOm6ewo7Sw2H4rWXtYS
vkkmnj8GEgUGqq4JZThgm8aCW6yiu9vejuaZf7ImnQHhl6ZqTNafO5jcLx9tq8j+
wZhPT8fHoRDcjMx16N9ME7Q0iHm2vSmHVpP9VA==
-----END CERTIFICATE-----
Generated at Sun Oct 11 22:21:16 2026 by rpki-client