Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/mbhPJYTTTLQjyhJPjHYhYA_8z0g.asa
File:                     mbhPJYTTTLQjyhJPjHYhYA_8z0g.asa (raw, json)
Hash identifier:          x5khb0HktZZHvbZTlDX34dWsKJuM/5mUFiMflItMxQA=
Subject key identifier:   99:B8:4F:25:84:D3:4C:B4:23:CA:12:4F:8C:76:21:60:0F:FC:CF:48
Certificate issuer:       /CN=4a7f4f8ac8ca7343ed1b4ff12ce276318b69d10e
Certificate serial:       01A143DD24411A180F41B8A3E3AF16CA3353
Authority key identifier: 4A:7F:4F:8A:C8:CA:73:43:ED:1B:4F:F1:2C:E2:76:31:8B:69:D1:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/mbhPJYTTTLQjyhJPjHYhYA_8z0g.asa
Signing time:             Fri 16 Oct 2026 08:38:48 +0000
ASPA not before:          Fri 16 Oct 2026 08:38:48 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            211623
Providers:                AS: 5405
                          AS: 6204
                          AS: 6939
                          AS: 20495
                          AS: 42093
                          AS: 50869
                          AS: 61049
                          AS: 203291
                          AS: 213753
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:43:dd:24:41:1a:18:0f:41:b8:a3:e3:af:16:ca:33:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a7f4f8ac8ca7343ed1b4ff12ce276318b69d10e
        Validity
            Not Before: Oct 16 08:38:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=99b84f2584d34cb423ca124f8c7621600ffccf48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cf:01:b5:b1:3f:59:85:d3:c4:79:95:bc:55:
                    05:cb:a4:51:83:31:38:f8:69:f0:42:fb:09:77:82:
                    44:16:df:25:70:57:74:cb:d0:5b:84:95:1d:57:f1:
                    0b:8c:88:79:93:8a:c3:e5:9b:2f:9c:e5:cf:ba:fc:
                    26:5f:a1:10:60:f3:93:75:3d:9c:08:0b:24:af:d7:
                    56:b5:e4:f7:bf:c0:bb:55:00:9b:ec:37:39:21:43:
                    98:f9:13:6b:d0:1a:77:02:47:05:bf:08:b5:d5:18:
                    38:ae:ff:50:ca:a7:0c:cb:e7:7f:7e:3a:c7:d3:e9:
                    11:f5:ed:52:0d:42:03:25:4f:c3:cb:80:20:a0:c3:
                    88:67:ae:92:aa:32:52:31:cc:4c:cc:32:05:ea:d2:
                    29:33:fb:6c:9f:bf:83:2d:82:e8:12:59:51:ef:72:
                    eb:e0:c6:72:6f:27:59:2e:4e:9d:ac:6c:f8:22:cb:
                    e0:8a:60:72:b6:c9:16:ec:8a:64:fb:2f:58:78:ab:
                    25:69:64:95:a1:50:3a:b7:13:3a:4d:cb:2e:ef:e2:
                    72:84:31:7a:0c:b1:48:84:61:08:b5:8b:09:31:63:
                    43:97:25:18:08:92:87:d5:3d:27:28:3e:33:af:8b:
                    87:cb:60:32:ef:99:14:55:46:e6:20:d5:f1:5e:ae:
                    93:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B8:4F:25:84:D3:4C:B4:23:CA:12:4F:8C:76:21:60:0F:FC:CF:48
            X509v3 Authority Key Identifier:
                keyid:4A:7F:4F:8A:C8:CA:73:43:ED:1B:4F:F1:2C:E2:76:31:8B:69:D1:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/mbhPJYTTTLQjyhJPjHYhYA_8z0g.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211623

    Signature Algorithm: sha256WithRSAEncryption
         7e:a1:ab:27:dc:2f:3f:77:e8:e5:fa:36:3b:06:61:09:77:86:
         70:6c:71:4f:41:ce:c9:2f:6b:b7:4e:91:ac:0c:1b:ee:57:c2:
         f6:ab:8d:ea:50:31:97:fd:91:b0:f3:59:be:4d:a5:69:5f:d2:
         2e:99:08:a6:f9:15:72:19:e4:fc:57:6e:ea:59:8c:58:a7:99:
         3c:5c:1a:cf:0a:a9:0c:14:e7:0a:cf:d8:70:58:8d:fd:80:c6:
         36:13:29:58:e3:8e:b6:31:4d:f9:a5:2b:3c:b7:07:5e:59:29:
         84:de:14:c2:2e:5a:84:0a:da:b1:26:f4:93:59:c0:3b:de:6e:
         73:16:1b:08:75:8e:8e:19:b5:fa:41:65:f9:cc:e3:c4:27:3b:
         c8:f4:5f:80:45:94:c8:d8:17:41:d7:42:ea:e8:21:55:aa:f9:
         e4:9f:f2:63:76:2d:b0:21:d8:8f:3e:22:c9:7c:b6:0d:fb:54:
         ce:56:bf:6c:bd:95:c8:09:df:b7:31:9d:c2:9b:6e:fc:ae:96:
         a1:5f:dd:54:b0:d3:b4:00:c4:85:bd:3f:eb:36:fa:4b:41:1e:
         d1:d6:6c:50:2b:80:e6:55:95:3d:fc:6d:da:02:c6:3b:98:a6:
         9f:e3:ac:56:66:3f:83:b8:ff:b2:d7:cb:ff:d8:94:70:8b:a6:
         78:4d:07:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:13:10 2026 by rpki-client