Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/4XK7sOAIBJyKdrNvrm62DKPaTZc.asa
File:                     4XK7sOAIBJyKdrNvrm62DKPaTZc.asa (raw, json)
Hash identifier:          OCDQEjsZCZDBvM9EGXTJe9NcaykERstF8dA5iS2a/aA=
Subject key identifier:   E1:72:BB:B0:E0:08:04:9C:8A:76:B3:6F:AE:6E:B6:0C:A3:DA:4D:97
Certificate issuer:       /CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Certificate serial:       01A181A6950BEE529AEEB11B0302548A3D4C
Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/4XK7sOAIBJyKdrNvrm62DKPaTZc.asa
Signing time:             Wed 28 Oct 2026 08:35:40 +0000
ASPA not before:          Wed 28 Oct 2026 08:35:40 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            213703
Providers:                AS: 41051
                          AS: 63473
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 10:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:81:a6:95:0b:ee:52:9a:ee:b1:1b:03:02:54:8a:3d:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8
        Validity
            Not Before: Oct 28 08:35:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e172bbb0e008049c8a76b36fae6eb60ca3da4d97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:91:2b:d9:d2:2c:20:9e:d0:38:ba:8b:6a:85:
                    e9:8c:d4:35:1c:91:38:22:e6:1f:33:22:c0:9a:3d:
                    c2:ad:58:a9:39:73:e7:dc:11:6f:5a:cd:9a:22:77:
                    5e:4e:3c:1d:b9:eb:28:74:f5:c4:a8:0c:a2:67:d0:
                    15:31:c0:97:68:08:32:6f:a4:c2:41:27:e8:90:23:
                    39:3e:b0:b6:0b:0d:e1:35:11:2a:33:4c:4c:f2:ca:
                    6e:79:fd:77:4b:81:82:d9:7e:b8:d9:77:bc:ef:f0:
                    59:3d:18:60:7b:d6:c7:4d:73:59:d1:dd:cb:95:74:
                    45:bf:b1:94:f0:2e:4e:8d:8c:3e:e0:9b:04:97:a9:
                    38:67:28:6e:b2:75:c1:b6:2e:e4:bf:1b:63:40:a2:
                    7a:bc:9f:fb:78:31:43:fd:b2:05:72:a5:ec:8a:fd:
                    20:21:45:28:56:25:f7:72:be:1d:25:36:ef:1b:78:
                    22:3a:84:23:96:ab:b6:88:72:52:44:43:d1:22:13:
                    63:18:31:7d:5f:ee:8a:df:e4:d8:c0:c7:cc:42:7a:
                    db:8a:d1:73:7d:cb:1f:16:ff:c4:15:63:82:c3:a8:
                    05:69:6a:e3:4a:e6:7b:96:d5:94:f4:43:b7:ee:12:
                    ab:72:c0:fd:ce:a6:b7:00:f8:01:96:fb:4d:8e:c3:
                    ae:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:72:BB:B0:E0:08:04:9C:8A:76:B3:6F:AE:6E:B6:0C:A3:DA:4D:97
            X509v3 Authority Key Identifier:
                keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/4XK7sOAIBJyKdrNvrm62DKPaTZc.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213703

    Signature Algorithm: sha256WithRSAEncryption
         20:94:5a:ad:a0:2a:af:15:bc:b7:ef:9c:48:31:8c:1b:a7:b3:
         dc:5a:97:e4:9e:3b:29:f6:3d:91:6f:b1:a6:91:ec:6a:c5:50:
         97:09:54:15:f6:39:2b:02:35:e0:99:e1:73:ac:f1:c5:e3:e4:
         56:78:7c:00:63:dc:53:93:d8:d7:3b:b8:91:b6:29:a4:31:36:
         9e:26:2f:c2:1c:ab:df:dc:2b:a6:e8:f7:f5:4e:ee:ae:5d:9b:
         68:5b:41:6c:64:3a:75:45:26:0a:6a:72:85:ca:19:bd:24:02:
         0f:25:d4:22:4e:0a:9f:f4:ff:5c:00:52:eb:0b:89:b6:e7:57:
         05:6f:23:4a:42:2a:6e:78:4b:d6:6a:15:44:75:cd:cb:85:78:
         a4:d1:f9:36:2c:b9:da:81:2d:8c:7f:93:ad:fe:ce:47:41:df:
         19:5d:57:5b:05:67:d6:be:1b:b5:8f:3a:eb:6e:41:f8:62:d3:
         1b:bd:d7:3c:e9:5f:1b:ad:8c:11:a1:92:c7:30:22:ac:97:0a:
         97:a4:6d:61:2b:67:0b:b7:61:ca:47:d5:eb:7c:59:d4:02:ac:
         e3:83:51:cc:06:d3:eb:06:08:a7:62:d3:d0:fc:52:14:87:ec:
         b3:92:45:97:49:06:cc:f5:a1:06:11:e1:45:f5:cf:91:25:99:
         6c:90:84:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:42:33 2026 by rpki-client