Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/4zlhd3T7GFdkIKEF6KZHQyfPTnk.asa
File:                     4zlhd3T7GFdkIKEF6KZHQyfPTnk.asa (raw, json)
Hash identifier:          YzX6YX7nktOuQpPhMEkzBKdyHrmMq1DNMWV2vCKOOkw=
Subject key identifier:   E3:39:61:77:74:FB:18:57:64:20:A1:05:E8:A6:47:43:27:CF:4E:79
Certificate issuer:       /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial:       01A14009B08F23AA6921611DC4144475E2F4
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/4zlhd3T7GFdkIKEF6KZHQyfPTnk.asa
Signing time:             Thu 15 Oct 2026 14:48:59 +0000
ASPA not before:          Thu 15 Oct 2026 14:48:59 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            56582
Providers:                AS: 9121
                          AS: 59796
                          AS: 208972
                          AS: 218423
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:40:09:b0:8f:23:aa:69:21:61:1d:c4:14:44:75:e2:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
        Validity
            Not Before: Oct 15 14:48:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e339617774fb18576420a105e8a6474327cf4e79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:84:13:95:ff:21:9d:e3:85:32:bd:2f:52:c4:
                    1c:b7:a6:5d:61:77:7e:88:c2:ca:4e:ca:3d:fb:4d:
                    b3:94:a4:67:df:df:f4:24:79:f3:dd:ec:72:55:c3:
                    7e:b9:66:27:fc:dc:86:36:58:51:41:58:b1:b1:af:
                    77:7c:cc:85:76:45:0c:57:21:83:53:dc:94:7e:b1:
                    fd:be:75:a7:1a:b9:53:a8:24:11:96:e8:b5:eb:b8:
                    ae:28:3f:0b:df:66:73:cd:c0:09:fe:04:d7:dd:95:
                    e1:82:e3:68:ed:4c:a5:47:63:37:bd:39:9a:cf:85:
                    8c:01:65:ad:19:0f:52:23:84:2a:91:40:c2:b0:8b:
                    c7:39:e3:a5:66:e0:20:39:9a:f4:2e:c9:c3:dc:d6:
                    89:94:73:37:83:b5:b9:af:40:32:49:e3:db:01:e2:
                    15:79:47:03:1b:8c:a9:ef:1c:20:43:59:87:0e:3b:
                    77:6c:92:da:17:83:41:22:4b:d1:2a:f1:1e:e7:7c:
                    f6:3a:21:b0:e7:68:7d:5d:32:06:d5:1c:47:d6:c0:
                    d7:fa:2b:74:93:f4:85:6d:70:d8:d7:5f:08:f3:63:
                    3c:aa:26:25:87:05:bf:95:8c:1a:2c:1e:6b:66:f5:
                    57:c9:e5:3f:4a:e6:a8:81:ce:b8:a7:88:06:19:c8:
                    9c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:39:61:77:74:FB:18:57:64:20:A1:05:E8:A6:47:43:27:CF:4E:79
            X509v3 Authority Key Identifier:
                keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/4zlhd3T7GFdkIKEF6KZHQyfPTnk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  56582

    Signature Algorithm: sha256WithRSAEncryption
         6b:53:23:90:6d:d2:7b:1c:7d:79:80:f0:8d:d5:71:a0:5b:30:
         03:c0:b7:30:5f:d5:f3:ba:cb:65:58:46:1c:86:6b:b8:f1:73:
         cb:cc:7f:a5:a9:32:bb:1a:93:a8:f4:2f:a2:53:d6:80:a0:66:
         4e:ca:ac:3d:39:64:08:80:f4:18:bc:17:ec:52:25:05:1f:30:
         63:c3:61:fc:a7:f3:44:98:b2:c1:f3:3c:f2:68:99:f1:e3:73:
         db:bd:ef:74:a7:79:e4:5e:00:4a:60:e6:26:c6:ae:d4:52:09:
         99:78:29:a2:00:16:85:7d:8b:ea:78:f8:bc:01:4a:c6:24:64:
         95:b2:af:da:18:30:b2:79:62:87:19:c8:7c:c6:76:f8:1c:11:
         3d:b8:a1:67:0c:64:f2:3e:c2:1a:d9:46:1c:36:0b:21:11:61:
         15:4c:55:df:98:ca:e2:49:f1:58:2a:7f:18:94:75:bd:36:da:
         58:74:75:6b:44:e0:e0:af:a2:23:1d:1b:9d:08:2a:d8:5d:68:
         64:6f:7c:a2:cc:60:6e:c4:d5:00:21:93:3d:fc:ed:f6:fc:41:
         b4:25:cb:99:12:da:b6:f9:a3:a9:e3:20:b3:df:bc:58:93:af:
         b3:64:14:ce:74:21:ed:a5:1d:8c:56:a1:00:10:e7:04:86:b6:
         96:bb:90:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:46:23 2026 by rpki-client