Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/Y_--MQK54naD7fpUVFPfwfY6o28.asa
File:                     Y_--MQK54naD7fpUVFPfwfY6o28.asa (raw, json)
Hash identifier:          kg46g53Aa38snduq2UGa72Yp4mJfDgCyso9Db03AZTs=
Subject key identifier:   63:FF:BE:31:02:B9:E2:76:83:ED:FA:54:54:53:DF:C1:F6:3A:A3:6F
Certificate issuer:       /CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
Certificate serial:       01A08A8D74119C115F690BDE9B7A54272242
Authority key identifier: 7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/Y_--MQK54naD7fpUVFPfwfY6o28.asa
Signing time:             Thu 10 Sep 2026 09:02:01 +0000
ASPA not before:          Thu 10 Sep 2026 09:02:01 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            13069
Providers:                AS: 2116
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:8d:74:11:9c:11:5f:69:0b:de:9b:7a:54:27:22:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
        Validity
            Not Before: Sep 10 09:02:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=63ffbe3102b9e27683edfa545453dfc1f63aa36f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6c:4a:97:5e:a3:aa:8a:af:32:28:dd:e3:0b:
                    96:01:3a:24:56:1f:b3:9b:bf:df:c7:d0:8d:bb:7a:
                    38:5f:0d:d3:f3:9b:0d:e4:42:9a:83:d3:15:22:89:
                    56:9c:b6:29:85:6c:4c:93:ee:ba:0c:14:98:a3:f9:
                    f8:b9:b0:05:01:5f:d7:f3:fa:cc:b7:cd:bf:44:07:
                    8a:46:db:1e:e0:1c:d2:cc:ef:b5:72:e0:27:7b:7f:
                    0d:84:fd:03:0f:a3:51:a5:b5:19:c2:13:79:55:69:
                    30:04:17:5e:0d:38:18:42:74:8c:31:eb:1c:c9:c4:
                    60:67:b6:88:5b:d7:15:2e:d6:82:1e:b6:24:c0:59:
                    44:5f:e8:9e:93:f0:3d:a6:33:05:a6:bb:aa:31:4a:
                    3f:a4:f7:a3:bf:d8:ff:b7:7b:de:f4:25:82:a0:91:
                    49:f7:fc:64:92:9a:5c:4f:5e:89:21:e7:90:55:9b:
                    aa:bd:0a:75:f7:0c:be:44:ed:fb:56:74:13:9b:55:
                    d8:01:73:ea:b1:46:ec:29:83:95:a5:0e:5c:28:3c:
                    1d:cc:ab:36:9d:45:68:5a:b1:8d:44:a3:b8:49:a0:
                    6a:3f:07:21:db:80:e8:f7:5e:84:a4:9d:e9:3c:a4:
                    31:96:85:c0:87:45:c8:0b:a1:42:34:f8:38:cd:bf:
                    f3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:FF:BE:31:02:B9:E2:76:83:ED:FA:54:54:53:DF:C1:F6:3A:A3:6F
            X509v3 Authority Key Identifier:
                keyid:7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/Y_--MQK54naD7fpUVFPfwfY6o28.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13069

    Signature Algorithm: sha256WithRSAEncryption
         75:c7:eb:52:00:1f:0a:04:eb:ba:08:fa:26:07:43:46:c9:88:
         ea:73:b2:f9:cd:3b:b4:a0:6f:2b:22:52:32:b8:c6:33:55:c1:
         c1:dc:4e:f9:61:51:8f:51:d1:02:78:16:24:3b:b5:35:15:4f:
         45:76:99:aa:dd:31:53:fc:ac:8d:a7:bd:3d:03:76:6c:11:64:
         72:1d:e8:22:e7:1a:0c:48:bf:cd:73:2d:73:e2:8a:a7:91:ec:
         31:68:74:b5:07:3d:1f:22:c8:a6:61:cb:c5:a3:6e:67:40:09:
         b1:88:06:10:2e:ce:c6:1f:60:b8:cb:fe:e9:a1:e7:85:92:f3:
         42:f1:83:b0:1b:09:25:ed:54:a3:d1:cc:f4:57:b9:69:44:67:
         93:90:35:9c:e9:98:ad:dd:a0:5f:12:f5:4f:85:43:dc:ba:1b:
         7a:55:86:7a:f0:20:b1:d9:44:64:6a:ec:8c:12:bb:9f:a8:c8:
         e6:18:80:5e:aa:67:89:d3:c7:f1:c0:cb:51:8f:bf:3a:02:f6:
         13:4d:70:9b:e2:4d:c3:d8:15:df:02:51:ba:a3:1a:86:15:9c:
         cb:ed:e0:6c:5e:e0:80:96:8d:b2:d8:a7:d6:2b:cf:2b:14:fa:
         a8:4a:f0:04:d3:8a:f4:4e:10:6d:b1:0c:66:d5:2a:b3:c9:fe:
         29:94:ce:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:45:33 2026 by rpki-client