Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/U_Wx_VLTmQnNrPIvYuTTTSM-csE.asa
File:                     U_Wx_VLTmQnNrPIvYuTTTSM-csE.asa (raw, json)
Hash identifier:          I4CjIkcycH3lVGB02lm5TtvHjphE6QjWpSGKbYEOAgk=
Subject key identifier:   53:F5:B1:FD:52:D3:99:09:CD:AC:F2:2F:62:E4:D3:4D:23:3E:72:C1
Certificate issuer:       /CN=d5354321c1254360145eaf25f69938b8df347b31
Certificate serial:       01A17CD57314BC27DD3A097014BA18BBC49A
Authority key identifier: D5:35:43:21:C1:25:43:60:14:5E:AF:25:F6:99:38:B8:DF:34:7B:31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1TVDIcElQ2AUXq8l9pk4uN80ezE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/U_Wx_VLTmQnNrPIvYuTTTSM-csE.asa
Signing time:             Tue 27 Oct 2026 10:08:45 +0000
ASPA not before:          Tue 27 Oct 2026 10:08:45 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            48732
Providers:                AS: 174
                          AS: 6939
                          AS: 39801
                          AS: 206120
                          AS: 212815
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1TVDIcElQ2AUXq8l9pk4uN80ezE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 04:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7c:d5:73:14:bc:27:dd:3a:09:70:14:ba:18:bb:c4:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5354321c1254360145eaf25f69938b8df347b31
        Validity
            Not Before: Oct 27 10:08:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=53f5b1fd52d39909cdacf22f62e4d34d233e72c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:7a:dd:71:fa:08:8b:2a:fa:5d:a7:e0:cd:92:
                    f9:2c:03:97:a2:db:7a:4c:d4:6c:48:dd:03:67:65:
                    9c:0f:c1:8d:4b:6a:6c:f3:63:31:e1:35:ab:23:d5:
                    7c:b6:b4:ae:5f:f5:3c:77:68:16:8d:f9:6d:36:03:
                    7b:1b:54:33:f8:a4:e1:54:68:94:70:36:3c:d1:53:
                    3e:62:24:6c:98:28:4f:fd:5a:cd:38:e1:11:12:39:
                    2f:c4:15:0e:14:4e:16:67:e6:d8:07:ed:11:34:dd:
                    ef:8f:2d:f2:c1:c5:44:4c:fb:8d:08:70:2c:8e:3f:
                    a8:3c:d1:00:c0:c8:d1:02:c1:22:3f:8b:c3:37:62:
                    0f:ca:90:59:d3:66:0c:8d:f6:76:79:97:3e:f8:33:
                    da:17:4f:4f:a1:00:5f:e4:f0:85:08:57:ec:bb:ba:
                    46:d6:29:56:33:89:56:35:c5:b9:49:30:af:94:4e:
                    1b:d6:11:00:8b:a3:85:fb:dd:72:d9:bc:cd:46:2f:
                    c9:82:8e:c3:45:ff:22:13:d1:d3:7d:b9:38:5a:a0:
                    03:33:ae:c7:55:63:a8:97:55:88:43:bf:45:b3:31:
                    83:3b:e5:b3:5b:db:3a:59:d3:cc:ef:97:d5:8f:06:
                    da:02:8c:c9:22:d5:8c:89:bb:ff:d6:6a:e5:f7:f1:
                    d2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F5:B1:FD:52:D3:99:09:CD:AC:F2:2F:62:E4:D3:4D:23:3E:72:C1
            X509v3 Authority Key Identifier:
                keyid:D5:35:43:21:C1:25:43:60:14:5E:AF:25:F6:99:38:B8:DF:34:7B:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TVDIcElQ2AUXq8l9pk4uN80ezE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/U_Wx_VLTmQnNrPIvYuTTTSM-csE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48732

    Signature Algorithm: sha256WithRSAEncryption
         7b:74:4a:a4:a7:0b:a5:3e:75:b7:87:94:dd:e5:1d:9a:58:7a:
         30:60:f7:1c:ae:29:4c:f8:f4:e7:81:40:d9:7e:c4:95:cc:e4:
         c0:99:09:bf:f3:c1:45:b5:4c:00:ce:d6:58:85:f3:f5:d4:23:
         24:ed:04:13:a9:12:29:b3:d2:30:ae:86:bf:1a:d5:8d:07:3c:
         25:0a:1d:cd:75:d3:6e:5b:8b:90:5a:f9:24:b1:03:07:96:7a:
         df:7e:77:5a:96:2d:fa:e5:5f:4d:6b:99:2a:0b:91:7a:d9:16:
         5a:ad:95:07:60:ca:ae:b6:8c:21:ee:ab:1b:1d:ff:bf:68:24:
         6c:ae:33:80:07:1b:12:c5:b9:67:e6:8c:a5:ed:ef:4f:cf:df:
         39:4c:3b:f3:d6:51:79:90:f6:34:51:97:d7:4d:b7:5b:13:17:
         3a:e4:41:f4:b4:84:e5:e1:e8:e4:eb:1d:40:ed:11:e1:2a:70:
         52:82:c7:e0:bb:35:a3:18:95:20:b2:45:e7:0d:5e:7b:38:5b:
         03:be:60:e5:db:15:f8:86:70:3f:98:ab:33:96:4a:d8:1c:8c:
         f5:dc:16:3a:0c:62:c6:fd:b0:88:73:33:cd:3b:c0:fd:17:27:
         af:34:aa:be:57:55:14:23:dd:ed:e8:30:da:6e:a4:b3:fe:1a:
         e3:fb:e7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 13:02:53 2026 by rpki-client