Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/69bbef-449c-4fa9-9959-e56cbf974433/1/4d9FTIpnmUa9rj0vXG74bCMEmis.asa
File:                     4d9FTIpnmUa9rj0vXG74bCMEmis.asa (raw, json)
Hash identifier:          US44YrW1kCbCR+2rLO2pOPsFRZJ8veDSU0rTyhZEXf4=
Subject key identifier:   E1:DF:45:4C:8A:67:99:46:BD:AE:3D:2F:5C:6E:F8:6C:23:04:9A:2B
Certificate issuer:       /CN=b49eb600ef650b88479fa5c1bb8dda672539ff47
Certificate serial:       01A15067AE2526DE6ABC3056567EA68BF7BF
Authority key identifier: B4:9E:B6:00:EF:65:0B:88:47:9F:A5:C1:BB:8D:DA:67:25:39:FF:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tJ62AO9lC4hHn6XBu43aZyU5_0c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/69bbef-449c-4fa9-9959-e56cbf974433/1/4d9FTIpnmUa9rj0vXG74bCMEmis.asa
Signing time:             Sun 18 Oct 2026 19:05:34 +0000
ASPA not before:          Sun 18 Oct 2026 19:05:34 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            210578
Providers:                AS: 835
                          AS: 6777
                          AS: 6939
                          AS: 31561
                          AS: 34927
                          AS: 202580
                          AS: 212895
                          AS: 214757
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/69bbef-449c-4fa9-9959-e56cbf974433/1/tJ62AO9lC4hHn6XBu43aZyU5_0c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/69bbef-449c-4fa9-9959-e56cbf974433/1/tJ62AO9lC4hHn6XBu43aZyU5_0c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tJ62AO9lC4hHn6XBu43aZyU5_0c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 23 Oct 2026 04:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:50:67:ae:25:26:de:6a:bc:30:56:56:7e:a6:8b:f7:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b49eb600ef650b88479fa5c1bb8dda672539ff47
        Validity
            Not Before: Oct 18 19:05:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e1df454c8a679946bdae3d2f5c6ef86c23049a2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6a:58:a7:23:6d:21:e6:d8:a0:cc:fc:db:cc:
                    84:b6:88:eb:28:19:5a:4d:1c:6a:80:36:f2:58:af:
                    3f:56:6a:f2:47:82:69:e4:f8:f2:60:fb:1f:e0:a9:
                    8b:62:69:12:44:56:06:6c:84:8a:47:90:d0:07:c2:
                    1f:b2:3f:9a:31:54:77:77:74:e8:79:5a:f3:de:6b:
                    e2:bb:15:0d:d2:d4:cc:d0:48:fb:05:05:c4:48:da:
                    fa:98:4d:63:fd:a8:13:29:45:f1:92:c0:7e:83:9c:
                    eb:17:21:6e:98:d0:be:bb:8e:7e:43:f1:8a:dc:a1:
                    2b:c4:91:f5:32:cb:b3:a1:f9:ce:07:ed:3a:cd:39:
                    fa:76:ed:96:b1:52:54:62:ca:be:61:df:54:30:09:
                    59:fc:ac:5a:86:5b:bc:63:63:09:9d:76:68:62:81:
                    6b:c0:15:5c:e4:bb:2b:2d:45:53:46:3d:86:63:f2:
                    1b:0a:97:6d:f2:40:0c:fa:49:3d:c7:82:19:37:b0:
                    e7:a4:de:8e:55:62:4c:64:78:df:6d:f5:31:c1:86:
                    d9:e0:dc:c5:bd:4c:d6:10:34:6d:44:81:89:85:df:
                    a9:f2:51:17:c6:12:06:82:25:66:41:db:a1:82:b1:
                    ad:f0:b5:6b:c2:91:ae:06:e1:f0:57:70:ec:f9:e6:
                    4c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:DF:45:4C:8A:67:99:46:BD:AE:3D:2F:5C:6E:F8:6C:23:04:9A:2B
            X509v3 Authority Key Identifier:
                keyid:B4:9E:B6:00:EF:65:0B:88:47:9F:A5:C1:BB:8D:DA:67:25:39:FF:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJ62AO9lC4hHn6XBu43aZyU5_0c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/69bbef-449c-4fa9-9959-e56cbf974433/1/4d9FTIpnmUa9rj0vXG74bCMEmis.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/69bbef-449c-4fa9-9959-e56cbf974433/1/tJ62AO9lC4hHn6XBu43aZyU5_0c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210578

    Signature Algorithm: sha256WithRSAEncryption
         6d:d7:92:63:9d:86:b1:da:68:5d:8b:df:1a:ef:c3:48:7f:00:
         0d:4a:92:6f:81:94:14:51:1d:3e:98:00:a9:68:fc:d6:f2:6a:
         45:36:d7:7f:8f:6e:95:0a:42:81:46:48:29:9d:22:90:38:83:
         91:62:fd:c5:33:bd:3e:ec:9e:35:5c:46:bc:18:e1:be:9b:9f:
         e2:fe:be:c8:4d:fd:4f:4e:19:4d:ec:8a:e0:41:dc:be:f2:2d:
         0f:34:ca:de:f0:56:d0:83:10:7e:db:15:24:ee:be:9e:67:98:
         8e:d5:a7:64:28:fc:38:71:ae:5b:fc:a0:b0:d1:6d:32:fd:c9:
         5b:8e:db:75:eb:f2:3b:17:bd:e4:e5:e3:c1:0a:bd:63:42:f5:
         63:08:59:2a:8d:47:a2:a7:63:cd:e6:f1:35:17:ef:d0:c8:60:
         02:05:fa:0d:51:26:d3:8d:6d:5d:6d:21:ee:23:cf:d4:de:5a:
         83:90:ca:1a:95:9e:60:e7:4d:44:c0:89:0f:3e:cb:be:8b:f3:
         dc:ad:70:0f:b2:f6:83:c8:4c:89:d9:5a:74:47:b6:dd:eb:97:
         29:7f:9c:b6:f3:d4:00:12:b6:af:8b:40:ad:7a:30:ef:c4:7a:
         35:a6:79:81:e1:fc:46:a1:a4:c2:b3:cd:64:f2:16:c9:93:f9:
         dd:d7:86:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:43:19 2026 by rpki-client