Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/b11164-cff1-4a44-873d-f26359fbaf57/1/mniUMBelUI502FOhQgw_uJWeCEE.asa
File:                     mniUMBelUI502FOhQgw_uJWeCEE.asa (raw, json)
Hash identifier:          Z+q2NqTv1ftmdvHv4xAPOykazoUwWjTO11/p9K5e0lA=
Subject key identifier:   9A:78:94:30:17:A5:50:8E:74:D8:53:A1:42:0C:3F:B8:95:9E:08:41
Certificate issuer:       /CN=a0f3301ee5384e4d3dde9b46ab1c9adfbc323a56
Certificate serial:       01A14FC10E7AB0EBEFD88FC84C9FC3FECD41
Authority key identifier: A0:F3:30:1E:E5:38:4E:4D:3D:DE:9B:46:AB:1C:9A:DF:BC:32:3A:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oPMwHuU4Tk093ptGqxya37wyOlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/b11164-cff1-4a44-873d-f26359fbaf57/1/mniUMBelUI502FOhQgw_uJWeCEE.asa
Signing time:             Sun 18 Oct 2026 16:03:34 +0000
ASPA not before:          Sun 18 Oct 2026 16:03:34 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            197179
Providers:                AS: 212895
                          AS: 216190
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/b11164-cff1-4a44-873d-f26359fbaf57/1/oPMwHuU4Tk093ptGqxya37wyOlY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/b11164-cff1-4a44-873d-f26359fbaf57/1/oPMwHuU4Tk093ptGqxya37wyOlY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oPMwHuU4Tk093ptGqxya37wyOlY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 14:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4f:c1:0e:7a:b0:eb:ef:d8:8f:c8:4c:9f:c3:fe:cd:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0f3301ee5384e4d3dde9b46ab1c9adfbc323a56
        Validity
            Not Before: Oct 18 16:03:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9a78943017a5508e74d853a1420c3fb8959e0841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fc:6d:96:30:cc:4f:96:0e:a9:ed:78:d4:02:
                    e6:d2:31:4b:b7:6a:aa:0b:46:43:22:b3:bb:50:21:
                    5b:76:df:f0:ae:5d:98:13:01:c6:70:01:f4:b2:a9:
                    33:2a:bd:01:3f:da:e2:54:f8:17:5b:9a:7a:13:cd:
                    d2:10:bc:80:6a:83:20:89:17:c1:64:11:37:3b:69:
                    c3:3b:93:cf:1e:ba:c0:bc:b9:05:11:9d:d9:3c:9a:
                    1f:33:ea:b0:71:64:57:9b:7b:e0:ac:fa:b1:2c:9f:
                    55:98:84:73:2b:58:13:ab:4d:41:cf:3a:2f:4e:af:
                    6e:d7:a1:6f:bb:db:07:ef:fa:06:0a:61:c0:54:b1:
                    98:e9:92:68:25:ff:a6:bc:c4:31:f0:0f:d0:bc:4c:
                    aa:e5:7b:1a:d8:3b:ed:00:2a:44:ff:1f:25:07:8b:
                    4e:ef:a4:c0:69:67:44:16:02:20:7f:1f:6d:af:06:
                    bd:71:cc:f2:15:f3:2d:fc:c2:56:59:51:d4:bc:c1:
                    0c:4c:84:ca:fa:c2:15:41:7b:d5:f8:df:76:32:b8:
                    95:ae:62:50:69:86:17:1e:b7:54:39:3f:e0:54:13:
                    52:46:bf:49:15:87:da:6a:39:cf:1a:8c:6f:8d:e3:
                    eb:89:a5:19:c7:31:7e:eb:c1:a2:46:97:f2:10:7c:
                    fd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:78:94:30:17:A5:50:8E:74:D8:53:A1:42:0C:3F:B8:95:9E:08:41
            X509v3 Authority Key Identifier:
                keyid:A0:F3:30:1E:E5:38:4E:4D:3D:DE:9B:46:AB:1C:9A:DF:BC:32:3A:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oPMwHuU4Tk093ptGqxya37wyOlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b11164-cff1-4a44-873d-f26359fbaf57/1/mniUMBelUI502FOhQgw_uJWeCEE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b11164-cff1-4a44-873d-f26359fbaf57/1/oPMwHuU4Tk093ptGqxya37wyOlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197179

    Signature Algorithm: sha256WithRSAEncryption
         a5:66:3b:f4:43:e8:47:71:da:52:c7:bf:fb:72:0f:e4:6c:c3:
         0f:32:1f:c6:b7:60:82:fd:db:7c:69:e8:bf:94:78:a0:e8:57:
         93:a2:b1:ac:a2:f0:d6:84:93:20:37:b3:0a:5f:3a:22:08:a8:
         c3:3c:e2:7f:86:24:53:27:f9:be:17:f4:f9:34:bf:35:e3:22:
         33:13:eb:44:87:87:e9:99:e9:de:c6:e8:13:3f:c2:34:80:90:
         e1:a0:d4:ef:55:61:37:02:7a:cb:18:95:bb:6a:ec:68:56:d0:
         ed:ce:3e:a0:fc:67:c6:f6:7d:83:fc:76:94:de:5c:3e:f3:af:
         88:40:b8:72:81:c5:f0:21:de:5a:6f:13:42:ce:c2:aa:f6:68:
         f9:72:b3:1a:1c:a1:ab:c7:71:11:59:6d:60:86:32:aa:33:a5:
         33:b5:af:9e:0b:31:75:d7:40:10:1c:50:f4:21:bf:10:9e:c6:
         f6:d6:3e:2b:e1:9d:50:b6:81:80:c7:9c:43:c7:bd:ce:00:04:
         f7:85:0e:4a:ae:c5:39:aa:43:4a:80:a9:fc:06:26:18:aa:2d:
         35:07:4e:2f:d8:9d:96:84:e7:f0:f6:18:a9:d8:a3:94:5e:e4:
         e0:7e:7a:3d:64:31:76:3c:35:8e:82:38:ad:1e:63:75:f7:af:
         41:57:5d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 21:01:16 2026 by rpki-client