Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/fmAI-ELfR8es8rqjY_C_NRVbf38.asa
File:                     fmAI-ELfR8es8rqjY_C_NRVbf38.asa (raw, json)
Hash identifier:          hf1HYNu1FITfWnRrkmBLRmIEQwPhNWwa07xK+1K/E/4=
Subject key identifier:   7E:60:08:F8:42:DF:47:C7:AC:F2:BA:A3:63:F0:BF:35:15:5B:7F:7F
Certificate issuer:       /CN=2c2d883449f67ad4709d5cabb406ea8bc3873421
Certificate serial:       01A1B602561708440857838392EF14C7CBB3
Authority key identifier: 2C:2D:88:34:49:F6:7A:D4:70:9D:5C:AB:B4:06:EA:8B:C3:87:34:21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LC2INEn2etRwnVyrtAbqi8OHNCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/fmAI-ELfR8es8rqjY_C_NRVbf38.asa
Signing time:             Sat 07 Nov 2026 12:36:08 +0000
ASPA not before:          Sat 07 Nov 2026 12:36:08 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            198834
Providers:                AS: 6939
                          AS: 8283
                          AS: 197754
                          AS: 200132
                          AS: 212635
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LC2INEn2etRwnVyrtAbqi8OHNCE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:b6:02:56:17:08:44:08:57:83:83:92:ef:14:c7:cb:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c2d883449f67ad4709d5cabb406ea8bc3873421
        Validity
            Not Before: Nov  7 12:36:08 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7e6008f842df47c7acf2baa363f0bf35155b7f7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fe:30:f6:96:18:48:87:75:d6:f0:f2:42:ff:
                    2c:60:4c:8f:ee:dd:d6:35:a7:a0:62:32:6f:18:34:
                    3a:f0:f4:e4:72:41:29:af:48:70:25:bf:d5:4f:89:
                    f4:c2:85:ec:c4:b4:71:0b:ab:f0:ee:78:ed:8f:eb:
                    40:fc:95:7b:f7:47:71:fe:1c:3c:90:9f:78:d0:83:
                    71:4f:72:1a:3d:62:17:7b:a3:a6:3e:ab:84:9d:08:
                    9a:03:13:2b:1b:4c:89:ef:9e:48:f8:c8:13:1e:06:
                    3e:e8:d0:f0:90:de:d3:9e:1f:e1:c7:d2:66:3b:2b:
                    05:6f:9f:23:ac:fc:72:a8:81:99:b7:ae:f0:3e:0c:
                    4f:43:92:c7:b0:4d:ac:cf:a4:33:4d:15:be:67:34:
                    79:7d:73:65:4f:4f:2c:d1:ec:a4:3b:a5:14:4c:11:
                    27:ec:37:61:0f:fc:b3:92:29:a5:35:ee:99:aa:a9:
                    95:b7:07:9c:e4:24:6c:21:35:5b:c2:ab:c4:bf:d8:
                    cb:3d:6a:cb:68:0d:90:44:58:b1:25:b9:d6:2e:58:
                    0c:d7:6c:c7:29:e4:72:26:93:28:e9:7f:4b:78:05:
                    11:50:4c:ac:27:17:7f:87:a8:e9:9f:89:c6:07:e0:
                    86:6e:30:83:a5:4b:e3:cb:0a:fe:6d:38:a6:01:db:
                    77:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:60:08:F8:42:DF:47:C7:AC:F2:BA:A3:63:F0:BF:35:15:5B:7F:7F
            X509v3 Authority Key Identifier:
                keyid:2C:2D:88:34:49:F6:7A:D4:70:9D:5C:AB:B4:06:EA:8B:C3:87:34:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LC2INEn2etRwnVyrtAbqi8OHNCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/fmAI-ELfR8es8rqjY_C_NRVbf38.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198834

    Signature Algorithm: sha256WithRSAEncryption
         0b:a6:0f:4d:47:96:b4:9e:aa:5d:2d:14:07:b2:26:4d:54:07:
         42:9f:37:cd:c2:3a:cb:45:0f:48:d9:3c:b6:78:58:06:0c:66:
         96:82:5c:32:aa:74:7b:bd:5f:fc:7f:ca:04:3e:8d:35:49:b3:
         09:c7:9e:07:39:4b:db:5e:79:71:a0:9a:4c:9c:b8:4a:15:84:
         8c:10:d0:38:b1:d5:cd:58:3e:de:af:44:e7:66:70:ed:0d:2c:
         87:5d:c6:50:af:54:3d:33:56:44:a1:68:42:27:81:86:bf:40:
         6e:52:8d:ca:ce:6c:3f:f9:bf:bc:a3:c4:92:60:43:3d:91:bb:
         5e:60:6b:7b:b2:8c:80:e8:70:28:b4:30:25:c7:d6:aa:ca:fe:
         7e:51:b4:72:1a:56:b4:0e:a0:23:a8:11:8f:ad:4d:ec:e9:3d:
         fb:fb:1d:19:1d:37:37:f4:9d:0c:20:5d:a9:ae:d7:46:e0:9e:
         59:5a:dd:b1:55:27:53:d6:58:d7:28:df:a4:91:1e:2d:a1:2c:
         20:bf:77:e2:fc:2c:aa:97:d8:d1:7e:67:5a:c2:2f:a8:45:d4:
         39:81:7f:55:5c:11:0f:3e:92:0e:6a:5e:79:58:7d:ac:26:4c:
         d6:4c:2d:49:63:03:fa:3c:70:51:77:4b:f6:b5:27:d8:97:d4:
         3f:b3:1e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:27:02 2026 by rpki-client