Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/3Ez-EhZpn71NbxDAUA0jy4ec8G8.asa
File:                     3Ez-EhZpn71NbxDAUA0jy4ec8G8.asa (raw, json)
Hash identifier:          caKymZGkDDUuzDgk4rI9CXZLSDx0iBS4U0dsvSmEljQ=
Subject key identifier:   DC:4C:FE:12:16:69:9F:BD:4D:6F:10:C0:50:0D:23:CB:87:9C:F0:6F
Certificate issuer:       /CN=e8bd26dce48161c7fbf9ff67b907f1e605c25a66
Certificate serial:       01A09026FBCD45D95F1DAFF3EE8941A6BD13
Authority key identifier: E8:BD:26:DC:E4:81:61:C7:FB:F9:FF:67:B9:07:F1:E6:05:C2:5A:66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6L0m3OSBYcf7-f9nuQfx5gXCWmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/3Ez-EhZpn71NbxDAUA0jy4ec8G8.asa
Signing time:             Fri 11 Sep 2026 11:07:49 +0000
ASPA not before:          Fri 11 Sep 2026 11:07:49 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            35133
Providers:                AS: 174
                          AS: 1299
                          AS: 3257
                          AS: 3356
                          AS: 5511
                          AS: 6453
                          AS: 6762
                          AS: 6830
                          AS: 6939
                          AS: 44912
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6L0m3OSBYcf7-f9nuQfx5gXCWmY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 01:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:90:26:fb:cd:45:d9:5f:1d:af:f3:ee:89:41:a6:bd:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8bd26dce48161c7fbf9ff67b907f1e605c25a66
        Validity
            Not Before: Sep 11 11:07:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=dc4cfe1216699fbd4d6f10c0500d23cb879cf06f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:55:3d:64:15:63:da:d9:a6:49:4c:7e:b6:94:
                    7a:0c:75:f6:59:20:fd:29:8d:49:43:d2:86:99:fa:
                    d4:9f:a1:e9:e9:91:3c:90:f4:76:c2:58:be:51:40:
                    73:f0:26:f1:6a:5e:88:f5:92:f9:08:cf:b5:31:5c:
                    32:54:3b:3b:0c:92:0e:f6:86:4b:ec:ef:64:85:04:
                    a0:2f:26:3e:8a:59:cb:31:f5:43:bb:c8:cf:3e:c6:
                    9a:74:37:cc:11:b7:79:e3:d7:7a:fb:f3:ab:c4:23:
                    82:00:6b:3b:68:16:7e:48:ed:9c:ad:60:bc:0e:d0:
                    98:ac:28:1e:fb:53:38:89:a0:29:c6:3a:e1:26:c3:
                    fd:f1:bd:48:67:a3:e3:53:c6:f4:d8:9b:8b:f8:c1:
                    7a:ad:78:8a:7c:d3:aa:4a:90:5a:73:c1:3a:83:9f:
                    84:62:49:6b:ec:37:e3:35:dd:7e:18:88:2b:e5:00:
                    88:97:f7:55:c9:20:c4:52:e2:f8:2d:ab:22:52:26:
                    f8:b0:8a:c5:e3:e3:2b:58:c7:3d:41:f1:26:9c:52:
                    12:78:2c:19:71:70:a7:d4:1f:f2:f6:0f:8c:c3:9c:
                    59:3a:d9:62:6f:60:74:ac:94:22:3b:27:9d:0e:76:
                    ba:8a:2f:05:ae:04:0e:c4:9e:49:16:b0:0a:fa:7d:
                    bb:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:4C:FE:12:16:69:9F:BD:4D:6F:10:C0:50:0D:23:CB:87:9C:F0:6F
            X509v3 Authority Key Identifier:
                keyid:E8:BD:26:DC:E4:81:61:C7:FB:F9:FF:67:B9:07:F1:E6:05:C2:5A:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6L0m3OSBYcf7-f9nuQfx5gXCWmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/3Ez-EhZpn71NbxDAUA0jy4ec8G8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  35133

    Signature Algorithm: sha256WithRSAEncryption
         2e:92:e4:db:2e:39:72:95:5f:ed:8c:67:dc:e8:b9:fe:2e:c3:
         23:47:2a:ed:fe:7c:ae:62:a7:90:f5:08:58:7b:1b:67:3b:07:
         87:17:d6:cd:69:73:16:2b:12:b0:c5:02:f8:bb:dd:4c:da:af:
         76:87:e3:dc:3f:96:04:97:63:16:34:51:ab:eb:b2:33:34:75:
         fa:f5:63:bf:d7:77:85:a0:8d:fd:0e:ae:98:2f:8c:cf:bd:ad:
         17:f7:8c:60:48:b1:6a:48:3d:26:de:d1:1d:35:aa:e1:c1:c8:
         65:14:24:87:93:ba:fb:8b:20:d6:d0:32:0c:92:0e:ba:76:ca:
         02:0e:bb:82:c9:72:bb:38:fe:cd:c4:a8:a8:aa:43:0a:29:74:
         0a:53:83:d4:30:f9:7e:67:ce:d1:a3:f2:b4:06:88:f3:1e:57:
         40:5e:f1:a6:c4:eb:c4:34:f0:80:4c:03:4f:48:dd:ba:eb:29:
         13:0f:df:60:6d:8b:b5:ba:4b:2e:b4:66:ef:c7:71:02:89:34:
         92:57:d8:8c:c2:9d:c2:d8:e1:fe:81:a4:2d:5c:24:a0:f5:77:
         ac:06:58:b5:85:bd:54:e6:20:67:68:ea:78:8f:f5:27:6a:3e:
         c2:35:f1:87:07:71:31:41:35:79:de:40:f9:fe:26:98:fb:eb:
         d6:47:4b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 11:48:50 2026 by rpki-client