Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/355kSh3TOXkNVgOhh3ntcuY-KlI.asa
File:                     355kSh3TOXkNVgOhh3ntcuY-KlI.asa (raw, json)
Hash identifier:          bxbpkS4Uyj91l+DerY6zOChST34gfAMes5tJqUvFcjo=
Subject key identifier:   DF:9E:64:4A:1D:D3:39:79:0D:56:03:A1:87:79:ED:72:E6:3E:2A:52
Certificate issuer:       /CN=e7b33e9e3c932f7a542eb021056ce94b1e8b8f0b
Certificate serial:       01A159B236FC294811E8AFA70E95F117E0AA
Authority key identifier: E7:B3:3E:9E:3C:93:2F:7A:54:2E:B0:21:05:6C:E9:4B:1E:8B:8F:0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/57M-njyTL3pULrAhBWzpSx6Ljws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/355kSh3TOXkNVgOhh3ntcuY-KlI.asa
Signing time:             Tue 20 Oct 2026 14:23:34 +0000
ASPA not before:          Tue 20 Oct 2026 14:23:34 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            210246
Providers:                AS: 50606
                          AS: 210104
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/57M-njyTL3pULrAhBWzpSx6Ljws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 17:37:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:59:b2:36:fc:29:48:11:e8:af:a7:0e:95:f1:17:e0:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b33e9e3c932f7a542eb021056ce94b1e8b8f0b
        Validity
            Not Before: Oct 20 14:23:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=df9e644a1dd339790d5603a18779ed72e63e2a52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0f:6c:88:88:49:52:34:01:d9:31:2c:b1:55:
                    34:60:b6:87:59:cb:f6:a9:f6:cb:2c:8c:18:81:e8:
                    a8:83:43:3d:90:a0:48:9f:cc:12:4f:0c:72:60:c6:
                    4f:0c:83:51:15:77:76:8d:a8:1d:73:66:27:97:12:
                    5e:b0:6c:cf:e0:65:17:8d:07:ec:ec:12:3c:65:ad:
                    32:c1:f2:f1:1f:08:14:08:f8:2c:2c:38:bc:37:8e:
                    cf:50:0c:1d:b7:24:9c:13:6a:3f:57:1f:b6:35:88:
                    9c:cf:ed:83:cb:c9:a3:7b:81:89:d4:eb:a1:11:14:
                    81:71:87:42:1d:86:7a:48:1a:47:dc:de:74:ae:62:
                    bf:b1:c5:11:06:52:44:8f:a7:3e:54:07:59:a6:76:
                    c9:02:24:91:f2:d7:50:81:5b:8c:db:5b:35:c7:af:
                    81:74:4b:19:05:87:49:66:6a:0b:75:39:70:e8:4c:
                    21:73:7e:42:c8:bb:50:da:79:ab:53:2a:5e:f7:2c:
                    9b:e1:9f:8e:e6:c4:b1:6d:d5:3d:15:94:68:80:fc:
                    f2:5c:10:bd:48:64:40:3d:21:5a:a0:95:a3:31:ee:
                    16:c3:eb:68:e1:05:6d:0b:75:27:ee:c5:30:ca:dd:
                    b1:8d:df:e4:60:f7:e7:14:ba:cc:d8:ac:78:25:8f:
                    95:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:9E:64:4A:1D:D3:39:79:0D:56:03:A1:87:79:ED:72:E6:3E:2A:52
            X509v3 Authority Key Identifier:
                keyid:E7:B3:3E:9E:3C:93:2F:7A:54:2E:B0:21:05:6C:E9:4B:1E:8B:8F:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/57M-njyTL3pULrAhBWzpSx6Ljws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/355kSh3TOXkNVgOhh3ntcuY-KlI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210246

    Signature Algorithm: sha256WithRSAEncryption
         61:58:31:b3:2b:b7:3a:00:31:17:4b:b2:f6:cc:bd:6c:0f:d0:
         ab:3a:0b:05:25:6d:4e:a2:80:54:59:47:84:2c:4f:f5:ff:36:
         f6:99:32:1b:12:06:a5:9d:e6:5b:85:bb:4f:d5:9b:56:a1:f2:
         4b:67:8a:b5:fc:34:5b:88:08:ec:ca:97:1b:c2:d1:16:ce:e0:
         82:ff:31:1a:0e:c7:70:0f:03:32:f0:0e:55:50:bb:b8:8c:a0:
         c9:a9:aa:77:7d:2c:57:c9:7d:6c:62:93:82:21:b6:e8:72:20:
         1a:37:40:a1:f0:e4:4f:53:36:51:ad:60:77:15:8a:7f:b4:72:
         41:e5:ca:4b:69:39:23:6c:78:11:bd:0c:d7:66:33:d3:fe:c1:
         40:02:72:09:10:07:1d:0b:81:03:24:45:3e:82:3c:a1:cb:57:
         1f:00:ce:82:54:88:c0:fe:5d:d1:81:b8:23:04:a8:bc:54:e8:
         28:87:ca:d1:a5:3f:15:d6:61:6f:45:a7:55:dc:8b:5b:6c:6a:
         c1:51:11:72:b5:b8:1f:72:ac:48:43:ae:0a:34:2f:80:ff:13:
         f3:b4:d9:76:64:94:0c:33:38:6b:d6:95:52:46:b2:1f:60:f6:
         b1:55:3a:f4:b6:86:09:cc:a0:6e:31:49:82:9e:a6:75:66:b8:
         b9:ed:7b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:52:30 2026 by rpki-client