Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/Vka3aB9XlaAZaXatPcABq9MMMZ8.asa
File:                     Vka3aB9XlaAZaXatPcABq9MMMZ8.asa (raw, json)
Hash identifier:          2gWes96a72UxE1XgEF2/Y4kVdM/LCqKAtV5HrBf3vqA=
Subject key identifier:   56:46:B7:68:1F:57:95:A0:19:69:76:AD:3D:C0:01:AB:D3:0C:31:9F
Certificate issuer:       /CN=4c4be43394a7c2bf1e8fdfbb1d506fa37ac73231
Certificate serial:       01A0821C7D6D3D840317BAA5D7D0123ABC25
Authority key identifier: 4C:4B:E4:33:94:A7:C2:BF:1E:8F:DF:BB:1D:50:6F:A3:7A:C7:32:31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/Vka3aB9XlaAZaXatPcABq9MMMZ8.asa
Signing time:             Tue 08 Sep 2026 17:41:40 +0000
ASPA not before:          Tue 08 Sep 2026 17:41:40 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            219089
Providers:                AS: 13302
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Sep 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:82:1c:7d:6d:3d:84:03:17:ba:a5:d7:d0:12:3a:bc:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c4be43394a7c2bf1e8fdfbb1d506fa37ac73231
        Validity
            Not Before: Sep  8 17:41:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5646b7681f5795a0196976ad3dc001abd30c319f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3f:0f:b3:e8:6d:a6:ba:50:fa:01:24:71:07:
                    83:f1:86:32:ff:20:ce:16:bf:f9:11:e8:53:a4:65:
                    26:86:3f:a2:00:f9:28:9d:22:d8:e6:39:53:20:70:
                    b5:5c:8b:4b:53:f6:fc:e6:29:ce:5a:c4:5c:5a:75:
                    76:ff:6a:f0:e6:3f:39:47:da:a0:ca:73:8a:bc:de:
                    dd:9b:b7:90:2a:b0:a9:1f:2e:5a:8c:c4:f1:18:bd:
                    a6:43:b6:92:9e:a4:c8:86:b3:7c:5c:ef:70:1e:fe:
                    45:59:71:75:2d:64:9d:5f:df:a7:91:d8:0e:c0:f7:
                    06:29:15:d9:5f:57:73:07:db:38:6c:15:fb:81:f8:
                    61:4b:3e:53:c8:26:d0:4a:7c:f6:39:6c:53:c2:67:
                    4b:81:bc:85:d3:b1:24:51:36:9a:ee:e8:5a:d6:48:
                    5e:df:f5:79:b7:5c:35:6f:ed:b2:bb:4e:f2:81:a6:
                    71:14:ee:ca:17:62:2f:a7:30:b4:f0:61:31:d9:ef:
                    d8:d3:2a:f8:46:09:d8:f0:93:5a:67:bb:ed:59:3b:
                    9b:d4:62:f9:77:fb:08:63:28:ca:5a:a3:97:d4:81:
                    7c:63:d0:b3:7d:e8:e1:ea:93:ba:e8:3a:b0:95:a1:
                    1b:8e:4b:ab:c6:e1:07:62:d1:ef:78:c1:76:18:73:
                    6e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:46:B7:68:1F:57:95:A0:19:69:76:AD:3D:C0:01:AB:D3:0C:31:9F
            X509v3 Authority Key Identifier:
                keyid:4C:4B:E4:33:94:A7:C2:BF:1E:8F:DF:BB:1D:50:6F:A3:7A:C7:32:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/Vka3aB9XlaAZaXatPcABq9MMMZ8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  219089

    Signature Algorithm: sha256WithRSAEncryption
         9d:d8:9a:ae:dc:8a:92:b8:78:8b:f3:04:26:f0:f7:f7:c2:41:
         3f:70:59:01:c0:00:c8:ce:54:1f:2a:b3:3e:53:a8:a5:3e:75:
         b7:cb:7c:7e:b6:1b:24:bf:fc:85:22:02:5c:f0:2d:d8:c3:4a:
         54:c7:64:ed:5b:2c:c6:9f:f2:33:37:8b:5f:bc:d4:be:af:98:
         c5:b5:1a:2d:0d:33:a0:ac:87:14:c0:92:8b:0f:f2:a2:4f:09:
         ce:9d:a7:ba:4a:bc:1c:a3:f2:e9:0a:4d:b4:ce:cc:8b:a8:20:
         4b:53:63:66:5d:a6:c8:28:63:17:8a:df:2a:bf:e6:c0:88:98:
         64:44:63:16:52:61:35:47:79:1d:32:f0:31:f0:e0:b9:1d:e1:
         e5:53:8a:d3:e4:ff:9c:90:df:e1:6b:5e:bb:5a:87:b4:79:76:
         e2:2c:b7:86:f6:01:62:39:49:62:10:2f:7d:d1:41:84:c7:c7:
         0b:9d:53:87:64:c8:e8:e7:8e:b9:ce:8a:87:db:c6:87:d8:8d:
         e6:9e:bd:e6:f2:4a:8d:29:5c:16:15:e6:3d:28:21:86:1c:fb:
         60:53:63:70:77:a2:0e:ec:ff:12:20:08:0a:d0:14:7f:90:5d:
         cc:97:2d:2d:07:03:22:8a:90:02:d4:fc:b6:3e:42:93:7b:3c:
         f3:36:80:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 09:21:50 2026 by rpki-client