Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/BZ756Uj63iEuGpwzpkmdJpyNFFU.asa
File:                     BZ756Uj63iEuGpwzpkmdJpyNFFU.asa (raw, json)
Hash identifier:          g6TjnWDVTvY9Yi5LRNS5hlp+M2VYol8TpST6AfkQOpg=
Subject key identifier:   05:9E:F9:E9:48:FA:DE:21:2E:1A:9C:33:A6:49:9D:26:9C:8D:14:55
Certificate issuer:       /CN=51306f5f46dbdb4136042a2be38d05d222a7c761
Certificate serial:       01A1A712EE13463138FC9C65FC8F9B0BE117
Authority key identifier: 51:30:6F:5F:46:DB:DB:41:36:04:2A:2B:E3:8D:05:D2:22:A7:C7:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UTBvX0bb20E2BCor440F0iKnx2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/BZ756Uj63iEuGpwzpkmdJpyNFFU.asa
Signing time:             Wed 04 Nov 2026 14:59:58 +0000
ASPA not before:          Wed 04 Nov 2026 14:59:58 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            211585
Providers:                AS: 7377
                          AS: 31898
                          AS: 44324
                          AS: 209533
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UTBvX0bb20E2BCor440F0iKnx2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 17:37:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:a7:12:ee:13:46:31:38:fc:9c:65:fc:8f:9b:0b:e1:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51306f5f46dbdb4136042a2be38d05d222a7c761
        Validity
            Not Before: Nov  4 14:59:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=059ef9e948fade212e1a9c33a6499d269c8d1455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c6:d4:08:c5:25:f2:5d:d0:10:19:c4:4e:83:
                    69:60:e9:dc:f9:f4:cf:55:a7:76:7e:0d:5e:dc:82:
                    e4:4d:40:77:e7:cf:bd:2f:8b:7f:00:b1:dd:e3:77:
                    06:f7:99:52:e4:fa:a4:6a:ba:5f:d2:f9:ae:f2:1d:
                    46:05:ac:c3:6b:73:e7:8e:c6:a6:55:16:8a:72:1e:
                    64:06:df:5a:de:4d:30:36:24:46:91:65:c9:85:7f:
                    fc:95:f7:43:77:9f:29:0e:f2:3a:6c:74:42:b4:b6:
                    7f:f8:dc:a6:4f:57:c2:b8:42:d2:2c:74:81:7a:b6:
                    5b:c7:a6:c1:ba:f8:f7:d9:b9:5c:19:75:2d:07:42:
                    a3:04:df:93:b1:d8:63:10:0e:d3:6d:a2:19:b1:fd:
                    fb:8f:8b:ee:32:09:07:01:0d:9c:14:e6:14:09:db:
                    97:c4:20:06:48:55:16:1a:6d:a9:4f:d3:56:db:30:
                    94:06:d0:f2:cc:2f:41:21:f9:c6:06:9e:f5:41:b0:
                    c1:69:da:e9:8d:5a:cc:9a:85:cd:fe:40:07:c7:8d:
                    29:ac:09:54:1f:ac:cd:a6:74:82:7d:60:5d:37:8f:
                    4c:d5:b7:e6:61:d8:4e:64:7a:a4:c8:6b:e9:d8:ea:
                    65:1c:89:f2:2c:f6:6d:31:e4:3c:6d:d1:07:e2:e8:
                    dc:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:9E:F9:E9:48:FA:DE:21:2E:1A:9C:33:A6:49:9D:26:9C:8D:14:55
            X509v3 Authority Key Identifier:
                keyid:51:30:6F:5F:46:DB:DB:41:36:04:2A:2B:E3:8D:05:D2:22:A7:C7:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTBvX0bb20E2BCor440F0iKnx2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/BZ756Uj63iEuGpwzpkmdJpyNFFU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211585

    Signature Algorithm: sha256WithRSAEncryption
         3a:a9:8c:ae:3d:8a:fe:fd:4c:8d:e9:f1:43:b4:b1:9a:f6:f2:
         66:2a:5b:d3:5a:6e:19:37:62:d6:fc:69:c6:f3:eb:84:6b:f6:
         61:0f:4e:61:77:01:aa:5c:d0:39:0f:33:fd:1d:49:e7:ed:02:
         ad:ea:dd:21:4e:df:91:3f:7e:44:0d:b3:78:8e:ed:58:df:df:
         49:c2:45:a5:0c:d6:dc:79:4e:70:5f:6d:8b:23:5a:d9:c3:5e:
         07:4b:c7:5a:3d:67:22:17:e7:6c:00:c5:02:4e:27:f4:6f:ef:
         6c:46:54:66:4c:b7:9d:b0:5b:24:5a:2d:a8:66:64:0e:57:c0:
         b9:52:6c:4e:c3:ab:01:74:75:a8:d1:50:9a:2d:12:5a:d2:e2:
         b1:c1:b0:e9:87:7a:c8:c6:54:3b:c2:3d:82:4e:4e:4d:f6:59:
         88:f5:84:18:ee:02:9d:38:b9:a3:ed:fb:dd:eb:6d:72:71:31:
         dc:70:b3:e7:2b:25:8c:0b:fe:0c:8e:d9:ce:b2:61:02:3f:ee:
         49:f8:71:03:08:5d:1f:2e:df:4a:04:a6:28:2a:b9:82:fa:b8:
         c8:69:ff:10:b2:d3:9a:58:51:5e:65:f2:8a:5e:57:a5:6d:e3:
         68:f4:22:be:a4:a9:1d:66:7a:7b:fb:cb:18:9b:aa:75:1a:ea:
         5d:ec:3f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:51:36 2026 by rpki-client