Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/4e6p-lH4kJjXIk6IAecCUIieQoM.asa
File:                     4e6p-lH4kJjXIk6IAecCUIieQoM.asa (raw, json)
Hash identifier:          L1JkaMG+RuNm++dsHAyPGaMfywkjzYa51iVUFmkB5Fw=
Subject key identifier:   E1:EE:A9:FA:51:F8:90:98:D7:22:4E:88:01:E7:02:50:88:9E:42:83
Certificate issuer:       /CN=e9052499b0003ea0eeaea2426338c34e0bf8fdcf
Certificate serial:       01A0FBCD4BEFEEECA1B2BC0B125313BB1DE2
Authority key identifier: E9:05:24:99:B0:00:3E:A0:EE:AE:A2:42:63:38:C3:4E:0B:F8:FD:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/4e6p-lH4kJjXIk6IAecCUIieQoM.asa
Signing time:             Fri 02 Oct 2026 08:48:50 +0000
ASPA not before:          Fri 02 Oct 2026 08:48:50 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            201608
Providers:                AS: 8251
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 05:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:fb:cd:4b:ef:ee:ec:a1:b2:bc:0b:12:53:13:bb:1d:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9052499b0003ea0eeaea2426338c34e0bf8fdcf
        Validity
            Not Before: Oct  2 08:48:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e1eea9fa51f89098d7224e8801e70250889e4283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:79:5c:e0:42:07:b5:c0:71:fb:2b:0a:aa:2c:
                    25:f0:e7:a8:3a:ff:ae:45:6c:5e:e7:4b:e7:87:6f:
                    4b:94:87:85:cc:4b:e6:49:0c:24:d2:3a:52:5d:64:
                    e9:1e:ec:89:e7:d3:11:56:f9:48:5e:4b:dd:f3:db:
                    e0:f8:25:86:3b:67:ab:77:77:c4:48:89:4e:73:45:
                    d2:c1:7b:f3:5d:70:2b:33:30:3c:76:e5:5d:69:07:
                    04:e5:a0:d4:8d:fd:99:84:52:aa:0e:55:72:19:d7:
                    5b:52:f2:45:90:b9:59:fc:d8:af:77:5c:aa:45:ee:
                    75:1d:b2:d7:dc:a2:cd:d5:41:e0:23:63:47:41:f8:
                    73:df:5b:0c:24:63:31:fa:08:da:2a:ee:c0:64:2e:
                    15:45:f6:23:8c:92:58:b4:b1:cf:f2:fc:ae:d3:b4:
                    c0:c8:81:f5:ff:47:1e:db:4c:39:3e:4b:46:d7:dc:
                    19:01:f5:94:c2:4b:02:99:ad:53:d0:63:70:74:8e:
                    72:8b:b2:ac:b3:c5:3f:a5:64:f2:f3:80:53:82:b1:
                    18:91:39:3c:fa:1e:0b:2e:74:21:30:06:bd:c1:6d:
                    fb:58:27:68:2c:29:45:60:29:a8:81:45:81:b9:3e:
                    ae:27:df:2d:fb:bc:b5:55:3e:76:30:e5:59:6a:5a:
                    51:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:EE:A9:FA:51:F8:90:98:D7:22:4E:88:01:E7:02:50:88:9E:42:83
            X509v3 Authority Key Identifier:
                keyid:E9:05:24:99:B0:00:3E:A0:EE:AE:A2:42:63:38:C3:4E:0B:F8:FD:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/4e6p-lH4kJjXIk6IAecCUIieQoM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201608

    Signature Algorithm: sha256WithRSAEncryption
         18:41:e0:bc:90:b7:d3:d1:33:12:00:43:8b:d1:f3:85:67:73:
         7d:9a:29:63:d0:be:16:f3:3b:24:ac:ba:4b:aa:a6:18:56:21:
         79:fa:2e:b9:5e:0e:4e:a7:b0:7b:e2:fb:26:9b:1e:0a:60:97:
         79:dd:be:17:50:35:7a:51:97:d9:6f:f6:61:2e:d2:04:02:85:
         4f:3f:5d:c1:ac:84:af:f6:4e:3a:1b:a5:5c:1a:8d:7f:21:42:
         15:4a:e5:3d:0e:fe:c9:99:30:8b:a4:6a:2c:83:99:df:cf:a2:
         4e:f4:60:8b:94:86:e1:14:ad:7c:f9:a7:10:54:9d:11:8e:ab:
         27:3d:91:1b:59:ed:7d:23:3d:68:fe:9c:56:1c:d3:16:c8:fa:
         3c:7b:63:84:52:c5:1b:18:26:ed:d7:d9:8b:51:82:0e:df:64:
         9e:46:7d:00:bd:91:89:d8:b1:0e:2c:cf:40:7c:de:24:36:16:
         62:f2:66:66:71:ae:2a:6d:25:5b:c1:ba:5e:7e:23:68:76:ce:
         c4:02:bd:93:81:dd:72:c3:f0:8a:99:f7:d3:ee:83:a5:c6:20:
         0d:77:63:ae:2d:90:ed:17:de:e0:ea:46:02:a9:c2:87:5d:8f:
         2e:b0:fe:1a:85:fa:08:f6:a1:a1:21:16:36:59:aa:a1:81:a5:
         b6:a6:9c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:22:24 2026 by rpki-client