Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/4hqEWKYwVcLhnArVF8liJB6g95Q.asa
File:                     4hqEWKYwVcLhnArVF8liJB6g95Q.asa (raw, json)
Hash identifier:          0h7GpNKLKFBsXYcabpx/r1mfwkawc/nsZ4DEK8N3l+c=
Subject key identifier:   E2:1A:84:58:A6:30:55:C2:E1:9C:0A:D5:17:C9:62:24:1E:A0:F7:94
Certificate issuer:       /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial:       01A0875B634970CE851C5954D6C1A5A1929F
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/4hqEWKYwVcLhnArVF8liJB6g95Q.asa
Signing time:             Wed 09 Sep 2026 18:08:28 +0000
ASPA not before:          Wed 09 Sep 2026 18:08:28 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            209735
Providers:                AS: 6939
                          AS: 44355
                          AS: 207841
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:87:5b:63:49:70:ce:85:1c:59:54:d6:c1:a5:a1:92:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
        Validity
            Not Before: Sep  9 18:08:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e21a8458a63055c2e19c0ad517c962241ea0f794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:99:15:5b:4e:35:0b:e9:b8:bd:bf:5f:95:a6:
                    cf:c2:cf:cf:a6:c5:89:e7:e9:09:06:2d:ed:50:2e:
                    18:a2:29:9b:22:1c:ee:f3:cf:e2:dc:f0:53:95:f8:
                    54:a3:c5:c7:e1:9b:0d:a2:32:af:ec:18:91:69:e0:
                    16:9a:dd:28:a4:49:b3:2e:4b:7c:f2:44:9e:6b:bc:
                    49:72:cb:28:7f:32:8b:bf:ae:e8:ca:db:72:09:49:
                    10:ae:be:c6:68:46:3b:0a:e5:ff:74:8c:60:02:62:
                    12:ba:82:5c:1c:a1:dc:cf:6c:a2:69:d9:59:c5:0f:
                    de:cd:ad:43:32:ea:00:a2:93:28:bb:13:85:74:88:
                    35:6f:f1:fb:89:07:40:1e:e3:73:77:fb:e9:ef:65:
                    ed:5e:87:e1:d7:f3:15:4f:d6:15:35:b5:93:b9:ec:
                    7c:b8:05:08:2d:8b:c7:c8:60:fd:85:c8:4a:ce:ac:
                    29:f3:9e:df:3f:59:48:92:99:b6:f0:62:4d:f4:57:
                    06:6f:ad:25:4c:28:45:65:8b:81:33:9f:6d:be:55:
                    65:2e:35:db:b7:4c:66:eb:33:08:6a:69:c4:5d:22:
                    e4:b9:d9:65:56:eb:b4:9e:dd:44:78:b6:39:90:43:
                    d0:ea:59:55:89:e9:d4:c4:28:7e:50:6c:b5:9c:64:
                    5f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:1A:84:58:A6:30:55:C2:E1:9C:0A:D5:17:C9:62:24:1E:A0:F7:94
            X509v3 Authority Key Identifier:
                keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/4hqEWKYwVcLhnArVF8liJB6g95Q.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209735

    Signature Algorithm: sha256WithRSAEncryption
         38:6a:42:bf:f7:18:ce:a8:42:59:14:fa:b6:b2:60:25:d4:9d:
         4a:c7:58:75:cd:07:a7:ef:9c:b8:7d:50:e4:b4:71:f5:09:bf:
         71:86:13:a1:6e:1f:28:9e:b9:d1:60:c4:0b:c7:7c:6f:49:18:
         0c:92:4a:22:69:e8:6a:38:61:35:10:da:3f:ae:be:2a:a1:b3:
         5d:79:f1:9b:5d:b4:d5:51:45:35:08:7d:ec:a2:d6:75:cd:89:
         53:a8:ff:78:f3:91:7d:93:23:8d:f4:f4:65:b6:f9:71:6a:ad:
         30:0b:a2:a6:27:39:40:7c:41:5d:ad:7f:27:3b:0f:e5:f8:9c:
         b7:b7:c7:ea:4e:08:d2:56:e6:29:ea:95:16:c6:50:88:cb:25:
         1c:b3:42:5b:71:54:63:b1:71:2d:f8:84:05:89:d0:3d:13:2f:
         84:96:5c:cf:f0:be:cf:85:e0:ad:3b:e4:eb:0e:46:98:2e:2c:
         58:42:c5:6f:82:6e:ee:3d:d0:b9:52:56:fe:b4:15:4c:fc:a0:
         96:93:cc:7f:c9:36:5b:7e:aa:e4:05:51:5c:0f:0c:06:38:4c:
         b1:76:e9:99:f8:c3:de:8a:02:11:08:bd:44:af:48:52:a5:8b:
         f0:c8:5f:11:7b:63:53:72:ac:9e:fd:e3:81:7a:20:b7:95:7d:
         7c:4c:b2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:08:32 2026 by rpki-client