Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/UxwyyngP7-MoQBdxEIRtyXFMmW4.asa
File:                     UxwyyngP7-MoQBdxEIRtyXFMmW4.asa (raw, json)
Hash identifier:          ZJX8hMxrfqU6rf2fywunARNrVkCIIh5yrReK+vYy0vE=
Subject key identifier:   53:1C:32:CA:78:0F:EF:E3:28:40:17:71:10:84:6D:C9:71:4C:99:6E
Certificate issuer:       /CN=aeac1b2129abbac6539f80da6550c49721d0a8c4
Certificate serial:       01A14427160627951E95A564E4A3A55125A2
Authority key identifier: AE:AC:1B:21:29:AB:BA:C6:53:9F:80:DA:65:50:C4:97:21:D0:A8:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/UxwyyngP7-MoQBdxEIRtyXFMmW4.asa
Signing time:             Fri 16 Oct 2026 09:59:34 +0000
ASPA not before:          Fri 16 Oct 2026 09:59:34 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            39904
Providers:                AS: 5588
                          AS: 6855
                          AS: 6939
                          AS: 16019
                          AS: 42000
                          AS: 47200
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 06:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:44:27:16:06:27:95:1e:95:a5:64:e4:a3:a5:51:25:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeac1b2129abbac6539f80da6550c49721d0a8c4
        Validity
            Not Before: Oct 16 09:59:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=531c32ca780fefe32840177110846dc9714c996e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:80:ab:59:4d:33:90:28:f7:27:71:61:2c:ad:
                    a8:6f:97:96:0a:7f:3e:76:33:6a:ee:a1:0c:2c:71:
                    53:b9:f9:f4:a7:76:16:f5:31:92:f9:50:71:4e:30:
                    24:81:fa:b5:38:8e:12:15:d9:7d:1e:21:4a:13:b0:
                    b3:85:ab:da:72:99:f4:74:27:38:fa:9a:f5:bb:df:
                    5d:79:97:18:26:3a:41:c2:98:e4:b3:ff:9d:6f:7c:
                    ba:c0:a1:92:44:8e:8d:e1:4d:dd:33:02:8a:96:99:
                    83:74:08:8a:f1:32:4f:1d:9f:87:c3:78:55:3c:15:
                    a6:70:a7:cc:83:87:ea:e1:37:b9:bb:e8:ab:78:68:
                    17:89:de:c1:2a:38:9d:66:36:a4:bf:af:4c:11:33:
                    b9:b7:09:a5:03:f6:a5:9a:a1:1c:dd:66:a3:42:ce:
                    1e:3d:13:1c:2a:ce:2d:b7:f5:a7:23:e0:31:8b:a9:
                    36:e1:27:f9:89:3b:b1:55:35:87:28:bf:af:94:73:
                    3e:5c:12:6a:f5:53:8f:6e:b9:70:15:c0:23:c0:3c:
                    27:52:4c:b1:dc:77:d9:4f:e2:71:ae:3b:8d:4d:f3:
                    a8:96:56:28:d4:64:35:e4:a4:19:d8:ab:c6:1f:3e:
                    25:c2:df:4d:54:77:89:5e:5e:54:d5:2f:e5:b4:ae:
                    44:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:1C:32:CA:78:0F:EF:E3:28:40:17:71:10:84:6D:C9:71:4C:99:6E
            X509v3 Authority Key Identifier:
                keyid:AE:AC:1B:21:29:AB:BA:C6:53:9F:80:DA:65:50:C4:97:21:D0:A8:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/UxwyyngP7-MoQBdxEIRtyXFMmW4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39904

    Signature Algorithm: sha256WithRSAEncryption
         2d:30:6b:cc:38:50:6b:09:c9:8d:a9:e5:53:87:03:7c:87:39:
         b2:33:cb:50:16:01:b7:22:9d:87:cd:27:a7:2b:cc:22:ea:20:
         a7:3f:f4:52:07:0d:6a:85:cf:6c:af:5f:37:10:fe:ef:9d:de:
         49:19:23:89:ce:42:d5:bd:b0:4b:5f:2b:8d:0f:5c:f5:29:66:
         a3:f7:12:bc:93:fc:14:20:de:a3:b8:8a:73:33:9d:69:93:8e:
         99:c0:5a:64:fc:2d:61:bb:f5:64:d6:b2:5e:e9:f1:be:28:4f:
         77:f0:53:2c:63:ca:ca:f2:83:41:3d:56:7d:73:a7:e4:7f:7d:
         04:85:4d:48:76:5a:1d:98:51:9e:eb:52:05:b6:0e:78:d1:58:
         cc:9f:c0:f4:7e:e5:2c:c5:b3:61:58:78:d7:42:51:27:5f:6e:
         b3:77:70:dc:6e:2b:1f:53:94:79:03:1c:95:35:a8:3a:57:f6:
         ed:23:ee:26:3e:aa:6e:5a:7f:27:c7:4f:2f:40:ad:ee:46:2b:
         45:cc:af:bb:c4:a2:13:09:e9:76:cf:35:00:0e:b8:8d:3e:5c:
         3b:98:9b:7c:02:7b:cd:8c:5d:7f:92:50:9c:7d:8f:0c:0b:e2:
         3d:25:10:bd:6b:20:d8:bd:e6:72:87:5f:de:02:f4:90:27:11:
         90:4b:a5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 12:51:04 2026 by rpki-client