Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/4e403d-9bf1-4f74-bd2a-98a66794cb5f/1/FAfYzrCqQ3IM3xoBnyGyfv0aAkE.asa
File:                     FAfYzrCqQ3IM3xoBnyGyfv0aAkE.asa (raw, json)
Hash identifier:          4bsfZ4n/LM0O/iMtpNn5YaFkWDUZVHril55Rw1Ijmbw=
Subject key identifier:   14:07:D8:CE:B0:AA:43:72:0C:DF:1A:01:9F:21:B2:7E:FD:1A:02:41
Certificate issuer:       /CN=6eedc2c864a7a3a127a81bcfb370c0a0743db1d3
Certificate serial:       01A023D6FF2CC9F9DB4D78AB6938E23AA818
Authority key identifier: 6E:ED:C2:C8:64:A7:A3:A1:27:A8:1B:CF:B3:70:C0:A0:74:3D:B1:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bu3CyGSno6EnqBvPs3DAoHQ9sdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/4e403d-9bf1-4f74-bd2a-98a66794cb5f/1/FAfYzrCqQ3IM3xoBnyGyfv0aAkE.asa
Signing time:             Fri 21 Aug 2026 10:21:27 +0000
ASPA not before:          Fri 21 Aug 2026 10:21:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            16140
Providers:                AS: 60132
                          AS: 197133
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/4e403d-9bf1-4f74-bd2a-98a66794cb5f/1/bu3CyGSno6EnqBvPs3DAoHQ9sdM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/4e403d-9bf1-4f74-bd2a-98a66794cb5f/1/bu3CyGSno6EnqBvPs3DAoHQ9sdM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bu3CyGSno6EnqBvPs3DAoHQ9sdM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 12:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:23:d6:ff:2c:c9:f9:db:4d:78:ab:69:38:e2:3a:a8:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eedc2c864a7a3a127a81bcfb370c0a0743db1d3
        Validity
            Not Before: Aug 21 10:21:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1407d8ceb0aa43720cdf1a019f21b27efd1a0241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f2:8e:2e:7a:ec:36:94:b1:f6:bb:cd:01:ad:
                    d1:92:0e:ea:92:5a:42:6b:9e:8f:e8:d6:1d:b6:8c:
                    c4:f8:81:3a:d7:55:ec:fa:61:48:b6:c9:bd:d9:10:
                    ff:03:a3:8f:ee:64:d8:d1:19:d6:a7:59:88:fe:b7:
                    1e:6e:08:d2:d9:00:d3:b5:da:60:b2:25:c7:7a:fa:
                    f4:a6:c6:b2:d4:c4:95:3c:30:d2:46:f0:94:82:19:
                    b3:9c:54:c9:2c:c3:c1:3e:62:11:1a:48:35:c8:0a:
                    2d:68:b1:55:7c:57:0d:49:fa:38:ca:93:97:98:c5:
                    d7:55:30:b1:92:4c:49:11:52:34:c1:bf:52:9b:a1:
                    63:a4:01:d8:7e:d0:21:3f:1d:67:3a:30:c5:3f:e1:
                    a0:a1:08:41:70:f5:75:fa:ac:75:e8:ae:bd:c7:52:
                    94:d0:c8:73:21:46:79:96:25:05:5b:10:19:0e:54:
                    09:3a:cc:4a:ab:38:8a:e2:be:85:fc:78:2c:af:6b:
                    b9:a2:58:f0:52:e6:6e:24:a0:7b:a8:d0:9c:b9:a9:
                    cb:72:29:d2:3e:b2:6c:8f:31:1e:84:7a:bd:db:b4:
                    94:54:5d:90:b8:6a:ff:2c:55:0a:47:3e:ba:3c:76:
                    ee:3d:88:f8:a0:18:8a:59:55:c7:72:10:00:9a:eb:
                    a7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:07:D8:CE:B0:AA:43:72:0C:DF:1A:01:9F:21:B2:7E:FD:1A:02:41
            X509v3 Authority Key Identifier:
                keyid:6E:ED:C2:C8:64:A7:A3:A1:27:A8:1B:CF:B3:70:C0:A0:74:3D:B1:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bu3CyGSno6EnqBvPs3DAoHQ9sdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4e403d-9bf1-4f74-bd2a-98a66794cb5f/1/FAfYzrCqQ3IM3xoBnyGyfv0aAkE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4e403d-9bf1-4f74-bd2a-98a66794cb5f/1/bu3CyGSno6EnqBvPs3DAoHQ9sdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16140

    Signature Algorithm: sha256WithRSAEncryption
         aa:22:5a:80:54:70:3b:49:86:8b:f6:cc:8d:de:e2:d9:0f:25:
         3d:4b:f3:18:94:2b:27:70:20:f8:03:4d:cb:90:7e:63:e3:0f:
         48:d6:5d:bb:f1:fc:0d:cc:fc:12:3d:25:2e:e2:79:76:b1:de:
         51:5a:67:47:78:7b:6c:8e:7c:6c:a0:d7:d4:00:66:8b:99:5a:
         ca:d1:4c:37:3a:3f:ab:f5:67:62:3c:9c:d0:c6:22:67:dc:3b:
         d6:06:ef:ed:c1:24:2e:83:44:5b:7b:ee:77:9e:a0:0e:86:92:
         91:de:32:58:9b:06:b4:6b:5c:fd:04:f6:19:be:ef:a1:c9:c4:
         85:35:ca:5c:05:2f:d9:60:ed:83:23:90:a7:e9:18:a5:e2:71:
         c9:c3:89:da:cf:53:2a:3e:16:fb:ed:58:67:42:f3:b9:39:d4:
         aa:32:1d:73:ca:db:cf:89:dc:7f:33:d2:6b:15:a9:06:76:f2:
         1c:77:c2:68:d2:aa:1d:55:49:57:46:96:b9:50:d5:41:cb:6e:
         7a:cc:46:9d:69:6b:25:28:d3:25:41:f7:c3:af:46:45:76:47:
         12:36:d5:2b:16:80:f3:63:94:50:34:a5:12:33:bd:3b:7a:9c:
         3c:cb:a8:70:34:09:2e:b5:af:ae:d5:14:25:4f:47:03:2b:84:
         20:78:c6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:08:36 2026 by rpki-client