Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/9eltQp3YyGaMMK8ILEOplZdeUGc.asa
File:                     9eltQp3YyGaMMK8ILEOplZdeUGc.asa (raw, json)
Hash identifier:          tdNDRLryj+1nuc3Md9jQU3Eln6eMmSjyoAEEcNWc4Es=
Subject key identifier:   F5:E9:6D:42:9D:D8:C8:66:8C:30:AF:08:2C:43:A9:95:97:5E:50:67
Certificate issuer:       /CN=fba7918bbf5aa80f144937ad1965ea03f025c22e
Certificate serial:       01A0A5B8B3B75964777EB3309E337678BC0E
Authority key identifier: FB:A7:91:8B:BF:5A:A8:0F:14:49:37:AD:19:65:EA:03:F0:25:C2:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-6eRi79aqA8USTetGWXqA_Alwi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/9eltQp3YyGaMMK8ILEOplZdeUGc.asa
Signing time:             Tue 15 Sep 2026 15:39:00 +0000
ASPA not before:          Tue 15 Sep 2026 15:39:00 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            212691
Providers:                AS: 47272
                          AS: 56381
                          AS: 58299
                          AS: 209533
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-6eRi79aqA8USTetGWXqA_Alwi4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:a5:b8:b3:b7:59:64:77:7e:b3:30:9e:33:76:78:bc:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fba7918bbf5aa80f144937ad1965ea03f025c22e
        Validity
            Not Before: Sep 15 15:39:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f5e96d429dd8c8668c30af082c43a995975e5067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ff:7e:07:a4:4d:50:0b:9c:b6:0b:6b:ee:a6:
                    86:ed:5a:97:39:37:1d:36:53:b8:50:90:38:68:40:
                    81:9b:8d:b0:aa:00:43:67:20:af:67:3e:ac:88:0d:
                    5c:ae:63:f6:02:ef:1b:bb:02:65:ae:98:cf:f8:3a:
                    cb:f8:0c:c5:13:6c:f2:b1:df:89:28:93:a6:f2:95:
                    d2:df:bc:1e:90:a2:48:e5:84:53:df:98:73:53:e0:
                    11:b2:b4:bd:56:65:5c:e2:5f:25:a4:9f:e2:27:42:
                    9b:f6:16:2a:cf:d2:fb:62:c7:47:21:00:64:db:c2:
                    07:52:bf:69:13:ea:53:d9:e6:62:68:48:bc:1d:b8:
                    3c:c2:2c:77:44:ad:41:22:32:16:a4:f1:dd:42:10:
                    2d:f4:a7:ae:f7:96:ef:93:c6:52:f7:99:c4:d6:05:
                    6f:d1:9e:b2:df:2b:a7:bd:25:25:19:59:b0:b9:9e:
                    2c:27:fb:1e:b0:91:08:ee:e5:f5:5c:65:e1:23:ef:
                    b1:e2:bc:57:8a:86:aa:62:cd:df:5c:82:82:d3:10:
                    c0:cd:6c:e7:3a:5d:bc:d9:d7:f5:00:ce:7f:38:e9:
                    00:3d:b5:d6:db:9c:35:b7:8b:dd:2e:8c:ed:76:97:
                    af:92:60:c3:91:fd:74:b0:51:85:6f:03:76:b8:b2:
                    94:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E9:6D:42:9D:D8:C8:66:8C:30:AF:08:2C:43:A9:95:97:5E:50:67
            X509v3 Authority Key Identifier:
                keyid:FB:A7:91:8B:BF:5A:A8:0F:14:49:37:AD:19:65:EA:03:F0:25:C2:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6eRi79aqA8USTetGWXqA_Alwi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/9eltQp3YyGaMMK8ILEOplZdeUGc.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212691

    Signature Algorithm: sha256WithRSAEncryption
         9e:39:ce:e2:90:cd:ba:8d:cf:35:1a:0d:02:4a:09:36:2b:b1:
         1f:11:48:1f:db:c7:93:3c:69:e8:4b:64:72:6c:a0:15:70:fe:
         27:8a:50:e6:2e:8e:fb:db:e0:7a:57:13:41:79:d6:8a:2d:8e:
         4e:6b:ce:6d:12:72:c3:61:e2:65:d1:a3:12:1d:a0:ca:ab:67:
         bf:15:77:19:6c:d7:b9:1e:c5:f3:be:06:d8:81:f2:e5:68:18:
         13:19:a5:4f:fb:b6:79:59:53:99:34:3b:e4:d1:e6:9c:ce:b5:
         7f:06:33:6a:94:37:37:3f:e6:4b:11:7b:03:43:2a:72:7f:d7:
         00:57:b8:06:95:06:53:49:57:0b:4e:55:a9:25:a6:f4:1a:43:
         ed:0e:43:a8:3a:48:15:1c:30:79:e2:af:ce:e4:0b:1d:96:d9:
         48:b5:28:70:d0:d5:6d:03:47:c7:7e:ef:7b:05:58:14:46:29:
         07:df:06:c2:1d:b3:e9:f7:a2:8e:d7:e8:d1:d7:f2:b1:01:0b:
         d6:91:cb:81:ab:7c:67:ee:ad:50:d3:53:a6:64:0b:63:50:f1:
         a6:a2:61:92:42:bb:d2:81:d1:9f:1e:9d:18:c2:2e:4b:88:e4:
         30:d9:cd:d8:cf:35:7b:49:75:5b:c4:b9:40:30:87:31:50:20:
         e7:a2:6c:f7
-----BEGIN CERTIFICATE-----
MIIE+jCCA+KgAwIBAgISAaCluLO3WWR3frMwnjN2eLwOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiYTc5MThiYmY1YWE4MGYxNDQ5MzdhZDE5NjVlYTAzZjAy
NWMyMmUwHhcNMjYwOTE1MTUzOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNWU5NmQ0MjlkZDhjODY2OGMzMGFmMDgyYzQzYTk5NTk3NWU1MDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0v9+B6RNUAuctgtr7qaG7VqXOTcd
NlO4UJA4aECBm42wqgBDZyCvZz6siA1crmP2Au8buwJlrpjP+DrL+AzFE2zysd+J
KJOm8pXS37wekKJI5YRT35hzU+ARsrS9VmVc4l8lpJ/iJ0Kb9hYqz9L7YsdHIQBk
28IHUr9pE+pT2eZiaEi8Hbg8wix3RK1BIjIWpPHdQhAt9Keu95bvk8ZS95nE1gVv
0Z6y3yunvSUlGVmwuZ4sJ/sesJEI7uX1XGXhI++x4rxXioaqYs3fXIKC0xDAzWzn
Ol282df1AM5/OOkAPbXW25w1t4vdLoztdpevkmDDkf10sFGFbwN2uLKUHQIDAQAB
o4ICBjCCAgIwHQYDVR0OBBYEFPXpbUKd2MhmjDCvCCxDqZWXXlBnMB8GA1UdIwQY
MBaAFPunkYu/WqgPFEk3rRll6gPwJcIuMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS02ZVJpNzlhcUE4VVNUZXRHV1hxQV9BbHdpNC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODgvODIyMjIxLTc3ZmYtNDJmNC1iMDUy
LWE0MzFkN2FkNjhkZC8xLzllbHRRcDNZeUdhTU1LOElMRU9wbFpkZVVHYy5hc2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvODgvODIyMjIxLTc3ZmYtNDJmNC1iMDUyLWE0MzFkN2FkNjhk
ZC8xLzEtNmVSaTc5YXFBOFVTVGV0R1dYcUFfQWx3aTQuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAz7TMA0GCSqG
SIb3DQEBCwUAA4IBAQCeOc7ikM26jc81Gg0CSgk2K7EfEUgf28eTPGnoS2RybKAV
cP4nilDmLo772+B6VxNBedaKLY5Oa85tEnLDYeJl0aMSHaDKq2e/FXcZbNe5HsXz
vgbYgfLlaBgTGaVP+7Z5WVOZNDvk0eaczrV/BjNqlDc3P+ZLEXsDQypyf9cAV7gG
lQZTSVcLTlWpJab0GkPtDkOoOkgVHDB54q/O5AsdltlItShw0NVtA0fHfu97BVgU
RikH3wbCHbPp96KO1+jR1/KxAQvWkcuBq3xn7q1Q01OmZAtjUPGmomGSQrvSgdGf
Hp0Ywi5LiOQw2c3YzzV7SXVbxLlAMIcxUCDnomz3
-----END CERTIFICATE-----
Generated at Sun Sep 20 16:06:42 2026 by rpki-client