Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/dmMhj078sLabp7xtW9aXGAIB3zM.asa
File:                     dmMhj078sLabp7xtW9aXGAIB3zM.asa (raw, json)
Hash identifier:          vxodjRZoStQRyw4pNt8LVkQw+K6WNuyoNs3zGekiLkc=
Subject key identifier:   76:63:21:8F:4E:FC:B0:B6:9B:A7:BC:6D:5B:D6:97:18:02:01:DF:33
Certificate issuer:       /CN=16fe0d024cddbaf868229122158971472b24cb4d
Certificate serial:       01A1C5E401C3ACD4F3A5254F645FA460EEF7
Authority key identifier: 16:FE:0D:02:4C:DD:BA:F8:68:22:91:22:15:89:71:47:2B:24:CB:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fv4NAkzduvhoIpEiFYlxRysky00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/dmMhj078sLabp7xtW9aXGAIB3zM.asa
Signing time:             Tue 10 Nov 2026 14:36:56 +0000
ASPA not before:          Tue 10 Nov 2026 14:36:56 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            57048
Providers:                AS: 6939
                          AS: 8283
                          AS: 41051
                          AS: 200132
                          AS: 209533
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fv4NAkzduvhoIpEiFYlxRysky00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Nov 2026 09:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:c5:e4:01:c3:ac:d4:f3:a5:25:4f:64:5f:a4:60:ee:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16fe0d024cddbaf868229122158971472b24cb4d
        Validity
            Not Before: Nov 10 14:36:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7663218f4efcb0b69ba7bc6d5bd697180201df33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:08:75:b1:7f:2f:56:b0:61:bf:85:17:0d:2a:
                    47:11:42:d9:99:2d:48:e8:99:ba:ff:52:d8:b4:17:
                    c6:a8:d1:ce:5d:c0:fe:73:2d:94:9f:f7:58:e1:fb:
                    e3:81:4b:ba:d9:7b:1e:1e:ef:25:a4:01:71:2c:e4:
                    78:2f:10:2c:c4:ca:99:97:9f:29:56:72:bd:80:d0:
                    1b:d7:81:2b:10:07:0f:ab:e0:68:fc:f9:e0:16:b6:
                    13:ac:a4:eb:a9:f0:26:5f:4a:4b:73:d8:f5:fd:be:
                    3e:19:02:9e:10:77:59:af:81:3e:12:66:54:c9:8a:
                    62:a1:4b:18:5c:9c:f5:11:52:c2:d0:b0:f5:a9:e5:
                    cb:b4:1d:46:6d:5c:db:44:48:04:9f:ff:68:42:62:
                    a2:2d:4e:fb:6e:c9:6e:54:0d:47:c0:1d:99:85:2f:
                    2b:f4:d9:0b:a6:41:43:77:3c:70:95:c9:e6:65:89:
                    ea:ee:d4:fa:f6:2c:bb:cf:d8:e4:99:1b:39:66:1a:
                    79:57:55:ef:21:38:0f:e1:5b:07:38:2a:2d:dd:ec:
                    2f:57:4c:6a:fe:04:2e:e6:c9:6c:67:89:6f:47:a4:
                    25:a0:f8:ad:17:0e:32:3f:e5:14:f1:59:9b:a5:2b:
                    01:0c:70:a7:ab:e3:86:2c:2d:30:2f:d8:fd:55:91:
                    eb:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:63:21:8F:4E:FC:B0:B6:9B:A7:BC:6D:5B:D6:97:18:02:01:DF:33
            X509v3 Authority Key Identifier:
                keyid:16:FE:0D:02:4C:DD:BA:F8:68:22:91:22:15:89:71:47:2B:24:CB:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fv4NAkzduvhoIpEiFYlxRysky00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/dmMhj078sLabp7xtW9aXGAIB3zM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57048

    Signature Algorithm: sha256WithRSAEncryption
         b9:5b:7f:24:0b:9a:60:eb:12:45:1f:f1:6c:1b:cd:3c:72:14:
         83:f7:db:11:b1:5f:d5:72:9d:61:c4:46:af:25:a0:a5:50:91:
         af:e4:a8:a3:fe:e7:49:69:06:ac:b3:fd:69:50:67:86:10:91:
         fa:ed:f7:f3:f0:f2:0a:a7:69:49:db:63:7a:60:84:4d:f3:9e:
         e1:71:58:0f:9a:3b:b1:cf:cf:2e:07:35:e4:67:20:c1:91:2b:
         63:09:79:04:6a:c3:a4:29:ce:8e:73:51:36:45:33:b1:9d:35:
         76:3e:c1:24:c4:a2:87:25:30:f6:e2:fa:e0:7b:5d:03:43:d3:
         e1:c4:3d:06:95:66:fe:40:ef:29:1e:f1:a3:06:f3:f4:2f:ca:
         14:7d:c8:1e:2d:8e:70:90:55:d5:9f:fa:d3:11:39:35:81:90:
         61:63:2d:9c:d6:31:ed:5e:28:f1:c7:56:a3:34:b9:3a:1f:55:
         c9:e9:23:5c:bf:7e:32:13:de:83:90:77:2b:cc:8e:4f:5a:9a:
         b6:df:5b:40:39:1a:1e:2c:0a:f4:44:7a:c3:95:09:3a:17:03:
         66:20:75:71:3e:4d:3c:98:8e:e1:25:4d:c4:68:b0:66:e1:81:
         ff:68:d2:cb:8f:9f:66:0c:94:7a:83:0e:b9:d1:8b:a8:ee:ed:
         95:82:52:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 17:23:57 2026 by rpki-client