Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/4oFOXlFAwQpQhLcvX3Mlug42WXI.asa
File:                     4oFOXlFAwQpQhLcvX3Mlug42WXI.asa (raw, json)
Hash identifier:          x6fRicKlvhyXALhGsFxeEPbj6hZp0oTJREbFkLRQabk=
Subject key identifier:   E2:81:4E:5E:51:40:C1:0A:50:84:B7:2F:5F:73:25:BA:0E:36:59:72
Certificate issuer:       /CN=887e81ba84344598c61462833aadf3204eae087c
Certificate serial:       01A0B42435DDEDC4B8CB0C0E3FAAA351C5AF
Authority key identifier: 88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/4oFOXlFAwQpQhLcvX3Mlug42WXI.asa
Signing time:             Fri 18 Sep 2026 10:51:07 +0000
ASPA not before:          Fri 18 Sep 2026 10:51:07 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            8542
Providers:                AS: 8075
                          AS: 29695
                          AS: 30950
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b4:24:35:dd:ed:c4:b8:cb:0c:0e:3f:aa:a3:51:c5:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=887e81ba84344598c61462833aadf3204eae087c
        Validity
            Not Before: Sep 18 10:51:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e2814e5e5140c10a5084b72f5f7325ba0e365972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:48:47:25:5a:fb:a8:2b:80:3e:5b:ab:79:42:
                    b7:6b:b2:e8:3a:d9:5e:3b:3d:63:34:88:12:87:d8:
                    0a:65:72:9c:12:fe:1c:95:50:38:50:6d:31:86:01:
                    35:52:4a:d5:36:a1:7a:81:17:5b:34:e6:6b:c5:49:
                    de:e2:35:a8:29:8e:a3:d1:9b:c6:90:7b:b8:eb:89:
                    62:74:83:7e:74:20:5b:aa:86:e0:6a:b7:e0:f2:66:
                    13:df:99:9b:b0:e1:f7:77:89:9f:31:83:d0:64:75:
                    29:2c:50:99:92:d5:2a:77:8b:b3:00:26:0b:55:cb:
                    4e:1f:29:2c:17:09:9a:0c:13:a5:1a:fe:f9:0c:ca:
                    7e:15:1a:a9:31:38:9a:83:c5:d2:06:d6:0e:35:28:
                    d2:60:fa:b8:b9:62:f0:cc:ca:64:e4:52:76:b4:22:
                    4e:09:39:79:c7:9d:0d:b1:ce:ec:76:7e:d5:32:d6:
                    28:f5:06:dc:16:7b:0f:2e:ff:06:0a:ea:0f:43:4b:
                    77:62:10:5e:0c:48:01:b0:22:5b:4d:f9:22:3c:1b:
                    87:95:63:80:0e:1c:d6:e5:aa:69:34:dc:d2:db:02:
                    be:bf:91:d2:5b:0b:3a:fa:da:ab:5b:9a:6b:4b:72:
                    26:64:6b:86:b8:bf:d5:73:44:33:9f:f8:c1:88:d6:
                    c0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:81:4E:5E:51:40:C1:0A:50:84:B7:2F:5F:73:25:BA:0E:36:59:72
            X509v3 Authority Key Identifier:
                keyid:88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/4oFOXlFAwQpQhLcvX3Mlug42WXI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  8542

    Signature Algorithm: sha256WithRSAEncryption
         6e:07:48:fd:d2:07:57:3d:31:33:9d:35:00:2e:ed:9d:4c:4b:
         8b:53:24:11:8c:6a:d5:f7:a8:78:da:36:f6:6b:05:e4:b6:7f:
         8b:af:a9:f5:17:13:44:93:d3:ea:89:a4:5f:c7:20:ca:62:f7:
         74:5c:1a:0b:af:8a:9a:5b:8d:7c:b0:5b:54:6f:95:0b:dd:7d:
         2d:53:8d:bc:61:6e:c7:a6:56:6e:94:36:6a:1a:bb:2d:a1:de:
         35:db:45:c8:2e:23:a1:c0:0e:0f:19:ac:76:d3:b9:3f:87:ba:
         59:58:09:55:28:8e:7b:1f:64:0a:f7:bd:3e:20:0a:81:5c:76:
         e0:34:94:03:55:33:da:be:8a:0c:5a:5c:67:cf:45:fd:48:35:
         bf:fe:73:cd:6b:fe:3c:90:ae:65:94:9d:77:12:b1:10:f0:1c:
         79:89:46:f2:28:7f:e8:35:dd:21:54:fc:c6:23:f9:35:61:1c:
         13:ad:39:8f:48:fc:f0:3c:78:47:1f:41:dc:47:b4:2b:b1:55:
         4b:fc:c0:7b:0f:81:9d:30:33:15:83:97:92:bb:b0:e9:94:a5:
         88:b0:83:d5:8a:c0:db:84:fc:c5:74:fc:3f:43:e7:81:10:34:
         10:aa:0d:86:3c:78:75:52:ed:35:0e:91:42:49:da:48:a5:5b:
         31:92:5c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:06:04 2026 by rpki-client