Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/i75q_zMVNaia1zcfmMS3-MtcBh0.asa
File:                     i75q_zMVNaia1zcfmMS3-MtcBh0.asa (raw, json)
Hash identifier:          AViSc0D9y0lScSoevl+dGPay5IerujbH9Kjp2UJ8v7c=
Subject key identifier:   8B:BE:6A:FF:33:15:35:A8:9A:D7:37:1F:98:C4:B7:F8:CB:5C:06:1D
Certificate issuer:       /CN=f07fa98d521d84c28daec8a89f7488bbce800215
Certificate serial:       01A0908FF02C7523B29F2F177B7A518538AC
Authority key identifier: F0:7F:A9:8D:52:1D:84:C2:8D:AE:C8:A8:9F:74:88:BB:CE:80:02:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8H-pjVIdhMKNrsion3SIu86AAhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/i75q_zMVNaia1zcfmMS3-MtcBh0.asa
Signing time:             Fri 11 Sep 2026 13:02:27 +0000
ASPA not before:          Fri 11 Sep 2026 13:02:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            213641
Providers:                AS: 6461
                          AS: 6939
                          AS: 8893
                          AS: 11967
                          AS: 29670
                          AS: 34872
                          AS: 34927
                          AS: 52025
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8H-pjVIdhMKNrsion3SIu86AAhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 04:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:90:8f:f0:2c:75:23:b2:9f:2f:17:7b:7a:51:85:38:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f07fa98d521d84c28daec8a89f7488bbce800215
        Validity
            Not Before: Sep 11 13:02:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8bbe6aff331535a89ad7371f98c4b7f8cb5c061d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5c:9a:af:27:dc:86:38:1f:28:51:13:31:05:
                    12:fe:5a:f7:dc:67:c2:45:fb:82:fa:7d:34:3e:12:
                    3d:b6:d3:7a:1f:3c:6c:82:0d:eb:15:c6:c3:8f:e0:
                    a5:de:c1:a0:b4:73:ed:0d:c9:0a:ef:6f:09:bd:ca:
                    8f:02:02:ea:64:96:0f:5c:0f:61:95:d8:9b:f4:b0:
                    25:80:d8:78:4e:a1:fb:77:18:7f:80:eb:06:11:75:
                    ae:06:1b:47:a0:af:63:e6:08:ee:58:31:8e:90:53:
                    41:c6:4a:5d:7d:a1:32:46:41:62:26:62:34:3e:92:
                    bc:4a:e7:6d:3c:b2:51:f0:5f:ea:a3:af:50:09:8e:
                    01:db:2f:79:86:15:2a:1e:39:2a:a7:41:64:7d:40:
                    36:c6:ed:ad:3b:32:e4:c5:e2:e7:e1:95:a9:3d:33:
                    e8:67:5a:28:f8:9d:e5:cd:ee:dc:59:e3:bb:11:35:
                    b4:d0:98:01:04:fe:62:be:0c:a2:b9:ea:95:7f:75:
                    bb:4c:2e:7a:65:d8:47:5a:a3:57:4a:c5:f8:90:20:
                    bb:f9:74:f6:da:7a:44:76:38:b8:d1:18:e2:1b:7c:
                    8b:b4:5b:ea:32:1b:b6:54:96:ca:67:37:ff:1a:02:
                    2d:3e:06:7b:39:44:7e:67:c0:58:ed:94:d9:8a:2f:
                    16:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:BE:6A:FF:33:15:35:A8:9A:D7:37:1F:98:C4:B7:F8:CB:5C:06:1D
            X509v3 Authority Key Identifier:
                keyid:F0:7F:A9:8D:52:1D:84:C2:8D:AE:C8:A8:9F:74:88:BB:CE:80:02:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8H-pjVIdhMKNrsion3SIu86AAhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/i75q_zMVNaia1zcfmMS3-MtcBh0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213641

    Signature Algorithm: sha256WithRSAEncryption
         3e:87:fe:af:ab:29:9e:1f:cf:e7:89:57:3d:c0:97:79:11:42:
         55:9e:c2:31:e4:69:82:4e:47:b6:0e:28:66:48:5e:7a:8f:06:
         51:ff:4e:a0:cc:33:0f:53:33:5d:49:1b:b2:f0:e8:01:bc:be:
         bb:08:37:d6:a1:6a:7a:a2:0b:14:de:d4:2a:d6:c1:23:64:8c:
         10:af:77:48:19:0d:9f:c5:7f:bc:9c:df:58:80:4a:ef:40:38:
         bd:c7:cb:1a:5a:00:d4:1c:a0:b7:5b:ef:1b:e2:db:54:91:99:
         55:42:c7:a1:9f:49:bf:1b:49:f2:05:a1:11:8c:f0:d0:e3:3f:
         cb:11:83:6d:9f:f3:e2:63:99:60:cf:ef:d1:8d:d0:ce:26:58:
         51:bb:9d:0f:90:d9:ca:4f:a2:42:47:01:63:82:18:26:67:95:
         c8:d0:27:69:98:b6:ca:9b:b5:38:29:61:84:68:ba:de:e5:47:
         36:79:da:0f:ed:a1:03:af:5e:4c:14:1e:77:40:f6:19:24:de:
         64:d8:68:4e:7d:d3:a6:a2:30:68:75:aa:b1:8f:84:5f:7d:fe:
         04:bd:74:a6:09:dc:0c:df:54:93:f0:84:cb:29:fd:b6:3d:13:
         8c:62:20:35:a7:05:98:90:8e:20:eb:ac:21:7c:18:99:86:72:
         41:b6:02:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:34:08 2026 by rpki-client