Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/1cb02f-a1e3-4cf4-9991-6389225e540a/1/5bswdSPkzISiUjsgGvs8he7FLw0.asa
File:                     5bswdSPkzISiUjsgGvs8he7FLw0.asa (raw, json)
Hash identifier:          kwdjlAqoJ5mD2gTxZB6y6A/f+ih4d96A7fnxQTfDQUA=
Subject key identifier:   E5:BB:30:75:23:E4:CC:84:A2:52:3B:20:1A:FB:3C:85:EE:C5:2F:0D
Certificate issuer:       /CN=09e95daf1639c7454915f94c3e7dd7da9643058a
Certificate serial:       01A06AC12EAED647A031C0BB8EFB3CD5C2E5
Authority key identifier: 09:E9:5D:AF:16:39:C7:45:49:15:F9:4C:3E:7D:D7:DA:96:43:05:8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CeldrxY5x0VJFflMPn3X2pZDBYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/1cb02f-a1e3-4cf4-9991-6389225e540a/1/5bswdSPkzISiUjsgGvs8he7FLw0.asa
Signing time:             Fri 04 Sep 2026 04:50:40 +0000
ASPA not before:          Fri 04 Sep 2026 04:50:40 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214757
Providers:                AS: 6204
                          AS: 6939
                          AS: 34854
                          AS: 34927
                          AS: 49127
                          AS: 50263
                          AS: 50338
                          AS: 50917
                          AS: 57463
                          AS: 60068
                          AS: 137409
                          AS: 214331
                          AS: 214762
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/1cb02f-a1e3-4cf4-9991-6389225e540a/1/CeldrxY5x0VJFflMPn3X2pZDBYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/1cb02f-a1e3-4cf4-9991-6389225e540a/1/CeldrxY5x0VJFflMPn3X2pZDBYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CeldrxY5x0VJFflMPn3X2pZDBYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6a:c1:2e:ae:d6:47:a0:31:c0:bb:8e:fb:3c:d5:c2:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09e95daf1639c7454915f94c3e7dd7da9643058a
        Validity
            Not Before: Sep  4 04:50:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e5bb307523e4cc84a2523b201afb3c85eec52f0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2f:12:b6:bc:6c:9c:bc:98:78:ec:0e:50:d2:
                    9a:95:c2:6b:ad:b8:b8:85:aa:d1:55:40:01:e4:92:
                    a9:4f:6b:84:11:bb:7f:2f:3c:3f:2b:0e:18:bc:49:
                    68:fa:06:f0:bf:46:ff:88:8f:9a:de:db:6e:c1:99:
                    1b:10:29:fd:56:5d:d4:a9:7d:92:11:e7:46:d7:a7:
                    a0:61:4e:9b:a0:48:fd:b1:06:dc:c1:39:7c:16:1f:
                    0b:8a:25:ae:78:65:81:ed:f4:59:df:c7:3d:45:b4:
                    d3:c4:73:6c:d7:46:7c:21:5a:fb:04:6b:d6:e0:bd:
                    3a:23:5c:c7:42:ef:11:3c:e2:ef:85:08:48:39:30:
                    56:1f:52:97:05:8e:6b:94:28:ce:4f:95:f7:58:e6:
                    85:99:a4:9d:98:25:09:6d:fe:5e:60:45:eb:50:3b:
                    f2:56:25:42:61:d7:5f:6e:db:3b:94:c6:ff:49:87:
                    32:8d:16:f2:92:86:cd:58:81:54:c6:bb:39:2c:b6:
                    44:c8:7e:1f:a4:09:0d:42:14:1e:c9:d2:09:7d:e3:
                    de:2a:66:08:cc:1a:a7:b9:f7:1a:cc:dd:8b:e1:17:
                    3c:ab:5d:e6:92:fc:29:4a:b9:c0:74:65:e3:08:2c:
                    ef:7b:5b:57:fa:33:13:5d:19:a9:77:6c:41:b5:65:
                    0d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:BB:30:75:23:E4:CC:84:A2:52:3B:20:1A:FB:3C:85:EE:C5:2F:0D
            X509v3 Authority Key Identifier:
                keyid:09:E9:5D:AF:16:39:C7:45:49:15:F9:4C:3E:7D:D7:DA:96:43:05:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeldrxY5x0VJFflMPn3X2pZDBYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/1cb02f-a1e3-4cf4-9991-6389225e540a/1/5bswdSPkzISiUjsgGvs8he7FLw0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/1cb02f-a1e3-4cf4-9991-6389225e540a/1/CeldrxY5x0VJFflMPn3X2pZDBYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214757

    Signature Algorithm: sha256WithRSAEncryption
         00:7c:99:85:04:a2:a7:e7:11:0f:2e:e7:b4:b5:eb:59:2d:ae:
         c6:4e:0e:7a:72:eb:a8:b2:3e:20:d1:ab:2d:2e:ed:ca:1d:9f:
         1a:bd:6b:81:69:8a:79:ab:b8:38:4a:03:db:5f:65:bb:5b:a1:
         7a:d3:a1:90:23:3a:d8:8c:36:d8:cc:18:97:bd:50:34:33:59:
         9d:69:55:f8:ba:9a:45:a9:52:78:45:09:3b:0c:cd:49:74:41:
         1b:53:33:f2:70:dc:20:a8:d1:84:fa:db:30:b3:75:a8:ab:b4:
         ca:63:44:1a:19:2f:43:cf:c1:c9:90:10:e9:be:01:9d:29:29:
         a9:4e:b5:76:56:3b:4c:41:b8:d6:c3:3c:07:01:22:52:a0:b3:
         3f:73:5d:45:92:ce:8d:4e:13:27:6d:ec:1e:1a:7a:ce:92:ce:
         de:3d:e4:7e:b9:7b:10:5e:fd:ab:34:9b:a9:0a:d0:7f:ce:7e:
         0d:cc:99:43:ac:e3:2a:a7:f8:b4:84:2e:d1:39:74:2f:4c:80:
         a2:c5:14:9d:c2:cf:bf:63:da:64:e5:80:c7:e0:7a:c7:3c:cb:
         d5:2e:dd:f7:2c:61:78:d0:c5:97:70:04:b3:41:65:04:0a:ed:
         c0:61:62:34:34:a0:bf:ef:5f:67:39:de:0d:59:92:d7:52:bf:
         09:c3:5b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:53:20 2026 by rpki-client