Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/ze0YKIttxdbb_tzXyBtFJFW9zEs.asa
File:                     ze0YKIttxdbb_tzXyBtFJFW9zEs.asa (raw, json)
Hash identifier:          agef/IONDj13ZajBLv9pJjFF+eXEWrm28J4AErVUvUw=
Subject key identifier:   CD:ED:18:28:8B:6D:C5:D6:DB:FE:DC:D7:C8:1B:45:24:55:BD:CC:4B
Certificate issuer:       /CN=d42a53da038252f64b6c29359cfac4104c35b7e9
Certificate serial:       019C2DE649C35DBBF28791E8F169A6CEB203
Authority key identifier: D4:2A:53:DA:03:82:52:F6:4B:6C:29:35:9C:FA:C4:10:4C:35:B7:E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/ze0YKIttxdbb_tzXyBtFJFW9zEs.asa
Signing time:             Thu 05 Feb 2026 13:03:12 +0000
ASPA not before:          Thu 05 Feb 2026 13:03:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            210645
Providers:                AS: 6939
                          AS: 50917
                          AS: 400818
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 04:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:2d:e6:49:c3:5d:bb:f2:87:91:e8:f1:69:a6:ce:b2:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d42a53da038252f64b6c29359cfac4104c35b7e9
        Validity
            Not Before: Feb  5 13:03:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=cded18288b6dc5d6dbfedcd7c81b452455bdcc4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fe:68:be:42:e9:7d:46:90:4a:05:b8:dd:fe:
                    33:00:63:fa:5b:49:6e:88:84:c1:5d:af:7c:2c:72:
                    2f:b9:b9:5f:6f:f2:88:4f:bc:36:c8:c6:42:ff:f7:
                    ab:35:81:00:0e:49:34:3f:01:f7:c7:1f:00:7f:b3:
                    f3:f4:5d:99:b0:d8:0b:7e:33:da:44:3c:56:dc:97:
                    73:98:f4:07:e0:b4:7f:45:84:4c:88:2e:89:a2:d9:
                    9c:fe:1f:b7:59:f7:34:b7:02:96:ea:7e:56:4b:7b:
                    eb:e3:35:da:52:46:28:ac:ea:68:12:1c:a5:96:40:
                    e0:5c:1a:7e:c9:45:36:d7:4f:05:01:6c:43:4f:46:
                    7f:86:a0:a7:41:6b:2d:96:53:a1:d6:29:f5:90:e0:
                    bb:ed:db:63:76:1d:e7:65:f0:8f:1c:d9:0d:78:6f:
                    43:b8:d3:08:4b:59:a8:99:d9:27:be:5e:8e:7e:3a:
                    01:3a:4d:fa:30:2b:45:e7:39:0b:43:fd:31:8c:d1:
                    fc:40:ca:b2:f0:bc:c0:af:5b:c1:5a:4c:f3:23:3d:
                    10:f1:aa:dc:fa:6c:e9:38:d1:80:67:de:4f:90:2f:
                    fe:4e:22:f7:2c:29:3f:b9:fb:95:39:c7:b7:26:f6:
                    d7:9b:d0:2e:57:8a:51:57:68:c4:25:2b:52:ae:75:
                    82:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:ED:18:28:8B:6D:C5:D6:DB:FE:DC:D7:C8:1B:45:24:55:BD:CC:4B
            X509v3 Authority Key Identifier:
                keyid:D4:2A:53:DA:03:82:52:F6:4B:6C:29:35:9C:FA:C4:10:4C:35:B7:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/ze0YKIttxdbb_tzXyBtFJFW9zEs.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210645

    Signature Algorithm: sha256WithRSAEncryption
         69:1b:a7:65:cf:08:92:10:14:5f:2c:30:f7:10:18:7d:cd:de:
         80:f6:21:c0:69:a4:3b:7b:4a:0e:65:d0:25:4c:da:28:c9:05:
         69:0f:f4:54:8b:00:05:f5:36:72:d9:a2:7d:1c:63:3a:11:3a:
         ba:76:87:ec:ff:ed:c0:ec:90:9e:ef:31:7b:f0:b2:d0:06:44:
         5e:21:e7:63:93:d3:d1:e9:72:ad:88:6c:b8:56:4d:b8:7a:2e:
         40:f8:66:c9:5d:1b:5e:12:19:d9:29:27:5d:3d:cc:70:e0:b1:
         b5:8c:b9:15:b7:c4:a4:c0:d2:62:e5:0f:30:c5:78:db:fe:00:
         2b:5b:b7:83:15:90:d7:da:f1:90:64:d2:da:ef:76:a9:c5:7c:
         eb:f0:09:bd:71:ed:d9:d1:ac:1b:94:e3:cc:2c:b1:74:e9:30:
         43:a2:18:03:f1:f7:5b:e0:b0:7c:f9:d3:b2:f5:7e:31:d9:d8:
         d1:1e:d7:d8:ad:a5:b7:8d:3f:d6:a0:04:be:ff:f5:b5:28:36:
         02:75:ff:17:05:ac:7b:7a:e3:f9:3e:30:3a:39:1a:d5:c1:35:
         43:f9:91:60:40:4a:89:af:09:5c:ee:c6:cc:27:a5:d4:1d:82:
         ae:2d:77:9a:b5:14:1b:13:8a:b7:60:8c:81:da:e3:bb:cb:ac:
         cd:9f:96:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:03:21 2026 by rpki-client