Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/e907dd-d859-41d7-ba62-a0ea770cf3f2/1/E8q-XyFOi2dBl2RvmUxvXJg1YGU.asa
File:                     E8q-XyFOi2dBl2RvmUxvXJg1YGU.asa (raw, json)
Hash identifier:          3XtzyTPt7FY4YjjufzBgSB6mrAWr1BGgEnfAC89ctsI=
Subject key identifier:   13:CA:BE:5F:21:4E:8B:67:41:97:64:6F:99:4C:6F:5C:98:35:60:65
Certificate issuer:       /CN=c918be63dd26141bac0b492568f68af0adfef3e1
Certificate serial:       01A07C6665955000C33B8F8B34EC9177ADD5
Authority key identifier: C9:18:BE:63:DD:26:14:1B:AC:0B:49:25:68:F6:8A:F0:AD:FE:F3:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yRi-Y90mFBusC0klaPaK8K3-8-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/e907dd-d859-41d7-ba62-a0ea770cf3f2/1/E8q-XyFOi2dBl2RvmUxvXJg1YGU.asa
Signing time:             Mon 07 Sep 2026 15:04:40 +0000
ASPA not before:          Mon 07 Sep 2026 15:04:40 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            219442
Providers:                AS: 41051
                          AS: 199829
                          AS: 209533
                          AS: 212895
                          AS: 213905
                          AS: 215730
                          AS: 219529
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/e907dd-d859-41d7-ba62-a0ea770cf3f2/1/yRi-Y90mFBusC0klaPaK8K3-8-E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/e907dd-d859-41d7-ba62-a0ea770cf3f2/1/yRi-Y90mFBusC0klaPaK8K3-8-E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yRi-Y90mFBusC0klaPaK8K3-8-E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:7c:66:65:95:50:00:c3:3b:8f:8b:34:ec:91:77:ad:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c918be63dd26141bac0b492568f68af0adfef3e1
        Validity
            Not Before: Sep  7 15:04:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=13cabe5f214e8b674197646f994c6f5c98356065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e3:db:c4:b2:05:5c:41:ab:8e:75:26:dd:92:
                    d1:47:92:bd:c3:ec:43:38:cb:a1:4e:bd:f7:b2:08:
                    30:1b:ad:ab:18:83:5b:86:61:78:a2:a8:a3:6e:a9:
                    90:2c:6f:61:c5:b9:50:81:36:6b:6a:77:59:6a:e1:
                    48:02:50:11:bf:17:a5:80:61:83:d0:1d:9d:dd:f3:
                    76:fb:4e:4d:10:45:9e:20:d0:38:cb:09:6e:da:10:
                    16:f2:60:59:06:88:71:f5:2c:94:45:d4:65:98:e8:
                    2f:58:89:07:5f:eb:36:a1:b1:42:6d:49:ba:52:fe:
                    cd:9e:4f:9e:13:73:03:9f:5e:92:d2:29:a6:5c:2c:
                    d4:1d:7c:f8:54:c9:0f:16:bc:22:d1:5b:ba:f7:9b:
                    03:21:4f:dc:21:24:72:8e:b5:fc:36:b6:d9:e2:e4:
                    a1:4f:4d:a0:f3:52:38:7d:04:ff:49:9f:ed:d0:9e:
                    be:7b:af:a5:f1:4b:04:51:3b:f6:49:80:e5:1e:f6:
                    9c:d8:05:58:21:90:3d:e0:8e:dc:c0:6e:43:cb:92:
                    09:31:f0:62:2f:15:df:18:95:6d:42:9d:8a:22:89:
                    15:4a:d0:69:b1:95:7c:53:73:3c:a9:a7:51:76:c8:
                    0f:8e:58:a3:20:21:48:f8:59:8d:b6:df:4a:d4:aa:
                    0b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:CA:BE:5F:21:4E:8B:67:41:97:64:6F:99:4C:6F:5C:98:35:60:65
            X509v3 Authority Key Identifier:
                keyid:C9:18:BE:63:DD:26:14:1B:AC:0B:49:25:68:F6:8A:F0:AD:FE:F3:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRi-Y90mFBusC0klaPaK8K3-8-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e907dd-d859-41d7-ba62-a0ea770cf3f2/1/E8q-XyFOi2dBl2RvmUxvXJg1YGU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e907dd-d859-41d7-ba62-a0ea770cf3f2/1/yRi-Y90mFBusC0klaPaK8K3-8-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  219442

    Signature Algorithm: sha256WithRSAEncryption
         03:ea:6f:0b:17:5a:06:6c:58:92:bc:f5:f8:52:cb:ca:53:10:
         90:41:a5:a7:b1:11:18:a0:7d:a2:d2:5f:f9:7d:9a:4a:ff:fd:
         e8:0c:8d:c2:d8:f7:ce:0e:f7:dd:85:05:58:46:b9:92:03:f9:
         da:a9:db:c4:4b:8a:78:fa:80:4d:7d:c1:40:2d:d8:a7:60:83:
         b3:2c:f5:ca:9d:d4:e8:f9:a7:ba:ef:b7:1e:b4:9e:9a:87:4d:
         68:1b:54:31:69:e0:06:ca:bd:2b:e0:62:73:e1:07:d7:89:af:
         53:96:86:a8:38:32:8a:c0:59:ef:a6:62:f0:60:7b:92:e7:95:
         01:c0:ce:3a:6c:a2:00:7e:de:fd:94:33:d4:17:ff:e6:1b:25:
         c1:4d:00:79:26:b3:29:40:74:d7:29:89:b9:01:a1:ae:ee:c9:
         37:44:c2:ef:3a:ac:6c:7e:44:2f:3f:33:17:e5:fd:94:de:12:
         85:88:12:4a:c9:c3:bd:d4:8a:85:2a:04:1b:25:6b:ee:7e:6f:
         dc:0c:1f:fc:36:aa:80:a2:17:fc:a6:da:48:05:1d:84:e4:8f:
         02:74:81:97:b3:64:c8:ce:95:27:53:f0:e2:f4:23:ac:f6:83:
         91:34:58:7e:c1:93:2b:f3:2d:22:b3:fd:76:37:80:a7:bb:96:
         6d:09:57:43
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAaB8ZmWVUADDO4+LNOyRd63VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5MThiZTYzZGQyNjE0MWJhYzBiNDkyNTY4ZjY4YWYwYWRm
ZWYzZTEwHhcNMjYwOTA3MTUwNDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2NhYmU1ZjIxNGU4YjY3NDE5NzY0NmY5OTRjNmY1Yzk4MzU2MDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7+PbxLIFXEGrjnUm3ZLRR5K9w+xD
OMuhTr33sggwG62rGINbhmF4oqijbqmQLG9hxblQgTZrandZauFIAlARvxelgGGD
0B2d3fN2+05NEEWeINA4ywlu2hAW8mBZBohx9SyURdRlmOgvWIkHX+s2obFCbUm6
Uv7Nnk+eE3MDn16S0immXCzUHXz4VMkPFrwi0Vu695sDIU/cISRyjrX8NrbZ4uSh
T02g81I4fQT/SZ/t0J6+e6+l8UsEUTv2SYDlHvac2AVYIZA94I7cwG5Dy5IJMfBi
LxXfGJVtQp2KIokVStBpsZV8U3M8qadRdsgPjlijICFI+FmNtt9K1KoL9QIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFBPKvl8hTotnQZdkb5lMb1yYNWBlMB8GA1UdIwQY
MBaAFMkYvmPdJhQbrAtJJWj2ivCt/vPhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVJpLVk5MG1GQnVzQzBrbGFQYUs4SzMtOC1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9lOTA3ZGQtZDg1OS00MWQ3LWJhNjIt
YTBlYTc3MGNmM2YyLzEvRThxLVh5Rk9pMmRCbDJSdm1VeHZYSmcxWUdVLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9lOTA3ZGQtZDg1OS00MWQ3LWJhNjItYTBlYTc3MGNmM2Yy
LzEveVJpLVk5MG1GQnVzQzBrbGFQYUs4SzMtOC1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNZMjANBgkqhkiG
9w0BAQsFAAOCAQEAA+pvCxdaBmxYkrz1+FLLylMQkEGlp7ERGKB9otJf+X2aSv/9
6AyNwtj3zg733YUFWEa5kgP52qnbxEuKePqATX3BQC3Yp2CDsyz1yp3U6Pmnuu+3
HrSemodNaBtUMWngBsq9K+Bic+EH14mvU5aGqDgyisBZ76Zi8GB7kueVAcDOOmyi
AH7e/ZQz1Bf/5hslwU0AeSazKUB01ymJuQGhru7JN0TC7zqsbH5ELz8zF+X9lN4S
hYgSSsnDvdSKhSoEGyVr7n5v3Awf/DaqgKIX/KbaSAUdhOSPAnSBl7NkyM6VJ1Pw
4vQjrPaDkTRYfsGTK/MtIrP9djeAp7uWbQlXQw==
-----END CERTIFICATE-----
Generated at Sun Sep 20 12:36:44 2026 by rpki-client