Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/xTTBRwL6PuXvE_aaxObEDM8VfCM.asa
File:                     xTTBRwL6PuXvE_aaxObEDM8VfCM.asa (raw, json)
Hash identifier:          Ulx+RQxQuuILxVTtyBq73/Vl62lRwK/D7ylHtUz3nfw=
Subject key identifier:   C5:34:C1:47:02:FA:3E:E5:EF:13:F6:9A:C4:E6:C4:0C:CF:15:7C:23
Certificate issuer:       /CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Certificate serial:       01A1A3C6F0B4BE1F80649280CBAE116F2196
Authority key identifier: 5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/xTTBRwL6PuXvE_aaxObEDM8VfCM.asa
Signing time:             Tue 03 Nov 2026 23:38:06 +0000
ASPA not before:          Tue 03 Nov 2026 23:38:06 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            48014
Providers:                AS: 49581
                          AS: 58212
                          AS: 60068
                          AS: 61272
                          AS: 62403
                          AS: 197071
                          AS: 198890
                          AS: 201814
                          AS: 207083
                          AS: 213250
                          AS: 213683
                          AS: 219359
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 08:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:a3:c6:f0:b4:be:1f:80:64:92:80:cb:ae:11:6f:21:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fc90518df70b13d706bfe237aa5a76926a576d1
        Validity
            Not Before: Nov  3 23:38:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c534c14702fa3ee5ef13f69ac4e6c40ccf157c23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:eb:7a:d6:f9:42:6c:78:92:e1:f9:5d:59:52:
                    f4:de:5b:f3:aa:96:d7:c3:81:ac:e3:2f:fe:25:61:
                    47:60:6f:5b:e3:39:59:4b:cf:5e:00:e4:a7:04:46:
                    b3:22:17:21:3a:b2:84:4b:c0:fa:70:d3:c8:a3:ce:
                    a5:9a:e5:c8:19:aa:4a:e1:97:80:ff:70:20:a0:68:
                    f5:38:22:9e:95:e0:90:4c:1f:ae:ce:ef:40:25:fd:
                    7c:e9:f7:4c:ca:2c:58:14:47:d2:0c:44:9c:57:11:
                    56:50:12:08:1d:72:33:1c:a9:6e:3b:65:ce:94:f2:
                    0f:0d:9b:e0:89:13:0a:d1:04:db:14:d0:24:fe:d9:
                    92:b7:b2:a4:5a:7c:cb:17:83:a9:4d:c7:bd:bd:4e:
                    00:cf:5d:16:31:06:a2:73:fb:3e:cd:07:da:44:77:
                    71:20:b2:54:b7:3c:62:b5:9a:54:6e:79:45:2a:2d:
                    72:ad:4c:b7:47:66:02:34:9d:69:78:6f:01:f8:d1:
                    72:0f:6a:d2:f4:5e:17:49:4d:99:62:f6:50:03:db:
                    bd:6e:56:e2:07:d0:37:93:a2:e2:90:e7:81:c9:13:
                    50:a7:74:26:dc:50:80:a9:4a:03:a0:2c:68:ca:e5:
                    38:7f:b2:ac:7d:05:2f:f5:ee:92:d1:3e:31:ee:11:
                    c3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:34:C1:47:02:FA:3E:E5:EF:13:F6:9A:C4:E6:C4:0C:CF:15:7C:23
            X509v3 Authority Key Identifier:
                keyid:5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/xTTBRwL6PuXvE_aaxObEDM8VfCM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48014

    Signature Algorithm: sha256WithRSAEncryption
         38:fd:b9:d6:f9:32:bf:9f:2d:47:df:ee:24:7e:e8:a0:d0:83:
         7a:c5:bf:ee:b8:99:33:d1:73:1f:ea:bc:65:fd:99:eb:02:0e:
         a4:7f:d6:e7:64:13:3f:29:4c:1f:92:30:7d:88:c3:90:78:33:
         77:ef:40:af:50:ac:6c:0e:de:e7:b4:ca:6a:10:27:9b:71:39:
         6d:ab:3d:83:a6:f8:63:13:fc:40:9d:d0:8d:b4:69:8a:fe:58:
         9b:fa:6f:89:b2:45:9a:01:d5:d2:d4:bb:bd:4c:81:b7:f1:56:
         33:ed:dc:b1:5f:20:58:b3:2c:eb:5c:ed:9f:f2:7b:9c:01:61:
         b2:e5:a5:27:ba:9e:57:2f:03:3e:5a:40:d2:8d:db:a5:62:23:
         44:42:d4:22:e7:da:e0:1e:ad:23:ce:45:9e:49:0c:be:10:49:
         8c:51:19:be:80:dd:3e:ed:8d:37:41:a7:df:8e:36:2a:0a:64:
         37:f3:57:ed:78:0a:0c:ce:7b:bc:8f:6d:e8:9b:74:28:27:ea:
         d8:d4:f3:06:ae:25:3a:2d:14:97:10:46:ae:f5:87:63:17:e8:
         c1:89:da:71:95:81:73:bd:12:96:17:3e:ea:72:24:1c:50:c8:
         bd:8e:55:ca:02:cb:15:ea:6c:98:ea:c9:5e:50:66:9e:24:f9:
         8e:37:23:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:02:38 2026 by rpki-client