Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/141f02-3249-4bdb-9e5f-55cc8765e840/1/7ZqISZcCHbaHwtwLkUD_r8agXsw.asa
File:                     7ZqISZcCHbaHwtwLkUD_r8agXsw.asa (raw, json)
Hash identifier:          dl1w2jg1byW481fc0haGqfo1j34GohFywTi+hYY0kWc=
Subject key identifier:   ED:9A:88:49:97:02:1D:B6:87:C2:DC:0B:91:40:FF:AF:C6:A0:5E:CC
Certificate issuer:       /CN=65048850e612cd23d6f0f4e4a4123c984aa9f6ea
Certificate serial:       01A0987656609F5C639F94EDE59F11FDFE8C
Authority key identifier: 65:04:88:50:E6:12:CD:23:D6:F0:F4:E4:A4:12:3C:98:4A:A9:F6:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/141f02-3249-4bdb-9e5f-55cc8765e840/1/7ZqISZcCHbaHwtwLkUD_r8agXsw.asa
Signing time:             Sun 13 Sep 2026 01:51:27 +0000
ASPA not before:          Sun 13 Sep 2026 01:51:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            213471
Providers:                AS: 945
                          AS: 7257
                          AS: 7719
                          AS: 9663
                          AS: 11967
                          AS: 41051
                          AS: 47272
                          AS: 63798
                          AS: 209533
                          AS: 211358
                          AS: 212895
                          AS: 214205
                          AS: 214481
                          AS: 215467
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/141f02-3249-4bdb-9e5f-55cc8765e840/1/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/141f02-3249-4bdb-9e5f-55cc8765e840/1/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:98:76:56:60:9f:5c:63:9f:94:ed:e5:9f:11:fd:fe:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65048850e612cd23d6f0f4e4a4123c984aa9f6ea
        Validity
            Not Before: Sep 13 01:51:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ed9a884997021db687c2dc0b9140ffafc6a05ecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ea:97:bd:8c:7e:98:c4:89:20:db:a3:16:6a:
                    32:d0:e4:7d:0f:8b:6d:92:20:51:73:f7:c6:5c:07:
                    cd:b6:42:83:d3:34:4a:9c:47:58:e6:ff:57:29:ad:
                    1d:e4:70:79:79:cc:bd:fb:ac:04:b2:8b:55:b0:8c:
                    4a:cc:6b:9e:ba:ad:0f:31:4d:da:58:b9:6a:53:59:
                    4f:5b:ef:8c:fd:7b:8a:8d:16:84:87:35:92:ab:fd:
                    98:f4:22:b8:4a:24:02:93:ba:89:47:15:8a:6b:1f:
                    f1:39:d7:1e:a8:0b:a0:ae:c2:5c:72:fb:2b:25:b5:
                    eb:b3:f4:b7:cf:21:ca:b6:60:cf:0f:75:6f:e4:e2:
                    c9:85:b2:35:0c:19:ed:36:11:da:63:05:c8:b7:e7:
                    54:a4:00:29:1f:03:0c:ac:cb:47:0c:85:7d:6f:4b:
                    cc:64:0b:2b:ea:23:33:cd:95:6d:6f:13:69:3d:2f:
                    6b:6c:97:34:84:aa:61:75:bc:cb:9c:4c:fd:5e:ff:
                    cb:57:12:9e:aa:c0:05:0a:d6:46:97:32:ee:56:2d:
                    b4:28:c9:6b:2b:c5:1d:0e:54:66:ad:b6:14:8b:db:
                    4f:56:98:ff:2e:0c:d1:59:7d:ad:83:f8:f4:fd:ee:
                    8f:82:f3:18:02:1f:5d:4f:e0:03:52:e0:9c:52:b0:
                    c4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:9A:88:49:97:02:1D:B6:87:C2:DC:0B:91:40:FF:AF:C6:A0:5E:CC
            X509v3 Authority Key Identifier:
                keyid:65:04:88:50:E6:12:CD:23:D6:F0:F4:E4:A4:12:3C:98:4A:A9:F6:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/141f02-3249-4bdb-9e5f-55cc8765e840/1/7ZqISZcCHbaHwtwLkUD_r8agXsw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/141f02-3249-4bdb-9e5f-55cc8765e840/1/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213471

    Signature Algorithm: sha256WithRSAEncryption
         44:fb:51:16:af:c0:7a:eb:87:33:d4:1a:e2:02:5d:24:c6:7c:
         bb:ea:ed:03:c3:c9:f7:02:5a:44:99:db:cb:f8:e7:4e:9d:05:
         04:af:42:c5:65:a9:83:16:0b:09:9a:e8:f9:9b:5d:41:96:52:
         3b:1e:55:1f:0b:3e:4d:41:77:10:48:1d:75:c1:9f:4e:98:f5:
         91:10:f6:d1:b0:ce:a9:13:4d:7e:dc:c5:47:1c:4d:62:18:78:
         92:26:0b:7b:fe:ea:c2:ca:b7:9d:f6:c6:2f:50:bd:c7:95:94:
         fb:16:ca:55:b2:8a:3d:41:9d:e6:46:f2:32:67:ba:21:f0:cb:
         d0:e8:97:5a:18:cb:25:3b:56:d3:97:8f:c4:b2:00:8e:32:01:
         07:15:b0:a9:73:f0:ba:9c:59:7a:d0:9d:8e:ed:67:20:01:08:
         99:75:7d:58:95:76:a7:c8:d2:a4:10:81:0a:ae:3e:85:91:63:
         28:f6:62:ee:d7:de:dc:58:6d:32:a4:9f:af:94:a4:a1:e8:90:
         52:9d:26:2e:d2:28:3e:cd:dd:60:9d:88:08:41:ed:28:0d:f7:
         7a:95:dd:ec:e7:19:ef:14:05:f6:98:2f:bc:4b:28:a4:b4:7c:
         27:66:4b:f9:c7:4a:66:10:b2:81:49:1e:a1:00:11:14:17:31:
         2b:e4:ed:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:27:00 2026 by rpki-client