Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/4vUJXm8eNnXrmzWPEJu4hyJ74bE.asa
File:                     4vUJXm8eNnXrmzWPEJu4hyJ74bE.asa (raw, json)
Hash identifier:          E4sIlw3AAVJ0Z5hHy6GY0z+mLPDpAHtRm2YAKcmDuRI=
Subject key identifier:   E2:F5:09:5E:6F:1E:36:75:EB:9B:35:8F:10:9B:B8:87:22:7B:E1:B1
Certificate issuer:       /CN=4b53f9567f6d6ad89412c0515f74647612dce04a
Certificate serial:       019C4BFC9FD4FE1FED1BF642CA4552711B8F
Authority key identifier: 4B:53:F9:56:7F:6D:6A:D8:94:12:C0:51:5F:74:64:76:12:DC:E0:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/4vUJXm8eNnXrmzWPEJu4hyJ74bE.asa
Signing time:             Wed 11 Feb 2026 09:16:13 +0000
ASPA not before:          Wed 11 Feb 2026 09:16:13 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            213320
Providers:                AS: 39642
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:4b:fc:9f:d4:fe:1f:ed:1b:f6:42:ca:45:52:71:1b:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b53f9567f6d6ad89412c0515f74647612dce04a
        Validity
            Not Before: Feb 11 09:16:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e2f5095e6f1e3675eb9b358f109bb887227be1b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c2:c1:4f:9a:30:41:45:dd:aa:dc:ce:b7:b0:
                    69:f3:97:b9:9c:60:bf:90:bc:18:02:28:20:c6:f5:
                    14:47:64:1d:c2:f5:ee:a0:15:34:2e:96:d0:9f:51:
                    40:4a:61:ca:92:53:cd:0c:cd:f1:f6:56:a8:90:6c:
                    2a:64:e7:1d:3c:72:97:2a:5c:ba:c3:6c:e0:da:d0:
                    6e:7b:0f:4e:6f:10:87:07:05:87:52:8c:88:65:62:
                    21:f9:f9:03:59:d4:9b:cd:aa:2c:3e:a2:32:9d:a4:
                    71:1b:b0:4c:17:da:28:a8:d4:48:1f:81:21:c4:6a:
                    e9:81:36:7e:a6:bb:9b:30:b5:b7:aa:0e:57:6a:ae:
                    cf:4e:04:ac:22:79:5b:34:08:8b:69:97:ec:90:9a:
                    72:49:43:c1:6b:7a:4d:ed:29:13:c8:b2:88:19:0f:
                    2f:8c:89:f0:22:65:38:6d:ce:6b:f6:8b:47:19:41:
                    3e:43:d1:03:12:b9:e8:bf:84:00:7b:c6:da:57:54:
                    67:c0:0c:70:31:66:6b:e6:df:1b:7a:75:f4:35:f6:
                    55:ce:9a:cc:bb:f2:92:ea:c8:b5:cf:eb:a5:0f:19:
                    22:a5:b9:78:28:a6:38:c8:5d:e8:98:a3:d7:20:0e:
                    02:f3:16:ec:22:9b:28:87:a5:4e:11:a1:92:c5:59:
                    d7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F5:09:5E:6F:1E:36:75:EB:9B:35:8F:10:9B:B8:87:22:7B:E1:B1
            X509v3 Authority Key Identifier:
                keyid:4B:53:F9:56:7F:6D:6A:D8:94:12:C0:51:5F:74:64:76:12:DC:E0:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/4vUJXm8eNnXrmzWPEJu4hyJ74bE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213320

    Signature Algorithm: sha256WithRSAEncryption
         4e:ae:f8:b1:f7:39:fc:45:f6:12:e8:55:e7:ea:b5:b7:c8:c2:
         93:9c:36:48:aa:10:5f:1d:69:55:e5:59:81:c2:63:67:e6:c1:
         11:82:f3:f8:53:33:12:84:4c:81:35:58:e2:9c:70:ea:7d:2b:
         a3:73:df:eb:c7:44:27:3d:42:23:7f:64:d6:3b:de:ce:e6:98:
         6e:60:d4:d4:a1:ac:ba:f9:d2:85:07:c7:c3:f6:92:5a:31:6e:
         eb:46:a9:58:fa:9b:41:91:43:77:79:30:fa:52:df:7d:dc:40:
         7a:35:e9:43:01:26:96:38:a8:34:01:62:f4:05:6b:2b:8b:90:
         4b:1b:41:b9:54:18:be:8d:29:2d:55:ce:43:8e:ed:3c:23:70:
         30:b7:92:e4:3e:12:60:6a:ab:f0:cb:0e:db:26:be:ab:29:17:
         ea:dc:ec:dd:24:1e:d7:d3:84:03:02:77:2c:88:b8:bc:34:20:
         69:0d:09:35:cc:b6:b9:d2:a7:5c:73:90:89:62:4b:99:34:75:
         61:9f:5b:24:28:42:9d:27:67:b7:37:64:32:3f:7c:e5:61:2e:
         0d:03:36:dc:e6:8a:11:b8:39:67:f7:72:f0:17:44:e5:56:00:
         05:d3:92:41:aa:c3:29:27:54:d9:e7:ee:a3:24:6d:f2:e6:43:
         b0:da:4a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:03:19 2026 by rpki-client